blun-king-cli 9.1.19 → 9.1.20

package/blun.mjs

@@ -1,22 +1,22 @@
 #!/usr/bin/env node
-// BLUN_BUILD_INPUT_SHA256:b991ad9b5744a4c7edb806fc71b837f5d58205791bc5979c4e05b6b5f3564456
+// BLUN_BUILD_INPUT_SHA256:174c2b539d18926415abba5d8148da0982699f4c5f397fc12a30c3d6718ac8ea
 import { fileURLToPath as __cjsShimFileURLToPath } from 'node:url';
 import { dirname as __cjsShimDirname } from 'node:path';
 const __filename = __cjsShimFileURLToPath(import.meta.url);
 const __dirname = __cjsShimDirname(__filename);
 import { createRequire } from "node:module";
 import crypto$1, { createHash, randomBytes, randomInt, randomUUID, timingSafeEqual } from "node:crypto";
-import * as fs$17 from "node:fs";
+import * as fs$16 from "node:fs";
 import Kt, { accessSync, appendFileSync, chmodSync, closeSync, constants, copyFileSync, createReadStream, createWriteStream, existsSync, fsyncSync, linkSync, lstatSync, mkdirSync, openSync, promises, readFileSync, readSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync, writeSync } from "node:fs";
-import * as path$17 from "node:path";
+import * as path$16 from "node:path";
 import path, { basename, dirname, extname, isAbsolute, join, normalize, posix, relative, resolve, sep, win32 } from "node:path";
 import { Blob as Blob$1, Buffer as Buffer$1, File as File$1 } from "node:buffer";
 import * as nodeOs from "node:os";
 import os, { arch, homedir, hostname, networkInterfaces, platform, release, tmpdir, type, userInfo } from "node:os";
-import fs, { access, appendFile, chmod, constants as constants$1, copyFile, cp, link, lstat, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
+import ro, { access, appendFile, chmod, constants as constants$1, copyFile, cp, link, lstat, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import { execFile, execFileSync, execSync, spawn, spawnSync } from "node:child_process";
 import * as sysPath from "path";
-import path$1, { basename as basename$1, dirname as dirname$1, join as join$1, parse } from "path";
+import js, { basename as basename$1, dirname as dirname$1, join as join$1, parse } from "path";
 import I, { existsSync as existsSync$1, promises as promises$1, readdirSync as readdirSync$1, stat as stat$1, statSync as statSync$1, unwatchFile, watch, watchFile } from "fs";
 import { Readable } from "stream";
 import zi from "assert";
@@ -1167,7 +1167,7 @@ function normalizeBlunToolSchema(schema) {
 }
 function ensureBlunPropertyTypes(schema) {
 	const normalized = cloneJsonValue(schema);
-	if (!isRecord$22(normalized)) throw new Error("JSON Schema root must normalize to an object.");
+	if (!isRecord$23(normalized)) throw new Error("JSON Schema root must normalize to an object.");
 	recurseSchema(normalized);
 	return normalized;
 }
@@ -1228,7 +1228,7 @@ function resolveLocalJsonPointer(root, ref) {
 	let current = root;
 	for (const rawPart of ref.slice(2).split("/")) {
 		const part = unescapeJsonPointerPart(rawPart);
-		if (isRecord$22(current)) {
+		if (isRecord$23(current)) {
 			if (!hasOwn(current, part)) return { found: false };
 			current = current[part];
 		} else if (Array.isArray(current)) {
@@ -1250,20 +1250,20 @@ function parseJsonPointerArrayIndex(part) {
 	return Number(part);
 }
 function recurseSchema(node) {
-	if (!isRecord$22(node)) return;
+	if (!isRecord$23(node)) return;
 	visitChildSchemas(node, normalizeProperty);
 }
 function visitChildSchemas(node, visit) {
 	for (const { key, kind } of CHILD_SCHEMA_SLOTS) {
 		const value = node[key];
 		if (kind === "single") {
-			if (isRecord$22(value)) visit(value);
+			if (isRecord$23(value)) visit(value);
 		} else if (kind === "array") {
 			if (Array.isArray(value)) for (const item of value) visit(item);
 		} else if (kind === "map") {
-			if (isRecord$22(value)) for (const item of Object.values(value)) visit(item);
+			if (isRecord$23(value)) for (const item of Object.values(value)) visit(item);
 		} else if (kind === "schema-or-array") {
-			if (isRecord$22(value)) visit(value);
+			if (isRecord$23(value)) visit(value);
 			else if (Array.isArray(value)) for (const item of value) visit(item);
 		}
 	}
@@ -1275,7 +1275,7 @@ function childSchemaKeysForParentType(parentType) {
 	});
 }
 function normalizeProperty(node) {
-	if (!isRecord$22(node)) return;
+	if (!isRecord$23(node)) return;
 	if (!hasOwn(node, "type") && !hasAnyKey(node, TYPE_COMPLETION_SKIP_KEYS)) {
 		const enumValues = node["enum"];
 		if (Array.isArray(enumValues) && enumValues.length > 0) node["type"] = inferTypeFromValues(enumValues);
@@ -1359,14 +1359,14 @@ function hasAnyKey(obj, keys) {
 }
 function cloneJsonValue(value) {
 	if (Array.isArray(value)) return value.map((item) => cloneJsonValue(item));
-	if (isRecord$22(value)) {
+	if (isRecord$23(value)) {
 		const cloned = {};
 		for (const [key, child] of Object.entries(value)) cloned[key] = cloneJsonValue(child);
 		return cloned;
 	}
 	return value;
 }
-function isRecord$22(value) {
+function isRecord$23(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function hasOwn(obj, key) {
@@ -1587,7 +1587,7 @@ function isProviderRateLimitError(error) {
 	if (error instanceof APIProviderRateLimitError) return true;
 	const statusCode = getStatusCode(error);
 	if (statusCode !== void 0) return statusCode === 429;
-	const lowerMessage = errorMessage$9(error).toLowerCase();
+	const lowerMessage = errorMessage$13(error).toLowerCase();
 	return PROVIDER_RATE_LIMIT_MESSAGE_PATTERNS.some((pattern) => pattern.test(lowerMessage));
 }
 function getStatusCode(error) {
@@ -1605,7 +1605,7 @@ function getStatusCode(error) {
 	const responseStatus = responseRecord["status"];
 	return typeof responseStatus === "number" ? responseStatus : void 0;
 }
-function errorMessage$9(error) {
+function errorMessage$13(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 var ChatProviderError, APIConnectionError, APITimeoutError, APIStatusError, APIContextOverflowError, APIProviderRateLimitError, APIPaymentRequiredError, APIEmptyResponseError, CompactionStallError$1, NETWORK_RE, TIMEOUT_RE, CONTEXT_OVERFLOW_MESSAGE_PATTERNS, PROVIDER_RATE_LIMIT_MESSAGE_PATTERNS, PROVIDER_QUOTA_EXHAUSTED_MESSAGE_PATTERN, PROVIDER_QUOTA_EXHAUSTED_CONTEXT_PATTERNS, TOOL_EXCHANGE_ADJACENCY_MESSAGE_PATTERNS, STRUCTURAL_REQUEST_MESSAGE_PATTERNS;
@@ -1824,7 +1824,7 @@ function retryAfterHeaderMs(headers) {
 	const fromDate = Math.max(0, retryAt - Date.now());
 	return fromDate <= MAX_RETRY_DELAY_MS ? fromDate : null;
 }
-async function readJson(response) {
+async function readJson$1(response) {
 	const body = await response.text();
 	if (body.trim().length === 0) throw new ChatProviderError("Provider returned an empty JSON response.");
 	try {
@@ -1924,7 +1924,7 @@ var init_fetch_http_client = __esmMin((() => {
 				signal: options?.signal
 			}, options?.maxRetries);
 			if (isStream) return parseServerSentJson(response);
-			return readJson(response);
+			return readJson$1(response);
 		}
 		async uploadFile(params, options) {
 			const form = new FormData();
@@ -1932,7 +1932,7 @@ var init_fetch_http_client = __esmMin((() => {
 			form.append("file", params.file);
 			const headers = this.requestHeaders();
 			headers.delete("content-type");
-			const uploaded = await readJson(await this.fetchWithRetries("/files", {
+			const uploaded = await readJson$1(await this.fetchWithRetries("/files", {
 				method: "POST",
 				headers,
 				body: form,
@@ -2072,11 +2072,11 @@ var init_blun_files = __esmMin((() => {
 		async uploadVideo(input, options) {
 			let file;
 			if (typeof input === "string") {
-				if (!fs$17.existsSync(input)) throw new ChatProviderError(`Video file not found: ${input}`);
-				const filename = path$17.basename(input);
+				if (!fs$16.existsSync(input)) throw new ChatProviderError(`Video file not found: ${input}`);
+				const filename = path$16.basename(input);
 				const mimeType = guessMimeTypeFromExt(filename);
 				if (mimeType === void 0 || !mimeType.startsWith("video/")) throw new ChatProviderError(`BlunFiles.uploadVideo: file extension does not indicate a video type: ${filename}`);
-				const data = await fs$17.promises.readFile(input);
+				const data = await fs$16.promises.readFile(input);
 				file = new File$1([new Blob$1([new Uint8Array(data)], { type: mimeType })], filename, { type: mimeType });
 			} else {
 				if (!input.mimeType.startsWith("video/")) throw new ChatProviderError(`Expected a video mime type, got ${input.mimeType}`);
@@ -5436,16 +5436,16 @@ function esc(str) {
 function slugify(input) {
 	return input.toLowerCase().trim().replace(/[^\w\s-]/g, "").replace(/[\s_-]+/g, "-").replace(/^-+|-+$/g, "");
 }
-function isObject$4(data) {
+function isObject$5(data) {
 	return typeof data === "object" && data !== null && !Array.isArray(data);
 }
 function isPlainObject$4(o) {
-	if (isObject$4(o) === false) return false;
+	if (isObject$5(o) === false) return false;
 	const ctor = o.constructor;
 	if (ctor === void 0) return true;
 	if (typeof ctor !== "function") return true;
 	const prot = ctor.prototype;
-	if (isObject$4(prot) === false) return false;
+	if (isObject$5(prot) === false) return false;
 	if (Object.prototype.hasOwnProperty.call(prot, "isPrototypeOf") === false) return false;
 	return true;
 }
@@ -5454,7 +5454,7 @@ function shallowClone(o) {
 	if (Array.isArray(o)) return [...o];
 	return o;
 }
-function escapeRegex$2(str) {
+function escapeRegex$3(str) {
 	return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function clone$1(inst, def, params) {
@@ -6201,7 +6201,7 @@ var init_checks$2 = __esmMin((() => {
 	});
 	$ZodCheckIncludes = /* @__PURE__ */ $constructor("$ZodCheckIncludes", (inst, def) => {
 		$ZodCheck.init(inst, def);
-		const escapedRegex = escapeRegex$2(def.includes);
+		const escapedRegex = escapeRegex$3(def.includes);
 		const pattern = new RegExp(typeof def.position === "number" ? `^.{${def.position}}${escapedRegex}` : escapedRegex);
 		def.pattern = pattern;
 		inst._zod.onattach.push((inst) => {
@@ -6224,7 +6224,7 @@ var init_checks$2 = __esmMin((() => {
 	});
 	$ZodCheckStartsWith = /* @__PURE__ */ $constructor("$ZodCheckStartsWith", (inst, def) => {
 		$ZodCheck.init(inst, def);
-		const pattern = new RegExp(`^${escapeRegex$2(def.prefix)}.*`);
+		const pattern = new RegExp(`^${escapeRegex$3(def.prefix)}.*`);
 		def.pattern ?? (def.pattern = pattern);
 		inst._zod.onattach.push((inst) => {
 			const bag = inst._zod.bag;
@@ -6246,7 +6246,7 @@ var init_checks$2 = __esmMin((() => {
 	});
 	$ZodCheckEndsWith = /* @__PURE__ */ $constructor("$ZodCheckEndsWith", (inst, def) => {
 		$ZodCheck.init(inst, def);
-		const pattern = new RegExp(`.*${escapeRegex$2(def.suffix)}$`);
+		const pattern = new RegExp(`.*${escapeRegex$3(def.suffix)}$`);
 		def.pattern ?? (def.pattern = pattern);
 		inst._zod.onattach.push((inst) => {
 			const bag = inst._zod.bag;
@@ -7008,7 +7008,7 @@ var init_schemas$2 = __esmMin((() => {
 			}
 			return propValues;
 		});
-		const isObject = isObject$4;
+		const isObject = isObject$5;
 		const catchall = def.catchall;
 		let value;
 		inst._zod.parse = (payload, ctx) => {
@@ -7108,7 +7108,7 @@ var init_schemas$2 = __esmMin((() => {
 			return (payload, ctx) => fn(shape, payload, ctx);
 		};
 		let fastpass;
-		const isObject = isObject$4;
+		const isObject = isObject$5;
 		const jit = !globalConfig.jitless;
 		const fastEnabled = jit && allowsEval.value;
 		const catchall = def.catchall;
@@ -7203,7 +7203,7 @@ var init_schemas$2 = __esmMin((() => {
 		});
 		inst._zod.parse = (payload, ctx) => {
 			const input = payload.value;
-			if (!isObject$4(input)) {
+			if (!isObject$5(input)) {
 				payload.issues.push({
 					code: "invalid_type",
 					expected: "object",
@@ -7341,7 +7341,7 @@ var init_schemas$2 = __esmMin((() => {
 		const values = getEnumValues(def.entries);
 		const valuesSet = new Set(values);
 		inst._zod.values = valuesSet;
-		inst._zod.pattern = new RegExp(`^(${values.filter((k) => propertyKeyTypes.has(typeof k)).map((o) => typeof o === "string" ? escapeRegex$2(o) : o.toString()).join("|")})$`);
+		inst._zod.pattern = new RegExp(`^(${values.filter((k) => propertyKeyTypes.has(typeof k)).map((o) => typeof o === "string" ? escapeRegex$3(o) : o.toString()).join("|")})$`);
 		inst._zod.parse = (payload, _ctx) => {
 			const input = payload.value;
 			if (valuesSet.has(input)) return payload;
@@ -7359,7 +7359,7 @@ var init_schemas$2 = __esmMin((() => {
 		if (def.values.length === 0) throw new Error("Cannot create literal schema with no valid values");
 		const values = new Set(def.values);
 		inst._zod.values = values;
-		inst._zod.pattern = new RegExp(`^(${def.values.map((o) => typeof o === "string" ? escapeRegex$2(o) : o ? escapeRegex$2(o.toString()) : String(o)).join("|")})$`);
+		inst._zod.pattern = new RegExp(`^(${def.values.map((o) => typeof o === "string" ? escapeRegex$3(o) : o ? escapeRegex$3(o.toString()) : String(o)).join("|")})$`);
 		inst._zod.parse = (payload, _ctx) => {
 			const input = payload.value;
 			if (values.has(input)) return payload;
@@ -9987,6 +9987,7 @@ var init_schema = __esmMin((() => {
 	ServicesConfigSchema = object({
 		blunSearch: BlunServiceConfigSchema.optional(),
 		blunFetch: BlunServiceConfigSchema.optional(),
+		blunMedia: BlunServiceConfigSchema.optional(),
 		visionReader: VisionReaderConfigSchema.optional()
 	});
 	McpServerCommonFields = {
@@ -10081,6 +10082,7 @@ var init_schema = __esmMin((() => {
 	ServicesConfigPatchSchema = object({
 		blunSearch: BlunServiceConfigPatchSchema.optional(),
 		blunFetch: BlunServiceConfigPatchSchema.optional(),
+		blunMedia: BlunServiceConfigPatchSchema.optional(),
 		visionReader: VisionReaderConfigPatchSchema.optional()
 	});
 	BlunConfigPatchSchema = object({
@@ -10431,7 +10433,7 @@ function tokenFromWire(wire) {
 var init_types$17 = __esmMin((() => {}));
 //#endregion
 //#region ../../packages/oauth/src/utils.ts
-function isRecord$21(value) {
+function isRecord$22(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var init_utils$1 = __esmMin((() => {}));
@@ -10755,7 +10757,7 @@ var init_storage = __esmMin((() => {
 			} catch {
 				return;
 			}
-			if (!isRecord$21(parsed)) return void 0;
+			if (!isRecord$22(parsed)) return void 0;
 			return tokenFromWire(parsed);
 		}
 		async save(name, token) {
@@ -10849,15 +10851,15 @@ function extractApiErrorMessage(value) {
 		}
 		return;
 	}
-	if (!isRecord$21(value)) return void 0;
+	if (!isRecord$22(value)) return void 0;
 	for (const key of DIRECT_ERROR_KEYS) {
 		const message = stringField$4(value, key);
 		if (message !== void 0) return message;
 	}
 	const error = value["error"];
-	const errorString = nonEmptyString$6(error);
+	const errorString = nonEmptyString$7(error);
 	if (errorString !== void 0) return errorString;
-	if (isRecord$21(error)) for (const key of NESTED_ERROR_KEYS) {
+	if (isRecord$22(error)) for (const key of NESTED_ERROR_KEYS) {
 		const message = stringField$4(error, key);
 		if (message !== void 0) return message;
 	}
@@ -10877,9 +10879,9 @@ async function readApiErrorMessage(response, fallback) {
 	return extractApiErrorMessage(parsed) ?? fallback;
 }
 function stringField$4(record, key) {
-	return nonEmptyString$6(record[key]);
+	return nonEmptyString$7(record[key]);
 }
-function nonEmptyString$6(value) {
+function nonEmptyString$7(value) {
 	if (typeof value !== "string") return void 0;
 	const trimmed = value.trim();
 	return trimmed.length > 0 ? trimmed : void 0;
@@ -10947,7 +10949,7 @@ async function postForm(url, params, deviceHeaders, options) {
 	let data = {};
 	try {
 		const parsed = await response.json();
-		if (isRecord$21(parsed)) data = parsed;
+		if (isRecord$22(parsed)) data = parsed;
 	} catch {}
 	return {
 		status,
@@ -11423,7 +11425,7 @@ var require_clone$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region ../../node_modules/.pnpm/graceful-fs@4.2.11/node_modules/graceful-fs/graceful-fs.js
 var require_graceful_fs = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var fs$16 = __require("fs");
+	var fs$15 = __require("fs");
 	var polyfills = require_polyfills();
 	var legacy = require_legacy_streams();
 	var clone = require_clone$1();
@@ -11452,36 +11454,36 @@ var require_graceful_fs = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		m = "GFS4: " + m.split(/\n/).join("\nGFS4: ");
 		console.error(m);
 	};
-	if (!fs$16[gracefulQueue]) {
-		publishQueue(fs$16, global[gracefulQueue] || []);
-		fs$16.close = (function(fs$close) {
+	if (!fs$15[gracefulQueue]) {
+		publishQueue(fs$15, global[gracefulQueue] || []);
+		fs$15.close = (function(fs$close) {
 			function close(fd, cb) {
-				return fs$close.call(fs$16, fd, function(err) {
+				return fs$close.call(fs$15, fd, function(err) {
 					if (!err) resetQueue();
 					if (typeof cb === "function") cb.apply(this, arguments);
 				});
 			}
 			Object.defineProperty(close, previousSymbol, { value: fs$close });
 			return close;
-		})(fs$16.close);
-		fs$16.closeSync = (function(fs$closeSync) {
+		})(fs$15.close);
+		fs$15.closeSync = (function(fs$closeSync) {
 			function closeSync(fd) {
-				fs$closeSync.apply(fs$16, arguments);
+				fs$closeSync.apply(fs$15, arguments);
 				resetQueue();
 			}
 			Object.defineProperty(closeSync, previousSymbol, { value: fs$closeSync });
 			return closeSync;
-		})(fs$16.closeSync);
+		})(fs$15.closeSync);
 		if (/\bgfs4\b/i.test(process.env.NODE_DEBUG || "")) process.on("exit", function() {
-			debug(fs$16[gracefulQueue]);
-			__require("assert").equal(fs$16[gracefulQueue].length, 0);
+			debug(fs$15[gracefulQueue]);
+			__require("assert").equal(fs$15[gracefulQueue].length, 0);
 		});
 	}
-	if (!global[gracefulQueue]) publishQueue(global, fs$16[gracefulQueue]);
-	module.exports = patch(clone(fs$16));
-	if (process.env.TEST_GRACEFUL_FS_GLOBAL_PATCH && !fs$16.__patched) {
-		module.exports = patch(fs$16);
-		fs$16.__patched = true;
+	if (!global[gracefulQueue]) publishQueue(global, fs$15[gracefulQueue]);
+	module.exports = patch(clone(fs$15));
+	if (process.env.TEST_GRACEFUL_FS_GLOBAL_PATCH && !fs$15.__patched) {
+		module.exports = patch(fs$15);
+		fs$15.__patched = true;
 	}
 	function patch(fs) {
 		polyfills(fs);
@@ -11736,23 +11738,23 @@ var require_graceful_fs = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	}
 	function enqueue(elem) {
 		debug("ENQUEUE", elem[0].name, elem[1]);
-		fs$16[gracefulQueue].push(elem);
+		fs$15[gracefulQueue].push(elem);
 		retry();
 	}
 	var retryTimer;
 	function resetQueue() {
 		var now = Date.now();
-		for (var i = 0; i < fs$16[gracefulQueue].length; ++i) if (fs$16[gracefulQueue][i].length > 2) {
-			fs$16[gracefulQueue][i][3] = now;
-			fs$16[gracefulQueue][i][4] = now;
+		for (var i = 0; i < fs$15[gracefulQueue].length; ++i) if (fs$15[gracefulQueue][i].length > 2) {
+			fs$15[gracefulQueue][i][3] = now;
+			fs$15[gracefulQueue][i][4] = now;
 		}
 		retry();
 	}
 	function retry() {
 		clearTimeout(retryTimer);
 		retryTimer = void 0;
-		if (fs$16[gracefulQueue].length === 0) return;
-		var elem = fs$16[gracefulQueue].shift();
+		if (fs$15[gracefulQueue].length === 0) return;
+		var elem = fs$15[gracefulQueue].shift();
 		var fn = elem[0];
 		var args = elem[1];
 		var err = elem[2];
@@ -11771,7 +11773,7 @@ var require_graceful_fs = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			if (sinceAttempt >= Math.min(sinceStart * 1.2, 100)) {
 				debug("RETRY", fn.name, args);
 				fn.apply(null, args.concat([startTime]));
-			} else fs$16[gracefulQueue].push(elem);
+			} else fs$15[gracefulQueue].push(elem);
 		}
 		if (retryTimer === void 0) retryTimer = setTimeout(retry, 0);
 	}
@@ -12123,7 +12125,7 @@ var require_mtime_precision = /* @__PURE__ */ __commonJSMin(((exports, module) =
 //#endregion
 //#region ../../node_modules/.pnpm/proper-lockfile@4.1.2/node_modules/proper-lockfile/lib/lockfile.js
 var require_lockfile = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const path$16 = __require("path");
+	const path$15 = __require("path");
 	const fs = require_graceful_fs();
 	const retry = require_retry$3();
 	const onExit = require_signal_exit();
@@ -12133,7 +12135,7 @@ var require_lockfile = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		return options.lockfilePath || `${file}.lock`;
 	}
 	function resolveCanonicalPath(file, options, callback) {
-		if (!options.realpath) return callback(null, path$16.resolve(file));
+		if (!options.realpath) return callback(null, path$15.resolve(file));
 		options.fs.realpath(file, callback);
 	}
 	function acquireLock(file, options, callback) {
@@ -12859,9 +12861,9 @@ function blunContextWindowsUrl(oauthHost) {
 	return `${(oauthHost ?? process.env["BLUN_OAUTH_HOST"] ?? "https://account.blun.ai").replace(/\/+$/, "")}/api/verbrauch/tarife`;
 }
 function parseManagedContextWindow(payload, plan) {
-	if (!isRecord$21(payload)) return void 0;
+	if (!isRecord$22(payload)) return void 0;
 	const contextWindows = payload["kontext"];
-	if (!isRecord$21(contextWindows)) return void 0;
+	if (!isRecord$22(contextWindows)) return void 0;
 	const value = contextWindows[plan];
 	return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : void 0;
 }
@@ -12896,7 +12898,7 @@ function parseManagedUsagePayload(payload) {
 	const plan = typeof rec["plan"] === "string" && rec["plan"].trim().length > 0 ? rec["plan"].trim() : void 0;
 	const contextWindowTokens = managedContextWindowFrom(rec);
 	const unlimited = rec["unlimited"] === true;
-	const stand = isRecord$21(rec["stand"]) ? rec["stand"] : void 0;
+	const stand = isRecord$22(rec["stand"]) ? rec["stand"] : void 0;
 	if (stand !== void 0) for (const [sourceKey, id, label] of ACCOUNT_USAGE_WINDOWS) {
 		const row = toAccountUsageRow(stand[sourceKey], id, label, unlimited);
 		if (row !== null) limits.push(row);
@@ -12906,9 +12908,9 @@ function parseManagedUsagePayload(payload) {
 		const item = rawLimits[idx];
 		if (!item || typeof item !== "object") continue;
 		const detailRaw = item["detail"];
-		const detail = isRecord$21(detailRaw) ? detailRaw : item;
+		const detail = isRecord$22(detailRaw) ? detailRaw : item;
 		const windowRaw = item["window"];
-		const row = toUsageRow(detail, limitLabel(item, detail, isRecord$21(windowRaw) ? windowRaw : {}, idx));
+		const row = toUsageRow(detail, limitLabel(item, detail, isRecord$22(windowRaw) ? windowRaw : {}, idx));
 		if (row !== null) limits.push(row);
 	}
 	return {
@@ -12932,7 +12934,7 @@ function managedContextWindowFrom(payload) {
 	return values.every((value) => value === first) ? first : void 0;
 }
 function toAccountUsageRow(raw, id, label, accountUnlimited) {
-	if (!isRecord$21(raw)) return null;
+	if (!isRecord$22(raw)) return null;
 	const used = toInt(raw["verbraucht"]);
 	const unlimited = accountUnlimited || raw["unlimited"] === true;
 	const fraction = raw["anteil"];
@@ -12965,7 +12967,7 @@ function toAccountUsageRow(raw, id, label, accountUnlimited) {
 	};
 }
 function toUsageRow(raw, defaultLabel) {
-	if (!isRecord$21(raw)) return null;
+	if (!isRecord$22(raw)) return null;
 	const unlimited = raw["unlimited"] === true;
 	const limit = toInt(raw["limit"]);
 	let used = toInt(raw["used"]);
@@ -13086,7 +13088,7 @@ function isManagedQuotaErrorMessage(message) {
 	return /you(?:'|’)?ve reached your usage limit/.test(normalized) && /billing cycle|quota will be (?:refreshed|reset)|purchase extra usage/.test(normalized);
 }
 function hasManagedUsageShape(payload) {
-	if (!isRecord$21(payload)) return false;
+	if (!isRecord$22(payload)) return false;
 	let recognized = false;
 	if ("context_window_tokens" in payload || "contextWindowTokens" in payload) {
 		recognized = true;
@@ -13102,15 +13104,15 @@ function hasManagedUsageShape(payload) {
 		if (!Array.isArray(limits)) return false;
 		for (let index = 0; index < limits.length; index++) {
 			const item = limits[index];
-			if (!isRecord$21(item)) return false;
-			const detail = isRecord$21(item["detail"]) ? item["detail"] : item;
-			if (toUsageRow(detail, limitLabel(item, detail, isRecord$21(item["window"]) ? item["window"] : {}, index)) === null) return false;
+			if (!isRecord$22(item)) return false;
+			const detail = isRecord$22(item["detail"]) ? item["detail"] : item;
+			if (toUsageRow(detail, limitLabel(item, detail, isRecord$22(item["window"]) ? item["window"] : {}, index)) === null) return false;
 		}
 	}
 	if ("stand" in payload) {
 		recognized = true;
 		const stand = payload["stand"];
-		if (!isRecord$21(stand)) return false;
+		if (!isRecord$22(stand)) return false;
 		const windows = ACCOUNT_USAGE_WINDOWS.filter(([sourceKey]) => sourceKey in stand);
 		if (windows.length === 0) return false;
 		const unlimited = payload["unlimited"] === true;
@@ -13206,8 +13208,8 @@ function userExtras(existing, remoteOwnedFields) {
 	return out;
 }
 function mergeRefreshedModelAlias(existing, remote, remoteOwnedFields) {
-	const current = isRecord$21(existing) ? existing : {};
-	const overrides = cloneOverrides(isRecord$21(current["overrides"]) ? current["overrides"] : void 0);
+	const current = isRecord$22(existing) ? existing : {};
+	const overrides = cloneOverrides(isRecord$22(current["overrides"]) ? current["overrides"] : void 0);
 	return {
 		...userExtras(current, remoteOwnedFields),
 		...remote,
@@ -13389,7 +13391,7 @@ function parseModelContextLength(item, modelId) {
 	return values[0];
 }
 function toModelInfo(item) {
-	if (!isRecord$21(item) || typeof item["id"] !== "string" || item["id"].length === 0) return;
+	if (!isRecord$22(item) || typeof item["id"] !== "string" || item["id"].length === 0) return;
 	const contextLength = parseModelContextLength(item, item["id"]);
 	const displayName = item["display_name"];
 	const normalizedDisplayName = typeof displayName === "string" && displayName.length > 0 ? displayName : void 0;
@@ -13476,7 +13478,7 @@ async function fetchManagedBlunCodeModels(options) {
 			throw new Error(message);
 		}
 		const payload = await response.json();
-		if (!isRecord$21(payload) || !Array.isArray(payload["data"])) throw new Error(`Unexpected models response for ${baseUrl}.`);
+		if (!isRecord$22(payload) || !Array.isArray(payload["data"])) throw new Error(`Unexpected models response for ${baseUrl}.`);
 		return payload["data"].map((item) => toModelInfo(item)).filter((item) => item !== void 0);
 	}
 	throw new Error(`Failed to list BLUN models for ${baseUrl}.`);
@@ -13519,11 +13521,11 @@ function applyManagedBlunCodeConfig(config, options) {
 		apiKey
 	};
 	const upstreamKeys = new Set(options.models.map((m) => managedModelKey(m.id)));
-	for (const [key, model] of Object.entries(existingModels)) if (RETIRED_BLUN_MODEL_KEYS.has(key) || isRecord$21(model) && model["provider"] === "managed:blun" && !upstreamKeys.has(key)) delete existingModels[key];
+	for (const [key, model] of Object.entries(existingModels)) if (RETIRED_BLUN_MODEL_KEYS.has(key) || isRecord$22(model) && model["provider"] === "managed:blun" && !upstreamKeys.has(key)) delete existingModels[key];
 	for (const model of options.models) {
 		const capabilities = capabilitiesForModel(model);
 		const key = managedModelKey(model.id);
-		const existing = isRecord$21(existingModels[key]) ? existingModels[key] : {};
+		const existing = isRecord$22(existingModels[key]) ? existingModels[key] : {};
 		const supportsAdaptiveThinking = capabilities?.includes("thinking") === true || capabilities?.includes("always_thinking") === true;
 		existingModels[key] = mergeRefreshedModelAlias(existing, {
 			provider: BLUN_PROVIDER_NAME$1,
@@ -13555,6 +13557,10 @@ function applyManagedBlunCodeConfig(config, options) {
 		blunFetch: {
 			baseUrl: `${auxiliaryBaseUrl}/fetch`,
 			...serviceCredential
+		},
+		blunMedia: {
+			baseUrl,
+			...serviceCredential
 		}
 	};
 	return {
@@ -13567,7 +13573,7 @@ function applyManagedBlunCodeLogoutConfig(config) {
 	let removedDefaultModel = false;
 	const existingModels = config.models ?? {};
 	for (const [key, model] of Object.entries(existingModels)) {
-		if (!isRecord$21(model) || model["provider"] !== "managed:blun") continue;
+		if (!isRecord$22(model) || model["provider"] !== "managed:blun") continue;
 		delete existingModels[key];
 		if (config.defaultModel === key) removedDefaultModel = true;
 	}
@@ -13577,6 +13583,7 @@ function applyManagedBlunCodeLogoutConfig(config) {
 	if (config.services !== void 0) {
 		delete config.services.blunSearch;
 		delete config.services.blunFetch;
+		delete config.services.blunMedia;
 		if (Object.keys(config.services).length === 0) config.services = void 0;
 	}
 }
@@ -13606,7 +13613,7 @@ function selectDefaultModel(config, models, options) {
 function canPreserveDefaultModel(existingModels, defaultModel, managedModels) {
 	if (managedModels.has(defaultModel)) return true;
 	const existing = existingModels[defaultModel];
-	return isRecord$21(existing) && existing["provider"] !== "managed:blun";
+	return isRecord$22(existing) && existing["provider"] !== "managed:blun";
 }
 function assertPositiveContextLength(model) {
 	if (!Number.isInteger(model.contextLength) || model.contextLength <= 0) throw new Error(`BLUN model "${model.id}" must include a positive context_length.`);
@@ -13684,13 +13691,13 @@ function blunManagedQuotaUrl(oauthHost) {
 	return `${(oauthHost ?? process.env["BLUN_OAUTH_HOST"] ?? "https://account.blun.ai").replace(/\/+$/, "")}${MANAGED_QUOTA_PATH}`;
 }
 function parseManagedQuotaPayload(payload) {
-	if (!isRecord$21(payload)) return void 0;
-	const plan = nonEmptyString$5(payload["plan"]);
+	if (!isRecord$22(payload)) return void 0;
+	const plan = nonEmptyString$6(payload["plan"]);
 	const paid = payload["bezahlt"];
 	const creditCents = payload["guthaben_cent"];
-	const billingKind = nonEmptyString$5(payload["art"]);
+	const billingKind = nonEmptyString$6(payload["art"]);
 	const globalUnlimited = payload["unlimited"];
-	if (plan === void 0 || typeof paid !== "boolean" || !Number.isSafeInteger(creditCents) || creditCents < 0 || billingKind === void 0 || globalUnlimited !== void 0 && typeof globalUnlimited !== "boolean" || !isRecord$21(payload["stand"])) return;
+	if (plan === void 0 || typeof paid !== "boolean" || !Number.isSafeInteger(creditCents) || creditCents < 0 || billingKind === void 0 || globalUnlimited !== void 0 && typeof globalUnlimited !== "boolean" || !isRecord$22(payload["stand"])) return;
 	if (!hasStrictQuotaStand(payload["stand"], globalUnlimited === true)) return void 0;
 	const limits = parseManagedUsagePayload(payload).limits;
 	if (limits.length !== REQUIRED_WINDOWS.length || REQUIRED_WINDOWS.some(([, id]) => limits.filter((row) => row.id === id).length !== 1)) return;
@@ -13752,7 +13759,7 @@ async function managedQuotaErrorCode(response) {
 	if (response.status !== 403) return "unavailable";
 	return isManagedQuotaErrorMessage(await readApiErrorMessage(response, "")) ? "unavailable" : "unauthenticated";
 }
-function nonEmptyString$5(value) {
+function nonEmptyString$6(value) {
 	if (typeof value !== "string") return void 0;
 	const normalized = value.trim();
 	return normalized.length === 0 ? void 0 : normalized;
@@ -13760,7 +13767,7 @@ function nonEmptyString$5(value) {
 function hasStrictQuotaStand(stand, globalUnlimited) {
 	return REQUIRED_WINDOWS.every(([sourceKey]) => {
 		const row = stand[sourceKey];
-		if (!isRecord$21(row)) return false;
+		if (!isRecord$22(row)) return false;
 		const used = row["verbraucht"];
 		const rowUnlimited = row["unlimited"];
 		if (rowUnlimited !== void 0 && typeof rowUnlimited !== "boolean") return false;
@@ -14312,15 +14319,15 @@ function readModel(config, alias) {
 	const model = config.models?.[alias];
 	return model === void 0 ? void 0 : model;
 }
-function nonEmptyString$4(value) {
+function nonEmptyString$5(value) {
 	const trimmed = value?.trim();
 	return trimmed === void 0 || trimmed.length === 0 ? void 0 : trimmed;
 }
 function providerApiKey$1(provider) {
-	return nonEmptyString$4(provider.apiKey) ?? nonEmptyString$4(provider.env?.["BLUN_API_KEY"]);
+	return nonEmptyString$5(provider.apiKey) ?? nonEmptyString$5(provider.env?.["BLUN_API_KEY"]);
 }
 function providerBaseUrl(provider) {
-	return nonEmptyString$4(provider.baseUrl) ?? nonEmptyString$4(provider.env?.["BLUN_BASE_URL"]);
+	return nonEmptyString$5(provider.baseUrl) ?? nonEmptyString$5(provider.env?.["BLUN_BASE_URL"]);
 }
 function collectModelIdsForAliases(config, aliasKeys) {
 	const ids = /* @__PURE__ */ new Set();
@@ -14386,7 +14393,7 @@ async function refreshProviderModels(host, options = {}) {
 			failed
 		};
 	}
-	const managedApiKey = nonEmptyString$4(managedProvider?.apiKey);
+	const managedApiKey = nonEmptyString$5(managedProvider?.apiKey);
 	const managedHasOAuth = managedProvider?.oauth !== void 0;
 	if (managedWanted && managedProvider !== void 0 && managedProvider.type === "blun" && (managedApiKey !== void 0 || managedHasOAuth)) try {
 		if (managedApiKey !== void 0 && managedHasOAuth) throw new Error("Managed BLUN OAuth and API key credentials are mutually exclusive.");
@@ -14593,7 +14600,7 @@ async function syncDir(dirPath) {
 */
 function syncFd(fd) {
 	return new Promise((resolve, reject) => {
-		fs$17.fsync(fd, (err) => {
+		fs$16.fsync(fd, (err) => {
 			if (err) {
 				reject(err);
 				return;
@@ -16051,6 +16058,8 @@ function servicesToToml(services, rawServices) {
 	else delete out["blun_search"];
 	if (services.blunFetch !== void 0) out["blun_fetch"] = serviceToToml(services.blunFetch);
 	else delete out["blun_fetch"];
+	if (services.blunMedia !== void 0) out["blun_media"] = serviceToToml(services.blunMedia);
+	else delete out["blun_media"];
 	if (services.visionReader !== void 0) out["vision_reader"] = visionReaderToToml(services.visionReader);
 	else delete out["vision_reader"];
 	return out;
@@ -20925,11 +20934,11 @@ function parseSkillText(options) {
 		throw error;
 	}
 	const frontmatter = parsed.data ?? {};
-	if (!isRecord$20(frontmatter)) throw new SkillParseError(`Frontmatter in ${options.skillMdPath} must be a mapping at the top level`);
+	if (!isRecord$21(frontmatter)) throw new SkillParseError(`Frontmatter in ${options.skillMdPath} must be a mapping at the top level`);
 	const metadata = normalizeMetadata(frontmatter);
 	if (!isSupportedSkillType(metadata.type)) throw new UnsupportedSkillTypeError(metadata.type ?? String(frontmatter["type"]));
-	const name = nonEmptyString$3(metadata.name);
-	const description = nonEmptyString$3(metadata.description);
+	const name = nonEmptyString$4(metadata.name);
+	const description = nonEmptyString$4(metadata.description);
 	if (isDirectorySkill && (name === void 0 || description === void 0)) throw new SkillParseError(`Missing required frontmatter field ${name === void 0 ? "\"name\"" : "\"description\""} in ${options.skillMdPath}`);
 	const skillPath = posix$2.resolve(options.skillMdPath);
 	const content = parsed.body.trim();
@@ -20989,11 +20998,11 @@ function normalizeMetadata(raw) {
 		const key = METADATA_ALIASES[rawKey] ?? rawKey;
 		out[key] = value;
 	}
-	const type = nonEmptyString$3(out["type"]);
+	const type = nonEmptyString$4(out["type"]);
 	if (type !== void 0) out["type"] = type;
-	const name = nonEmptyString$3(out["name"]);
+	const name = nonEmptyString$4(out["name"]);
 	if (name !== void 0) out["name"] = name;
-	const description = nonEmptyString$3(out["description"]);
+	const description = nonEmptyString$4(out["description"]);
 	if (description !== void 0) out["description"] = description;
 	return out;
 }
@@ -21035,10 +21044,10 @@ function tokenizeArgs(raw) {
 	if (hasContent) out.push(current);
 	return out;
 }
-function nonEmptyString$3(value) {
+function nonEmptyString$4(value) {
 	return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
 }
-function isRecord$20(value) {
+function isRecord$21(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var import_regexp_escape, FrontmatterError, SkillParseError, UnsupportedSkillTypeError, FENCE, METADATA_ALIASES;
@@ -21087,14 +21096,14 @@ var init_parser$1 = __esmMin((() => {
 function parseCommandText(input) {
 	const { text, commandPath, pluginId } = input;
 	const parsed = parseFrontmatter(text);
-	const frontmatter = isRecord$19(parsed.data) ? parsed.data : {};
+	const frontmatter = isRecord$20(parsed.data) ? parsed.data : {};
 	const baseName = input.fallbackName ?? path.basename(commandPath).replace(/\.md$/i, "");
-	const name = nonEmptyString$2(frontmatter["name"]) ?? baseName;
+	const name = nonEmptyString$3(frontmatter["name"]) ?? baseName;
 	const body = parsed.body.trim();
 	return {
 		pluginId,
 		name,
-		description: nonEmptyString$2(frontmatter["description"]) ?? descriptionFromBody(body),
+		description: nonEmptyString$3(frontmatter["description"]) ?? descriptionFromBody(body),
 		body,
 		path: path.resolve(commandPath)
 	};
@@ -21121,7 +21130,7 @@ function expandCommandArguments(body, args) {
 	if (!body.includes("$ARGUMENTS") && args.length > 0) return `${replaced}\n\nARGUMENTS: ${args}`;
 	return replaced;
 }
-function nonEmptyString$2(value) {
+function nonEmptyString$3(value) {
 	return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
 }
 function descriptionFromBody(body) {
@@ -21129,7 +21138,7 @@ function descriptionFromBody(body) {
 	if (firstLine === void 0) return "No description provided.";
 	return firstLine.length > 240 ? `${firstLine.slice(0, 239)}…` : firstLine;
 }
-function isRecord$19(value) {
+function isRecord$20(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var init_commands = __esmMin((() => {
@@ -25104,7 +25113,7 @@ var require_loader = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		};
 		return _setPrototypeOf(o, p);
 	}
-	var path$15 = __require("path");
+	var path$14 = __require("path");
 	module.exports = /* @__PURE__ */ function(_EmitterObj) {
 		_inheritsLoose(Loader, _EmitterObj);
 		function Loader() {
@@ -25112,7 +25121,7 @@ var require_loader = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}
 		var _proto = Loader.prototype;
 		_proto.resolve = function resolve(from, to) {
-			return path$15.resolve(path$15.dirname(from), to);
+			return path$14.resolve(path$14.dirname(from), to);
 		};
 		_proto.isRelative = function isRelative(filename) {
 			return filename.indexOf("./") === 0 || filename.indexOf("../") === 0;
@@ -26768,8 +26777,8 @@ var require_node_loaders = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		};
 		return _setPrototypeOf(o, p);
 	}
-	var fs$15 = __require("fs");
-	var path$14 = __require("path");
+	var fs$14 = __require("fs");
+	var path$13 = __require("path");
 	var Loader = require_loader();
 	var PrecompiledLoader = require_precompiled_loader().PrecompiledLoader;
 	var chokidar;
@@ -26784,7 +26793,7 @@ var require_node_loaders = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				_this.noCache = !!opts.noCache;
 				if (searchPaths) {
 					searchPaths = Array.isArray(searchPaths) ? searchPaths : [searchPaths];
-					_this.searchPaths = searchPaths.map(path$14.normalize);
+					_this.searchPaths = searchPaths.map(path$13.normalize);
 				} else _this.searchPaths = ["."];
 				if (opts.watch) {
 					try {
@@ -26792,10 +26801,10 @@ var require_node_loaders = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					} catch (e) {
 						throw new Error("watch requires chokidar to be installed");
 					}
-					var paths = _this.searchPaths.filter(fs$15.existsSync);
+					var paths = _this.searchPaths.filter(fs$14.existsSync);
 					var watcher = chokidar.watch(paths);
 					watcher.on("all", function(event, fullname) {
-						fullname = path$14.resolve(fullname);
+						fullname = path$13.resolve(fullname);
 						if (event === "change" && fullname in _this.pathsToNames) _this.emit("update", _this.pathsToNames[fullname], fullname);
 					});
 					watcher.on("error", function(error) {
@@ -26809,9 +26818,9 @@ var require_node_loaders = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				var fullpath = null;
 				var paths = this.searchPaths;
 				for (var i = 0; i < paths.length; i++) {
-					var basePath = path$14.resolve(paths[i]);
-					var p = path$14.resolve(paths[i], name);
-					if (p.indexOf(basePath) === 0 && fs$15.existsSync(p)) {
+					var basePath = path$13.resolve(paths[i]);
+					var p = path$13.resolve(paths[i], name);
+					if (p.indexOf(basePath) === 0 && fs$14.existsSync(p)) {
 						fullpath = p;
 						break;
 					}
@@ -26819,7 +26828,7 @@ var require_node_loaders = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				if (!fullpath) return null;
 				this.pathsToNames[fullpath] = name;
 				var source = {
-					src: fs$15.readFileSync(fullpath, "utf-8"),
+					src: fs$14.readFileSync(fullpath, "utf-8"),
 					path: fullpath,
 					noCache: this.noCache
 				};
@@ -26867,7 +26876,7 @@ var require_node_loaders = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				}
 				this.pathsToNames[fullpath] = name;
 				var source = {
-					src: fs$15.readFileSync(fullpath, "utf-8"),
+					src: fs$14.readFileSync(fullpath, "utf-8"),
 					path: fullpath,
 					noCache: this.noCache
 				};
@@ -27169,13 +27178,13 @@ var require_globals = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region ../../node_modules/.pnpm/nunjucks@3.2.4_chokidar@4.0.3/node_modules/nunjucks/src/express-app.js
 var require_express_app = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var path$13 = __require("path");
+	var path$12 = __require("path");
 	module.exports = function express(env, app) {
 		function NunjucksView(name, opts) {
 			this.name = name;
 			this.path = name;
 			this.defaultEngine = opts.defaultEngine;
-			this.ext = path$13.extname(name);
+			this.ext = path$12.extname(name);
 			if (!this.ext && !this.defaultEngine) throw new Error("No default engine was specified and no extension was provided.");
 			if (!this.ext) this.name += this.ext = (this.defaultEngine[0] !== "." ? "." : "") + this.defaultEngine;
 		}
@@ -27611,8 +27620,8 @@ var require_precompile_global = /* @__PURE__ */ __commonJSMin(((exports, module)
 //#endregion
 //#region ../../node_modules/.pnpm/nunjucks@3.2.4_chokidar@4.0.3/node_modules/nunjucks/src/precompile.js
 var require_precompile = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var fs$14 = __require("fs");
-	var path$12 = __require("path");
+	var fs$13 = __require("fs");
+	var path$11 = __require("path");
 	var _prettifyError = require_lib$7()._prettifyError;
 	var compiler = require_compiler();
 	var Environment = require_environment().Environment;
@@ -27636,27 +27645,27 @@ var require_precompile = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		var env = opts.env || new Environment([]);
 		var wrapper = opts.wrapper || precompileGlobal;
 		if (opts.isString) return precompileString(input, opts);
-		var pathStats = fs$14.existsSync(input) && fs$14.statSync(input);
+		var pathStats = fs$13.existsSync(input) && fs$13.statSync(input);
 		var precompiled = [];
 		var templates = [];
 		function addTemplates(dir) {
-			fs$14.readdirSync(dir).forEach(function(file) {
-				var filepath = path$12.join(dir, file);
-				var subpath = filepath.substr(path$12.join(input, "/").length);
-				var stat = fs$14.statSync(filepath);
+			fs$13.readdirSync(dir).forEach(function(file) {
+				var filepath = path$11.join(dir, file);
+				var subpath = filepath.substr(path$11.join(input, "/").length);
+				var stat = fs$13.statSync(filepath);
 				if (stat && stat.isDirectory()) {
 					subpath += "/";
 					if (!match(subpath, opts.exclude)) addTemplates(filepath);
 				} else if (match(subpath, opts.include)) templates.push(filepath);
 			});
 		}
-		if (pathStats.isFile()) precompiled.push(_precompile(fs$14.readFileSync(input, "utf-8"), opts.name || input, env));
+		if (pathStats.isFile()) precompiled.push(_precompile(fs$13.readFileSync(input, "utf-8"), opts.name || input, env));
 		else if (pathStats.isDirectory()) {
 			addTemplates(input);
 			for (var i = 0; i < templates.length; i++) {
-				var name = templates[i].replace(path$12.join(input, "/"), "");
+				var name = templates[i].replace(path$11.join(input, "/"), "");
 				try {
-					precompiled.push(_precompile(fs$14.readFileSync(templates[i], "utf-8"), name, env));
+					precompiled.push(_precompile(fs$13.readFileSync(templates[i], "utf-8"), name, env));
 				} catch (e) {
 					if (opts.force) console.error(e);
 					else throw e;
@@ -28340,7 +28349,7 @@ var init_load = __esmMin((() => {
 //#region ../../packages/agent-core/src/profile/default/agent.yaml?raw
 var agent_default$1;
 var init_agent$3 = __esmMin((() => {
-	agent_default$1 = "name: agent\ndescription: Default BLUN King agent\n\nsystemPromptPath: ./system.md\npromptVars:\n  roleAdditional: ''\n\ntools:\n  - Read\n  - Write\n  - Edit\n  - Grep\n  - Glob\n  - Bash\n  - TaskList\n  - TaskOutput\n  - TaskStop\n  - CronCreate\n  - CronList\n  - CronDelete\n  - ReadMediaFile\n  - TodoList\n  - Skill\n  - WebSearch\n  - Agent\n  - AgentSwarm\n  - FetchURL\n  - AskUserQuestion\n  - MistakeRecord\n  - CodebaseSearch\n  - EnterPlanMode\n  - ExitPlanMode\n  - CreateGoal\n  - GetGoal\n  - SetGoalBudget\n  - UpdateGoal\n  - mcp__*\n\nsubagents:\n  coder:\n    description: General software engineering agent — the only subagent type with file-editing tools; use it for any delegated task that must modify code.\n  explore:\n    description: Fast codebase exploration with prompt-enforced read-only behavior.\n  plan:\n    description: Read-only implementation planning and architecture design.\n";
+	agent_default$1 = "name: agent\ndescription: Default BLUN King agent\n\nsystemPromptPath: ./system.md\npromptVars:\n  roleAdditional: ''\n\ntools:\n  - Read\n  - Write\n  - Edit\n  - Grep\n  - Glob\n  - Bash\n  - TaskList\n  - TaskOutput\n  - TaskStop\n  - CronCreate\n  - CronList\n  - CronDelete\n  - ReadMediaFile\n  - TodoList\n  - Skill\n  - WebSearch\n  - Agent\n  - AgentSwarm\n  - FetchURL\n  - GenerateImage\n  - GenerateVideo\n  - GenerateSpeech\n  - GetMedia\n  - AskUserQuestion\n  - MistakeRecord\n  - CodebaseSearch\n  - EnterPlanMode\n  - ExitPlanMode\n  - CreateGoal\n  - GetGoal\n  - SetGoalBudget\n  - UpdateGoal\n  - mcp__*\n\nsubagents:\n  coder:\n    description: General software engineering agent — the only subagent type with file-editing tools; use it for any delegated task that must modify code.\n  explore:\n    description: Fast codebase exploration with prompt-enforced read-only behavior.\n  plan:\n    description: Read-only implementation planning and architecture design.\n";
 }));
 //#endregion
 //#region ../../packages/agent-core/src/profile/default/coder.yaml?raw
@@ -28476,7 +28485,7 @@ function isAbortError$4(err) {
 	if (err instanceof Error) return err.name === "AbortError";
 	return false;
 }
-function errorMessage$8(err) {
+function errorMessage$12(err) {
 	if (err instanceof Error) return err.message;
 	return String(err);
 }
@@ -28700,7 +28709,7 @@ function normalizePersistedTask$1(task) {
 }
 function legacyPersistedTaskToInfo$1(task) {
 	const status = legacyStatusToCurrent$1(task);
-	const stopReason = optionalNonEmptyString$1(task.stop_reason);
+	const stopReason = optionalNonEmptyString$2(task.stop_reason);
 	const timeoutMs = typeof task.timeout_ms === "number" ? task.timeout_ms : void 0;
 	const base = {
 		taskId: task.task_id,
@@ -28715,8 +28724,8 @@ function legacyPersistedTaskToInfo$1(task) {
 	if (task.task_id.startsWith("agent-")) return {
 		...base,
 		kind: "agent",
-		agentId: optionalNonEmptyString$1(task.agent_id),
-		subagentType: optionalNonEmptyString$1(task.subagent_type)
+		agentId: optionalNonEmptyString$2(task.agent_id),
+		subagentType: optionalNonEmptyString$2(task.subagent_type)
 	};
 	return {
 		...base,
@@ -28732,15 +28741,15 @@ function legacyStatusToCurrent$1(task) {
 	return task.status;
 }
 function isReadablePersistedTask$1(obj) {
-	return isRecord$18(obj) && (typeof obj["taskId"] === "string" || typeof obj["task_id"] === "string");
+	return isRecord$19(obj) && (typeof obj["taskId"] === "string" || typeof obj["task_id"] === "string");
 }
 function isLegacyPersistedTask$1(task) {
 	return "task_id" in task;
 }
-function isRecord$18(value) {
+function isRecord$19(value) {
 	return typeof value === "object" && value !== null;
 }
-function optionalNonEmptyString$1(value) {
+function optionalNonEmptyString$2(value) {
 	if (value === void 0) return void 0;
 	const trimmed = value.trim();
 	return trimmed.length > 0 ? trimmed : void 0;
@@ -28914,7 +28923,7 @@ var init_agent_task = __esmMin((() => {
 				}
 				await sink.settle({
 					status: "failed",
-					stopReason: errorMessage$8(error)
+					stopReason: errorMessage$12(error)
 				});
 			} finally {
 				sink.signal.removeEventListener("abort", requestAbort);
@@ -29040,7 +29049,7 @@ var init_process_task = __esmMin((() => {
 				this.exitCode = this.proc.exitCode;
 				settlement = {
 					status: sink.signal.aborted ? "killed" : "failed",
-					stopReason: sink.signal.aborted ? void 0 : errorMessage$8(error)
+					stopReason: sink.signal.aborted ? void 0 : errorMessage$12(error)
 				};
 			} finally {
 				sink.signal.removeEventListener("abort", requestStop);
@@ -29114,7 +29123,7 @@ var init_question_task = __esmMin((() => {
 				}
 				await sink.settle({
 					status: "failed",
-					stopReason: errorMessage$8(error)
+					stopReason: errorMessage$12(error)
 				});
 			}
 		}
@@ -29676,7 +29685,7 @@ var init_background = __esmMin((() => {
 			})).catch((error) => {
 				settleWorker({
 					status: entry.abortController.signal.aborted ? "killed" : "failed",
-					stopReason: entry.abortController.signal.aborted ? void 0 : errorMessage$8(error)
+					stopReason: entry.abortController.signal.aborted ? void 0 : errorMessage$12(error)
 				});
 			});
 			const timeout = resettableTimeoutOutcome(entry.options.timeoutMs, { kind: "timeout" });
@@ -36221,7 +36230,7 @@ var require_gifframe = /* @__PURE__ */ __commonJSMin(((exports) => {
 //#region ../../node_modules/.pnpm/gifwrap@0.10.1/node_modules/gifwrap/src/gifutil.js
 var require_gifutil = /* @__PURE__ */ __commonJSMin(((exports) => {
 	/** @namespace GifUtil */
-	const fs$13 = __require("fs");
+	const fs$12 = __require("fs");
 	const ImageQ = require_image_q();
 	const BitmapImage = require_bitmapimage();
 	const { GifFrame } = require_gifframe();
@@ -36488,7 +36497,7 @@ var require_gifutil = /* @__PURE__ */ __commonJSMin(((exports) => {
 	}
 	function _readBinary(path) {
 		return new Promise((resolve, reject) => {
-			fs$13.readFile(path, (err, buffer) => {
+			fs$12.readFile(path, (err, buffer) => {
 				if (err) return reject(err);
 				return resolve(buffer);
 			});
@@ -36496,7 +36505,7 @@ var require_gifutil = /* @__PURE__ */ __commonJSMin(((exports) => {
 	}
 	function _writeBinary(path, buffer) {
 		return new Promise((resolve, reject) => {
-			fs$13.writeFile(path, buffer, (err) => {
+			fs$12.writeFile(path, buffer, (err) => {
 				if (err) return reject(err);
 				return resolve();
 			});
@@ -62314,7 +62323,7 @@ var init_file_type = __esmMin((() => {
 		}
 		async fromFile(path) {
 			this.options.signal?.throwIfAborted();
-			const fileHandle = await fs.open(path, constants.O_RDONLY | constants.O_NONBLOCK);
+			const fileHandle = await ro.open(path, constants.O_RDONLY | constants.O_NONBLOCK);
 			const fileStat = await fileHandle.stat();
 			if (!fileStat.isFile()) {
 				await fileHandle.close();
@@ -72819,7 +72828,7 @@ async function processBitmapFont(file, font) {
 		...font,
 		chars,
 		kernings,
-		pages: await Promise.all(font.pages.map(async (page) => CharacterJimp.read(path$1.join(path$1.dirname(file), page))))
+		pages: await Promise.all(font.pages.map(async (page) => CharacterJimp.read(js.join(js.dirname(file), page))))
 	};
 }
 var import_parse_bmfont_ascii, import_lib$1, import_parse_bmfont_binary, convertXML, isWebWorker, CharacterJimp, HEADER;
@@ -73836,10 +73845,10 @@ function escapeXml(value) {
 function locationKey(messageIndex, partIndex) {
 	return `${String(messageIndex)}:${String(partIndex)}`;
 }
-function isRecord$17(value) {
+function isRecord$18(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-function isNonNegativeInteger(value) {
+function isNonNegativeInteger$1(value) {
 	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
 }
 function abortReason(signal) {
@@ -74035,7 +74044,7 @@ var init_vision_reader = __esmMin((() => {
 					reason: "malformed"
 				};
 			}
-			if (!isRecord$17(payload) || payload["done"] !== true || typeof payload["response"] !== "string" || !isNonNegativeInteger(payload["prompt_eval_count"]) || !isNonNegativeInteger(payload["eval_count"])) return {
+			if (!isRecord$18(payload) || payload["done"] !== true || typeof payload["response"] !== "string" || !isNonNegativeInteger$1(payload["prompt_eval_count"]) || !isNonNegativeInteger$1(payload["eval_count"])) return {
 				ok: false,
 				reason: "malformed"
 			};
@@ -80671,7 +80680,7 @@ var require_buffer_from = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#region ../../node_modules/.pnpm/source-map-support@0.5.21/node_modules/source-map-support/source-map-support.js
 var require_source_map_support = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var SourceMapConsumer = require_source_map().SourceMapConsumer;
-	var path$11 = __require("path");
+	var path$10 = __require("path");
 	var fs;
 	try {
 		fs = __require("fs");
@@ -80748,15 +80757,15 @@ var require_source_map_support = /* @__PURE__ */ __commonJSMin(((exports, module
 	});
 	function supportRelativeURL(file, url) {
 		if (!file) return url;
-		var dir = path$11.dirname(file);
+		var dir = path$10.dirname(file);
 		var match = /^\w+:\/\/[^\/]*/.exec(dir);
 		var protocol = match ? match[0] : "";
 		var startPath = dir.slice(protocol.length);
 		if (protocol && /^\/\w\:/.test(startPath)) {
 			protocol += "/";
-			return protocol + path$11.resolve(dir.slice(protocol.length), url).replace(/\\/g, "/");
+			return protocol + path$10.resolve(dir.slice(protocol.length), url).replace(/\\/g, "/");
 		}
-		return protocol + path$11.resolve(dir.slice(protocol.length), url);
+		return protocol + path$10.resolve(dir.slice(protocol.length), url);
 	}
 	function retrieveSourceMapURL(source) {
 		var fileData;
@@ -229699,7 +229708,7 @@ async function runHook(command, input, options) {
 			} : void 0
 		});
 	} catch (error) {
-		return allowResult({ stderr: errorMessage$7(error) });
+		return allowResult({ stderr: errorMessage$11(error) });
 	}
 	return new Promise((resolve) => {
 		let stdout = "";
@@ -229747,7 +229756,7 @@ async function runHook(command, input, options) {
 		child.on("error", (error) => {
 			settle(allowResult({
 				stdout,
-				stderr: stderr + errorMessage$7(error)
+				stderr: stderr + errorMessage$11(error)
 			}));
 		});
 		child.on("close", (code) => {
@@ -229867,10 +229876,10 @@ function killProcessTreeWindows(child, force) {
 		} catch {}
 	}
 }
-function isRecord$16(value) {
+function isRecord$17(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function errorMessage$7(error) {
+function errorMessage$11(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 var DEFAULT_TIMEOUT_SECONDS, KILL_GRACE_MS$2, OptionalStringSchema, HookSpecificOutputSchema, HookJsonOutputSchema;
@@ -229883,7 +229892,7 @@ var init_runner = __esmMin((() => {
 		if (typeof value === "string") return value;
 		if (typeof value === "number" || typeof value === "boolean" || typeof value === "bigint") return String(value);
 	}, string().optional());
-	HookSpecificOutputSchema = preprocess((value) => isRecord$16(value) ? value : void 0, looseObject({
+	HookSpecificOutputSchema = preprocess((value) => isRecord$17(value) ? value : void 0, looseObject({
 		message: OptionalStringSchema,
 		permissionDecision: unknown().optional(),
 		permissionDecisionReason: OptionalStringSchema
@@ -230793,7 +230802,7 @@ function parsePersonalMemoryRecall(output) {
 	} catch {
 		return { kind: "invalid" };
 	}
-	if (!isRecord$15(parsed) || !isRecord$15(parsed["personal_memory"])) return { kind: "invalid" };
+	if (!isRecord$16(parsed) || !isRecord$16(parsed["personal_memory"])) return { kind: "invalid" };
 	const memory = parsed["personal_memory"];
 	const savedRaw = memory["saved"];
 	const threadsRaw = memory["threads"];
@@ -230802,7 +230811,7 @@ function parsePersonalMemoryRecall(output) {
 	if (savedRaw.length > MAX_SAVED_MEMORIES || threadsRaw.length > MAX_THREADS || historyRaw.length > 0) return { kind: "invalid" };
 	const saved = [];
 	for (const value of savedRaw) {
-		if (!isRecord$15(value)) return { kind: "invalid" };
+		if (!isRecord$16(value)) return { kind: "invalid" };
 		const text = boundedTrimmedString(value["text"], MAX_MEMORY_TEXT_CHARS);
 		const confidence = value["confidence"];
 		if (text === void 0 || typeof confidence !== "string" || !CONFIDENCE_VALUES.has(confidence)) return { kind: "invalid" };
@@ -230813,7 +230822,7 @@ function parsePersonalMemoryRecall(output) {
 	}
 	const threads = [];
 	for (const value of threadsRaw) {
-		if (!isRecord$15(value)) return { kind: "invalid" };
+		if (!isRecord$16(value)) return { kind: "invalid" };
 		const title = boundedTrimmedString(value["title"], MAX_THREAD_TITLE_CHARS);
 		const summary = boundedTrimmedString(value["summary"], MAX_THREAD_SUMMARY_CHARS);
 		if (title === void 0 || summary === void 0) return { kind: "invalid" };
@@ -230867,7 +230876,7 @@ function boundedTrimmedString(value, maxChars) {
 	const trimmed = value.trim();
 	return trimmed.length > 0 ? trimmed : void 0;
 }
-function isRecord$15(value) {
+function isRecord$16(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var PERSONAL_MEMORY_HOST_RECALL_HANDLER$1, RECALL_LIMIT, RECALL_TIMEOUT_MS, MAX_QUERY_CHARS, MAX_WIRE_CHARS, MAX_SAVED_MEMORIES, MAX_THREADS, MAX_MEMORY_TEXT_CHARS, MAX_THREAD_TITLE_CHARS, MAX_THREAD_SUMMARY_CHARS, CONFIDENCE_VALUES, TELEGRAM_GROUP_MARKER_RE, TELEGRAM_MARKER_RE, TELEGRAM_CHANNEL_RE, TELEGRAM_SOURCE_RE, TELEGRAM_CHAT_ID_RE, TELEGRAM_SENDER_LINE_RE, TELEGRAM_ATTACHMENT_BLOCK_RE, TELEGRAM_ATTACHMENT_NOTICE_RE, TELEGRAM_IMAGE_ATTACHMENT_RE, GENERIC_IMAGE_QUERY, GENERIC_FILE_QUERY, GENERIC_EMPTY_QUERY, PERSONAL_MEMORY_RECALL_VARIANT, PersonalMemoryRecallInjector;
@@ -231657,7 +231666,7 @@ function createEvidenceApi(dependencies) {
 var init_mission_contract_evidence = __esmMin((() => {}));
 //#endregion
 //#region ../../packages/agent-core/src/agent/injection/mission-contract.js
-var missionContractApi, SCHEMA_VERSION, CONTRACT_STATUSES, REQUIREMENT_TYPES, normalize$2, createDraft, validate$1, publicContract, contractPrompt, redact, createEvidenceState, recordToolStart, recordToolResult, recordFile, recordUrl, recordScreenshot, recordSecurity, recordDecision, recordCheckpoint, evaluateCriteria, canonicalString$1, sha256$3, finalizeEvidence;
+var missionContractApi, SCHEMA_VERSION, CONTRACT_STATUSES, REQUIREMENT_TYPES, normalize$2, createDraft, validate$1, publicContract, contractPrompt, redact, createEvidenceState, recordToolStart, recordToolResult, recordFile, recordUrl, recordScreenshot, recordSecurity, recordDecision, recordCheckpoint, evaluateCriteria, canonicalString$1, sha256$4, finalizeEvidence;
 var init_mission_contract = __esmMin((() => {
 	init_mission_contract_evidence();
 	missionContractApi = (function(root, factory) {
@@ -231935,7 +231944,7 @@ var init_mission_contract = __esmMin((() => {
 			})
 		};
 	});
-	({SCHEMA_VERSION, CONTRACT_STATUSES, REQUIREMENT_TYPES, normalize: normalize$2, createDraft, validate: validate$1, publicContract, contractPrompt, redact, createEvidenceState, recordToolStart, recordToolResult, recordFile, recordUrl, recordScreenshot, recordSecurity, recordDecision, recordCheckpoint, evaluateCriteria, canonicalString: canonicalString$1, sha256: sha256$3, finalizeEvidence} = missionContractApi);
+	({SCHEMA_VERSION, CONTRACT_STATUSES, REQUIREMENT_TYPES, normalize: normalize$2, createDraft, validate: validate$1, publicContract, contractPrompt, redact, createEvidenceState, recordToolStart, recordToolResult, recordFile, recordUrl, recordScreenshot, recordSecurity, recordDecision, recordCheckpoint, evaluateCriteria, canonicalString: canonicalString$1, sha256: sha256$4, finalizeEvidence} = missionContractApi);
 }));
 //#endregion
 //#region ../../packages/agent-core/src/agent/injection/mission-contract-bridge.ts
@@ -242727,7 +242736,7 @@ function parseToolCallArguments$1(raw) {
 			success: true,
 			data: {},
 			parseFailed: true,
-			error: errorMessage$8(error)
+			error: errorMessage$12(error)
 		};
 	}
 }
@@ -242914,7 +242923,7 @@ async function prepareToolCall(step, call) {
 			toolCallId: call.toolCall.id,
 			error
 		});
-		return settleError(effectiveArgs, error instanceof PathSecurityError ? error.message : `Tool "${call.toolName}" failed to resolve execution: ${errorMessage$8(error)}`);
+		return settleError(effectiveArgs, error instanceof PathSecurityError ? error.message : `Tool "${call.toolName}" failed to resolve execution: ${errorMessage$12(error)}`);
 	}
 	const displayFields = toolCallDisplayFieldsFromExecution(execution);
 	const settleAborted = () => settleError(effectiveArgs, abortedToolOutput(call.toolName, step.signal), displayFields);
@@ -242977,7 +242986,7 @@ async function runPrepareToolExecutionHook(step, call) {
 		return {
 			kind: "hookFailed",
 			args,
-			output: `prepareToolExecution hook failed for "${call.toolName}": ${errorMessage$8(error)}`
+			output: `prepareToolExecution hook failed for "${call.toolName}": ${errorMessage$12(error)}`
 		};
 	}
 	const effectiveArgs = hookResult?.updatedArgs ?? args;
@@ -243019,7 +243028,7 @@ async function runAuthorizeToolExecutionHook(step, call, args, execution) {
 		};
 		return {
 			block: true,
-			reason: `authorizeToolExecution hook failed for "${call.toolName}": ${errorMessage$8(error)}`
+			reason: `authorizeToolExecution hook failed for "${call.toolName}": ${errorMessage$12(error)}`
 		};
 	}
 }
@@ -243046,7 +243055,7 @@ async function runRunnableToolCall(step, call, effectiveArgs, metadata, executio
 			toolCallId: toolCall.id,
 			error
 		});
-		return makeErrorToolResult(call, effectiveArgs, aborted ? abortedToolOutput(toolName, signal) : `Tool "${toolName}" failed: ${errorMessage$8(error)}`);
+		return makeErrorToolResult(call, effectiveArgs, aborted ? abortedToolOutput(toolName, signal) : `Tool "${toolName}" failed: ${errorMessage$12(error)}`);
 	}
 	return makeToolResult(call, effectiveArgs, toolResult);
 }
@@ -243079,7 +243088,7 @@ async function finalizePendingToolResult(step, pendingResult) {
 			toolCallId: pendingResult.toolCall.id,
 			error
 		});
-		const output = aborted ? `Tool "${pendingResult.toolName}" aborted during finalizeToolResult hook.` : `finalizeToolResult hook failed for "${pendingResult.toolName}": ${errorMessage$8(error)}`;
+		const output = aborted ? `Tool "${pendingResult.toolName}" aborted during finalizeToolResult hook.` : `finalizeToolResult hook failed for "${pendingResult.toolName}": ${errorMessage$12(error)}`;
 		return {
 			...pendingResult,
 			stopTurn: pendingResult.stopTurn,
@@ -243338,8 +243347,8 @@ async function executeLoopStep(deps) {
 			log?.error("strict resend still rejected by provider; request remains wire-invalid", {
 				turnStep: `${turnId}.${String(currentStep)}`,
 				model: llm.modelName,
-				originalError: errorMessage$8(error),
-				strictError: errorMessage$8(strictError)
+				originalError: errorMessage$12(error),
+				strictError: errorMessage$12(strictError)
 			});
 			throw strictError;
 		}
@@ -243591,7 +243600,7 @@ async function runTurn(input) {
 				usage
 			};
 		}
-		dispatchEvent(makeInterruptedEvent(isMaxStepsExceededError(error) ? "max_steps" : "error", steps, activeStep, errorMessage$8(error)));
+		dispatchEvent(makeInterruptedEvent(isMaxStepsExceededError(error) ? "max_steps" : "error", steps, activeStep, errorMessage$12(error)));
 		throw error;
 	}
 	return {
@@ -247004,7 +247013,7 @@ var init_classic = __esmMin((() => {
 //#region ../../node_modules/.pnpm/zod@4.3.6/node_modules/zod/v4/index.js
 var init_v4 = __esmMin((() => {
 	init_classic();
-})), LATEST_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, isInitializedNotification, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, McpError, UrlElicitationRequiredError;
+})), LATEST_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, isInitializedNotification, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema$1, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, McpError, UrlElicitationRequiredError;
 var init_types$4 = __esmMin((() => {
 	init_v4();
 	LATEST_PROTOCOL_VERSION = "2025-11-25";
@@ -247646,7 +247655,7 @@ uri: string() });
 		*/
 		required: optional(boolean$1())
 	});
-	PromptSchema = object({
+	PromptSchema$1 = object({
 		...BaseMetadataSchema.shape,
 		...IconsSchema.shape,
 		/**
@@ -247664,7 +247673,7 @@ uri: string() });
 		_meta: optional(looseObject({}))
 	});
 	ListPromptsRequestSchema = PaginatedRequestSchema.extend({ method: literal("prompts/list") });
-	ListPromptsResultSchema = PaginatedResultSchema.extend({ prompts: array(PromptSchema) });
+	ListPromptsResultSchema = PaginatedResultSchema.extend({ prompts: array(PromptSchema$1) });
 	GetPromptRequestParamsSchema = BaseRequestParamsSchema.extend({
 		/**
 		* The name of the prompt or prompt template.
@@ -251881,7 +251890,7 @@ var init_ask_user = __esmMin((() => {
 			} catch (error) {
 				return {
 					isError: true,
-					output: errorMessage$8(error)
+					output: errorMessage$12(error)
 				};
 			}
 			const status = backgroundManager.getTask(taskId)?.status ?? "running";
@@ -252315,7 +252324,7 @@ function Yn(s, t) {
 function Kn(s, t) {
 	s.head = new ue$1(t, void 0, s.head, s), s.tail || (s.tail = s.head), s.length++;
 }
-var zr, Ur, Ds, Wr, Gr, Zr, Q$1, J$1, nt$1, De$1, qt, Ne$1, Ns, Ae$1, As, z$1, Mt, g$1, Qt, Bt, b$1, N$1, _$1, bi, Ie$1, L$1, S, _i, Oi, Is, Ti, Z$1, xi, Ce$1, Jt$1, Rt, C, jt, Yr, Kr, Vr, $r, Fe$1, Li, Xr, qr, A$1, Jr, ht, H$1, te, m$1, Ni, tt$1, Ai, ki, vi, ie$1, ke$1, Ut$1, Ht, Ii, Pt, at, U$1, ot, Y$1, zt, Ci, j$1, ee$1, Fi, ve$1, gt$2, Me, bt, _t, Be$1, et$1, Wt$1, jr, Fs, ks, vs, Ms, Bs, tn, se$1, K$1, sn, M$1, rn, zs, nn, Bi, Tt, Gt, Pi, re, Pe$1, ze$1, Ue, He$1, We$1, Ge$1, Ze$1, Ye$1, Ke$1, Us, hn, an, Hs, ln, cn, Ws, Gs, Hi, ne, dn, Ui, oe$1, Ve$1, un, F$1, mn, xt, Wi, pn, lt, En, wn, Sn, ct, yn, Rn, gn, Gi, bn, Lt, ft, On, Tn, xn, f, $e$1, Dt, Nn, Xi, qi, An, B$1, Nt, it, Zi, Zs, V$1, he$1, dt, Ys, p, st$1, ut, Yi, At, w$1, Xe$1, qe$1, Ki, Ks, Vs, ae$1, Vi, Qe$1, Yt$1, $$1, Je$1, It, je$1, ti, $s, In, le$1, $i, Xs, Cn, rt$1, mt, vn, Qi, Mn, Bn, Ct, Ji, zn, qs, ce$1, ei, ji, Un, Hn, ts, Qs, rr, Wn, tr, er, ir, is$2, sr, fe$1, ii, ss, si, rs, ns, os$6, hs, pt, ri, as, es, q$1, de$1, ni, oi, Gn, hi, ue$1, pi, nr, li, me$1, W$1, pe$2, Et, Ft$1, Ee$1, ai, G, ls, ci, or, ds, us, fi, di, hr, cs, ui, lr, fs$12, wt, kt, Vn, $n, fr, dr, Xn, qn, Er, wr, ur, Sr, yr, Rr, jn, to, eo, mr, ms, ps, Ei, io, Es, so, ws, Se$1, St, no, gr, Ss, br, oo, _r, ys, Or, Vt$1, Tr, ao, lo, yi, Lr, Dr, _s, Nr, Os, P$1, Ts, xs, gi, Ar, Ir, Re, Cr, Fr, Rs, yt, O$1, Ri, kr, $t, gs, bs, Ls, ge$1, be, _e$1, Oe$1, Te$1, uo, mo, po, vr, Xt$1, ye$1, xe$1, Eo, wo, So, yo, Ro, go, bo, _o, vt, To;
+var zr, Ur, Ds, Wr, Gr, Zr, Q$1, J$1, nt$1, De$1, qt, Ne$1, Ns, Ae$1, As, z$1, Mt, g$1, Qt, Bt, b$1, N$1, _$1, bi, Ie$1, L$1, S, _i, Oi, Is, Ti, Z$1, xi, Ce$1, Jt$1, Rt, C, jt, Yr, Kr, Vr, $r, Fe$1, Li, Xr, qr, A$1, Jr, ht, H$1, te, m$1, Ni, tt$1, Ai, ki, vi, ie$1, ke$1, Ut$1, Ht, Ii, Pt, at, U$1, ot, Y$1, zt, Ci, j$1, ee$1, Fi, ve$1, gt$2, Me, bt, _t, Be$1, et$1, Wt$1, jr, Fs, ks, vs, Ms, Bs, tn, se$1, K$1, sn, M$1, rn, zs, nn, Bi, Tt, Gt, Pi, re, Pe$1, ze$1, Ue, He$1, We$1, Ge$1, Ze$1, Ye$1, Ke$1, Us, hn, an, Hs, ln, cn, Ws, Gs, Hi, ne, dn, Ui, oe$1, Ve$1, un, F$1, mn, xt, Wi, pn, lt, En, wn, Sn, ct, yn, Rn, gn, Gi, bn, Lt, ft, On, Tn, xn, f, $e$1, Dt, Nn, Xi, qi, An, B$1, Nt, it, Zi, Zs, V$1, he$1, dt, Ys, p, st$1, ut, Yi, At, w$1, Xe$1, qe$1, Ki, Ks, Vs, ae$1, Vi, Qe$1, Yt$1, $$1, Je$1, It, je$1, ti, $s, In, le$1, $i, Xs, Cn, rt$1, mt, vn, Qi, Mn, Bn, Ct, Ji, zn, qs, ce$1, ei, ji, Un, Hn, ts, Qs, rr, Wn, tr, er, ir, is$2, sr, fe$1, ii, ss, si, rs, ns, os$6, hs, pt, ri, as, es, q$1, de$1, ni, oi, Gn, hi, ue$1, pi, nr, li, me$1, W$1, pe$2, Et, Ft$1, Ee$1, ai, G, ls, ci, or, ds, us, fi, di, hr, cs, ui, lr, fs$11, wt, kt, Vn, $n, fr, dr, Xn, qn, Er, wr, ur, Sr, yr, Rr, jn, to, eo, mr, ms, ps, Ei, io, Es, so, ws, Se$1, St, no, gr, Ss, br, oo, _r, ys, Or, Vt$1, Tr, ao, lo, yi, Lr, Dr, _s, Nr, Os, P$1, Ts, xs, gi, Ar, Ir, Re, Cr, Fr, Rs, yt, O$1, Ri, kr, $t, gs, bs, Ls, ge$1, be, _e$1, Oe$1, Te$1, uo, mo, po, vr, Xt$1, ye$1, xe$1, Eo, wo, So, yo, Ro, go, bo, _o, vt, To;
 var init_index_min = __esmMin((() => {
 	zr = Object.defineProperty;
 	Ur = (s, t) => {
@@ -253843,7 +253852,7 @@ while (this[Zs](this[st$1].shift()));
 				let [o, h] = ce$1(this.path);
 				o && typeof h == "string" && (this.path = h, r = o);
 			}
-			this.win32 = !!i.win32 || process.platform === "win32", this.win32 && (this.path = Qs(this.path.replaceAll(/\\/g, "/")), t = t.replaceAll(/\\/g, "/")), this.absolute = f(i.absolute || path$1.resolve(this.cwd, t)), this.path === "" && (this.path = "./"), r && this.warn("TAR_ENTRY_INFO", `stripping ${r} from absolute path`, {
+			this.win32 = !!i.win32 || process.platform === "win32", this.win32 && (this.path = Qs(this.path.replaceAll(/\\/g, "/")), t = t.replaceAll(/\\/g, "/")), this.absolute = f(i.absolute || js.resolve(this.cwd, t)), this.path === "" && (this.path = "./"), r && this.warn("TAR_ENTRY_INFO", `stripping ${r} from absolute path`, {
 				entry: this,
 				path: r + this.path
 			});
@@ -253926,7 +253935,7 @@ while (this[Zs](this[st$1].shift()));
 		}
 		[sr](t) {
 			if (!this.stat) throw new Error("cannot create link entry without stat");
-			this.type = "Link", this.linkpath = f(path$1.relative(this.cwd, t)), this.stat.size = 0, this[fe$1](), this.end();
+			this.type = "Link", this.linkpath = f(js.relative(this.cwd, t)), this.stat.size = 0, this[fe$1](), this.end();
 		}
 		[er]() {
 			if (!this.stat) throw new Error("cannot create file entry without stat");
@@ -254285,7 +254294,7 @@ while (this[Zs](this[st$1].shift()));
 		constructor(t, e) {
 			this.path = t || "./", this.absolute = e;
 		}
-	}, nr = Buffer.alloc(1024), li = Symbol("onStat"), me$1 = Symbol("ended"), W$1 = Symbol("queue"), pe$2 = Symbol("pendingLinks"), Et = Symbol("current"), Ft$1 = Symbol("process"), Ee$1 = Symbol("processing"), ai = Symbol("processJob"), G = Symbol("jobs"), ls = Symbol("jobDone"), ci = Symbol("addFSEntry"), or = Symbol("addTarEntry"), ds = Symbol("stat"), us = Symbol("readdir"), fi = Symbol("onreaddir"), di = Symbol("pipe"), hr = Symbol("entry"), cs = Symbol("entryOpt"), ui = Symbol("writeEntryClass"), lr = Symbol("write"), fs$12 = Symbol("ondrain"), wt = class extends A$1 {
+	}, nr = Buffer.alloc(1024), li = Symbol("onStat"), me$1 = Symbol("ended"), W$1 = Symbol("queue"), pe$2 = Symbol("pendingLinks"), Et = Symbol("current"), Ft$1 = Symbol("process"), Ee$1 = Symbol("processing"), ai = Symbol("processJob"), G = Symbol("jobs"), ls = Symbol("jobDone"), ci = Symbol("addFSEntry"), or = Symbol("addTarEntry"), ds = Symbol("stat"), us = Symbol("readdir"), fi = Symbol("onreaddir"), di = Symbol("pipe"), hr = Symbol("entry"), cs = Symbol("entryOpt"), ui = Symbol("writeEntryClass"), lr = Symbol("write"), fs$11 = Symbol("ondrain"), wt = class extends A$1 {
 		sync = !1;
 		opt;
 		cwd;
@@ -254318,8 +254327,8 @@ while (this[Zs](this[st$1].shift()));
 				if ((t.gzip ? 1 : 0) + (t.brotli ? 1 : 0) + (t.zstd ? 1 : 0) > 1) throw new TypeError("gzip, brotli, zstd are mutually exclusive");
 				if (t.gzip && (typeof t.gzip != "object" && (t.gzip = {}), this.portable && (t.gzip.portable = !0), this.zip = new ze$1(t.gzip)), t.brotli && (typeof t.brotli != "object" && (t.brotli = {}), this.zip = new We$1(t.brotli)), t.zstd && (typeof t.zstd != "object" && (t.zstd = {}), this.zip = new Ye$1(t.zstd)), !this.zip) throw new Error("impossible");
 				let e = this.zip;
-				e.on("data", (i) => super.write(i)), e.on("end", () => super.end()), e.on("drain", () => this[fs$12]()), this.on("resume", () => e.resume());
-			} else this.on("drain", this[fs$12]);
+				e.on("data", (i) => super.write(i)), e.on("end", () => super.end()), e.on("drain", () => this[fs$11]()), this.on("resume", () => e.resume());
+			} else this.on("drain", this[fs$11]);
 			this.noDirRecurse = !!t.noDirRecurse, this.follow = !!t.follow, this.noMtime = !!t.noMtime, t.mtime && (this.mtime = t.mtime), this.filter = typeof t.filter == "function" ? t.filter : () => !0, this[W$1] = new hi(), this[G] = 0, this.jobs = Number(t.jobs) || 4, this[Ee$1] = !1, this[me$1] = !1;
 		}
 		[lr](t) {
@@ -254336,7 +254345,7 @@ while (this[Zs](this[st$1].shift()));
 			return typeof t == "string" ? this[ci](t) : this[or](t), this.flowing;
 		}
 		[or](t) {
-			let e = f(path$1.resolve(this.cwd, t.path));
+			let e = f(js.resolve(this.cwd, t.path));
 			if (!this.filter(t.path, t)) t.resume();
 			else {
 				let i = new pi(t.path, e);
@@ -254345,7 +254354,7 @@ while (this[Zs](this[st$1].shift()));
 			this[Ft$1]();
 		}
 		[ci](t) {
-			let e = f(path$1.resolve(this.cwd, t));
+			let e = f(js.resolve(this.cwd, t));
 			this[W$1].push(new pi(t, e)), this[Ft$1]();
 		}
 		[ds](t) {
@@ -254446,7 +254455,7 @@ while (this[Zs](this[st$1].shift()));
 				this.emit("error", e);
 			}
 		}
-		[fs$12]() {
+		[fs$11]() {
 			this[Et] && this[Et].entry && this[Et].entry.resume();
 		}
 		[di](t) {
@@ -254612,7 +254621,7 @@ while (this[Zs](this[st$1].shift()));
 			E ? e(E) : x && a ? Es(x, o, h, (Le) => y(Le)) : n ? Kt.chmod(s, r, e) : e();
 		};
 		if (s === d) return no(s, y);
-		if (l) return fs.mkdir(s, {
+		if (l) return ro.mkdir(s, {
 			mode: r,
 			recursive: !0
 		}).then((E) => y(null, E ?? void 0), y);
@@ -255371,7 +255380,7 @@ var require_pend = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region ../../node_modules/.pnpm/yauzl@3.3.0/node_modules/yauzl/fd-slicer.js
 var require_fd_slicer = /* @__PURE__ */ __commonJSMin(((exports) => {
-	var fs$11 = __require("fs");
+	var fs$10 = __require("fs");
 	var util$6 = __require("util");
 	var stream$2 = __require("stream");
 	var Readable = stream$2.Readable;
@@ -255396,7 +255405,7 @@ var require_fd_slicer = /* @__PURE__ */ __commonJSMin(((exports) => {
 	FdSlicer.prototype.read = function(buffer, offset, length, position, callback) {
 		var self = this;
 		self.pend.go(function(cb) {
-			fs$11.read(self.fd, buffer, offset, length, position, function(err, bytesRead, buffer) {
+			fs$10.read(self.fd, buffer, offset, length, position, function(err, bytesRead, buffer) {
 				cb();
 				callback(err, bytesRead, buffer);
 			});
@@ -255405,7 +255414,7 @@ var require_fd_slicer = /* @__PURE__ */ __commonJSMin(((exports) => {
 	FdSlicer.prototype.write = function(buffer, offset, length, position, callback) {
 		var self = this;
 		self.pend.go(function(cb) {
-			fs$11.write(self.fd, buffer, offset, length, position, function(err, written, buffer) {
+			fs$10.write(self.fd, buffer, offset, length, position, function(err, written, buffer) {
 				cb();
 				callback(err, written, buffer);
 			});
@@ -255425,7 +255434,7 @@ var require_fd_slicer = /* @__PURE__ */ __commonJSMin(((exports) => {
 		self.refCount -= 1;
 		if (self.refCount > 0) return;
 		if (self.refCount < 0) throw new Error("invalid unref");
-		if (self.autoClose) fs$11.close(self.fd, onCloseDone);
+		if (self.autoClose) fs$10.close(self.fd, onCloseDone);
 		function onCloseDone(err) {
 			if (err) self.emit("error", err);
 			else self.emit("close");
@@ -255456,7 +255465,7 @@ var require_fd_slicer = /* @__PURE__ */ __commonJSMin(((exports) => {
 		self.context.pend.go(function(cb) {
 			if (self.destroyed) return cb();
 			var buffer = Buffer.allocUnsafe(toRead);
-			fs$11.read(self.context.fd, buffer, 0, toRead, self.pos, function(err, bytesRead) {
+			fs$10.read(self.context.fd, buffer, 0, toRead, self.pos, function(err, bytesRead) {
 				if (err) self.destroy(err);
 				else if (bytesRead === 0) {
 					self.destroyed = true;
@@ -255502,7 +255511,7 @@ var require_fd_slicer = /* @__PURE__ */ __commonJSMin(((exports) => {
 		}
 		self.context.pend.go(function(cb) {
 			if (self.destroyed) return cb();
-			fs$11.write(self.context.fd, buffer, 0, buffer.length, self.pos, function(err, bytes) {
+			fs$10.write(self.context.fd, buffer, 0, buffer.length, self.pos, function(err, bytes) {
 				if (err) {
 					self.destroy();
 					cb();
@@ -261057,6 +261066,163 @@ var init_mistake_record = __esmMin((() => {
 	};
 }));
 //#endregion
+//#region ../../packages/agent-core/src/tools/builtin/media/blun-media.ts
+function contentPartFor(mimeType, url) {
+	if (mimeType.startsWith("image/")) return {
+		type: "image_url",
+		imageUrl: { url }
+	};
+	if (mimeType.startsWith("audio/")) return {
+		type: "audio_url",
+		audioUrl: { url }
+	};
+	if (mimeType.startsWith("video/")) return {
+		type: "video_url",
+		videoUrl: { url }
+	};
+}
+function errorMessage$10(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+var PromptSchema, MediaIdSchema, GenerateImageInputSchema, GenerateVideoInputSchema, GenerateSpeechInputSchema, GetMediaInputSchema, REQUEST_NOTE, MediaGenerationTool, GenerateImageTool, GenerateVideoTool, GenerateSpeechTool, GetMediaTool;
+var init_blun_media$1 = __esmMin((() => {
+	init_zod$1();
+	init_tool_access();
+	init_input_schema();
+	init_rule_match();
+	PromptSchema = string().trim().min(1).max(2e4);
+	MediaIdSchema = string().trim().min(1).max(200).regex(/^[A-Za-z0-9_-]+$/);
+	GenerateImageInputSchema = object({ prompt: PromptSchema.describe("A complete visual description of the image to generate.") });
+	GenerateVideoInputSchema = object({ prompt: PromptSchema.describe("A complete visual description of the video to generate.") });
+	GenerateSpeechInputSchema = object({ input: PromptSchema.describe("The exact text to synthesize as speech.") });
+	GetMediaInputSchema = object({ id: MediaIdSchema.describe("The media job id returned by a generation tool.") });
+	REQUEST_NOTE = "The request is asynchronous. Use GetMedia with the returned id to check progress and retrieve the result.";
+	MediaGenerationTool = class {
+		provider;
+		constructor(provider) {
+			this.provider = provider;
+		}
+		resolveExecution(args) {
+			const subject = this.subject(args);
+			const preview = subject.length > 60 ? `${subject.slice(0, 60)}...` : subject;
+			return {
+				accesses: ToolAccesses.all(),
+				description: `${this.name}: ${preview}`,
+				approvalRule: literalRulePattern(this.name, subject),
+				matchesRule: (ruleArgs) => matchesGlobRuleSubject(ruleArgs, subject),
+				execute: (ctx) => this.execution(args, ctx)
+			};
+		}
+		async execution(args, ctx) {
+			try {
+				const job = await this.submit(args, {
+					signal: ctx.signal,
+					toolCallId: ctx.toolCallId
+				});
+				return {
+					output: `Media job ${job.id} accepted with status ${job.status}. ${REQUEST_NOTE}`,
+					isError: false
+				};
+			} catch (error) {
+				return {
+					isError: true,
+					output: `Media request failed: ${errorMessage$10(error)}`
+				};
+			}
+		}
+	};
+	GenerateImageTool = class extends MediaGenerationTool {
+		name = "GenerateImage";
+		description = "Generate a new image from text with BLUN IMAGINE. Use this when the user asks to create an image, illustration, logo, or visual. This starts a billed asynchronous media job.";
+		parameters = toInputJsonSchema(GenerateImageInputSchema);
+		subject(args) {
+			return args.prompt;
+		}
+		submit(args, options) {
+			return this.provider.generateImage(args.prompt, options);
+		}
+	};
+	GenerateVideoTool = class extends MediaGenerationTool {
+		name = "GenerateVideo";
+		description = "Generate a new video from text with BLUN media models. Use this for motion or text-to-video requests, not for understanding an existing video. This starts a billed asynchronous media job.";
+		parameters = toInputJsonSchema(GenerateVideoInputSchema);
+		subject(args) {
+			return args.prompt;
+		}
+		submit(args, options) {
+			return this.provider.generateVideo(args.prompt, options);
+		}
+	};
+	GenerateSpeechTool = class extends MediaGenerationTool {
+		name = "GenerateSpeech";
+		description = "Synthesize spoken audio from exact text with BLUN VOICE. Use this for voice or speech generation. This starts a billed asynchronous media job.";
+		parameters = toInputJsonSchema(GenerateSpeechInputSchema);
+		subject(args) {
+			return args.input;
+		}
+		submit(args, options) {
+			return this.provider.generateSpeech(args.input, options);
+		}
+	};
+	GetMediaTool = class {
+		provider;
+		name = "GetMedia";
+		description = "Check a BLUN media job. If it is complete, return the generated image, audio, or video. Use only ids returned by GenerateImage, GenerateVideo, or GenerateSpeech.";
+		parameters = toInputJsonSchema(GetMediaInputSchema);
+		constructor(provider) {
+			this.provider = provider;
+		}
+		resolveExecution(args) {
+			return {
+				accesses: ToolAccesses.all(),
+				description: `GetMedia: ${args.id}`,
+				approvalRule: literalRulePattern(this.name, args.id),
+				matchesRule: (ruleArgs) => matchesGlobRuleSubject(ruleArgs, args.id),
+				execute: (ctx) => this.execution(args, ctx)
+			};
+		}
+		async execution(args, ctx) {
+			try {
+				const result = await this.provider.getMedia(args.id, {
+					signal: ctx.signal,
+					toolCallId: ctx.toolCallId
+				});
+				if (result.kind === "status") {
+					const terminalError = [
+						"failed",
+						"expired",
+						"blocked"
+					].includes(result.status.trim().toLowerCase());
+					const source = result.sourceId === void 0 ? "" : ` Source job ${result.sourceId}${result.sourceStatus === void 0 ? "" : ` status: ${result.sourceStatus}`}.`;
+					const retryable = result.retryable === void 0 ? "" : ` Retryable: ${result.retryable ? "yes" : "no"}.`;
+					return {
+						output: `Media job ${result.id} status: ${result.status}.${source}${retryable}`,
+						isError: terminalError
+					};
+				}
+				const url = `data:${result.mimeType};base64,${Buffer.from(result.data).toString("base64")}`;
+				const mediaPart = contentPartFor(result.mimeType, url);
+				if (mediaPart === void 0) return {
+					isError: true,
+					output: `Media job ${result.id} returned unsupported content type ${result.mimeType}.`
+				};
+				return {
+					output: [{
+						type: "text",
+						text: `Media job ${result.id} is complete.`
+					}, mediaPart],
+					isError: false
+				};
+			} catch (error) {
+				return {
+					isError: true,
+					output: `Media lookup failed: ${errorMessage$10(error)}`
+				};
+			}
+		}
+	};
+}));
+//#endregion
 //#region ../../packages/agent-core/src/tools/builtin/index.ts
 var init_builtin = __esmMin((() => {
 	init_task_list();
@@ -261087,6 +261253,7 @@ var init_builtin = __esmMin((() => {
 	init_web_search();
 	init_codebase_search();
 	init_mistake_record();
+	init_blun_media$1();
 }));
 //#endregion
 //#region ../../packages/agent-core/src/agent/tool/types.ts
@@ -261511,6 +261678,10 @@ var init_tool$1 = __esmMin((() => {
 				this.agent.subagentHost && new AgentSwarmTool(this.agent.subagentHost, this.agent.swarmMode),
 				toolServices?.webSearcher && new WebSearchTool(toolServices.webSearcher),
 				toolServices?.urlFetcher && new FetchURLTool(toolServices.urlFetcher),
+				toolServices?.media && new GenerateImageTool(toolServices.media),
+				toolServices?.media && new GenerateVideoTool(toolServices.media),
+				toolServices?.media && new GenerateSpeechTool(toolServices.media),
+				toolServices?.media && new GetMediaTool(toolServices.media),
 				new MistakeRecordTool(this.agent),
 				new CodebaseSearchTool(cwd)
 			].filter((tool) => !!tool).map((tool) => [tool.name, tool]));
@@ -292063,7 +292234,7 @@ var init_proxy = __esmMin((() => {
 var require_windows = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = isexe;
 	isexe.sync = sync;
-	var fs$9 = __require("fs");
+	var fs$8 = __require("fs");
 	function checkPathExt(path, options) {
 		var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT;
 		if (!pathext) return true;
@@ -292080,12 +292251,12 @@ var require_windows = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		return checkPathExt(path, options);
 	}
 	function isexe(path, options, cb) {
-		fs$9.stat(path, function(er, stat) {
+		fs$8.stat(path, function(er, stat) {
 			cb(er, er ? false : checkStat(stat, path, options));
 		});
 	}
 	function sync(path, options) {
-		return checkStat(fs$9.statSync(path), path, options);
+		return checkStat(fs$8.statSync(path), path, options);
 	}
 }));
 //#endregion
@@ -292093,14 +292264,14 @@ var require_windows = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 var require_mode = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = isexe;
 	isexe.sync = sync;
-	var fs$8 = __require("fs");
+	var fs$7 = __require("fs");
 	function isexe(path, options, cb) {
-		fs$8.stat(path, function(er, stat) {
+		fs$7.stat(path, function(er, stat) {
 			cb(er, er ? false : checkStat(stat, options));
 		});
 	}
 	function sync(path, options) {
-		return checkStat(fs$8.statSync(path), options);
+		return checkStat(fs$7.statSync(path), options);
 	}
 	function checkStat(stat, options) {
 		return stat.isFile() && checkMode(stat, options);
@@ -292164,7 +292335,7 @@ var require_isexe = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#region ../../node_modules/.pnpm/which@2.0.2/node_modules/which/which.js
 var require_which = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const isWindows = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
-	const path$10 = __require("path");
+	const path$9 = __require("path");
 	const COLON = isWindows ? ";" : ":";
 	const isexe = require_isexe();
 	const getNotFoundError = (cmd) => Object.assign(/* @__PURE__ */ new Error(`not found: ${cmd}`), { code: "ENOENT" });
@@ -292194,7 +292365,7 @@ var require_which = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			if (i === pathEnv.length) return opt.all && found.length ? resolve(found) : reject(getNotFoundError(cmd));
 			const ppRaw = pathEnv[i];
 			const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-			const pCmd = path$10.join(pathPart, cmd);
+			const pCmd = path$9.join(pathPart, cmd);
 			resolve(subStep(!pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd, i, 0));
 		});
 		const subStep = (p, i, ii) => new Promise((resolve, reject) => {
@@ -292215,7 +292386,7 @@ var require_which = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		for (let i = 0; i < pathEnv.length; i++) {
 			const ppRaw = pathEnv[i];
 			const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-			const pCmd = path$10.join(pathPart, cmd);
+			const pCmd = path$9.join(pathPart, cmd);
 			const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
 			for (let j = 0; j < pathExt.length; j++) {
 				const cur = p + pathExt[j];
@@ -292246,7 +292417,7 @@ var require_path_key = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js
 var require_resolveCommand = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const path$9 = __require("path");
+	const path$8 = __require("path");
 	const which = require_which();
 	const getPathKey = require_path_key();
 	function resolveCommandAttempt(parsed, withoutPathExt) {
@@ -292261,12 +292432,12 @@ var require_resolveCommand = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 		try {
 			resolved = which.sync(parsed.command, {
 				path: env[getPathKey({ env })],
-				pathExt: withoutPathExt ? path$9.delimiter : void 0
+				pathExt: withoutPathExt ? path$8.delimiter : void 0
 			});
 		} catch (e) {} finally {
 			if (shouldSwitchCwd) process.chdir(cwd);
 		}
-		if (resolved) resolved = path$9.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
+		if (resolved) resolved = path$8.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
 		return resolved;
 	}
 	function resolveCommand(parsed) {
@@ -292315,16 +292486,16 @@ var require_shebang_command = /* @__PURE__ */ __commonJSMin(((exports, module) =
 //#endregion
 //#region ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/readShebang.js
 var require_readShebang = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const fs$7 = __require("fs");
+	const fs$6 = __require("fs");
 	const shebangCommand = require_shebang_command();
 	function readShebang(command) {
 		const size = 150;
 		const buffer = Buffer.alloc(size);
 		let fd;
 		try {
-			fd = fs$7.openSync(command, "r");
-			fs$7.readSync(fd, buffer, 0, size, 0);
-			fs$7.closeSync(fd);
+			fd = fs$6.openSync(command, "r");
+			fs$6.readSync(fd, buffer, 0, size, 0);
+			fs$6.closeSync(fd);
 		} catch (e) {}
 		return shebangCommand(buffer.toString());
 	}
@@ -292333,7 +292504,7 @@ var require_readShebang = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js
 var require_parse$5 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const path$8 = __require("path");
+	const path$7 = __require("path");
 	const resolveCommand = require_resolveCommand();
 	const escape = require_escape();
 	const readShebang = require_readShebang();
@@ -292356,7 +292527,7 @@ var require_parse$5 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		const needsShell = !isExecutableRegExp.test(commandFile);
 		if (parsed.options.forceShell || needsShell) {
 			const needsDoubleEscapeMetaChars = isCmdShimRegExp.test(commandFile);
-			parsed.command = path$8.normalize(parsed.command);
+			parsed.command = path$7.normalize(parsed.command);
 			parsed.command = escape.command(parsed.command);
 			parsed.args = parsed.args.map((arg) => escape.argument(arg, needsDoubleEscapeMetaChars));
 			parsed.args = [
@@ -294283,7 +294454,7 @@ async function parseManifest(pluginRoot) {
 			}]
 		};
 	}
-	if (!isObject$3(raw)) return {
+	if (!isObject$4(raw)) return {
 		manifestKind,
 		manifestPath,
 		shadowedManifestPath,
@@ -294430,7 +294601,7 @@ async function resolvePluginPathField(input) {
 }
 function readSessionStart(raw, diagnostics) {
 	if (raw === void 0) return void 0;
-	if (!isObject$3(raw)) {
+	if (!isObject$4(raw)) {
 		diagnostics.push({
 			severity: "warn",
 			message: "\"sessionStart\" must be an object"
@@ -294449,7 +294620,7 @@ function readSessionStart(raw, diagnostics) {
 }
 async function readMcpServers(pluginRoot, raw, diagnostics) {
 	if (raw === void 0) return void 0;
-	if (!isObject$3(raw)) {
+	if (!isObject$4(raw)) {
 		diagnostics.push({
 			severity: "warn",
 			message: "\"mcpServers\" must be an object"
@@ -294600,7 +294771,7 @@ async function normalizePluginMcpServer(input) {
 }
 function readAuthor(raw) {
 	if (typeof raw === "string") return { name: raw };
-	if (!isObject$3(raw)) return void 0;
+	if (!isObject$4(raw)) return void 0;
 	const name = stringField$3(raw, "name");
 	const email = stringField$3(raw, "email");
 	if (name === void 0 && email === void 0) return void 0;
@@ -294610,7 +294781,7 @@ function readAuthor(raw) {
 	};
 }
 function readInterface(raw) {
-	if (!isObject$3(raw)) return void 0;
+	if (!isObject$4(raw)) return void 0;
 	const out = {
 		displayName: stringField$3(raw, "displayName"),
 		shortDescription: stringField$3(raw, "shortDescription"),
@@ -294631,7 +294802,7 @@ function stringArrayField$1(raw, key) {
 	if (!Array.isArray(value) || !value.every((entry) => typeof entry === "string")) return;
 	return value;
 }
-function isObject$3(value) {
+function isObject$4(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isWithin$1(child, parent) {
@@ -302337,7 +302508,7 @@ var init_sort = __esmMin((() => {
 }));
 //#endregion
 //#region ../../node_modules/.pnpm/css-select@5.2.2/node_modules/css-select/lib/esm/attributes.js
-function escapeRegex$1(value) {
+function escapeRegex$2(value) {
 	return value.replace(reChars, "\\$&");
 }
 function shouldIgnoreCase(selector, options) {
@@ -302430,7 +302601,7 @@ var init_attributes = __esmMin((() => {
 			const { adapter } = options;
 			const { name, value } = data;
 			if (/\s/.test(value)) return import_boolbase$5.default.falseFunc;
-			const regex = new RegExp(`(?:^|\\s)${escapeRegex$1(value)}(?:$|\\s)`, shouldIgnoreCase(data, options) ? "i" : "");
+			const regex = new RegExp(`(?:^|\\s)${escapeRegex$2(value)}(?:$|\\s)`, shouldIgnoreCase(data, options) ? "i" : "");
 			return function element(elem) {
 				const attr = adapter.getAttributeValue(elem, name);
 				return attr != null && attr.length >= value.length && regex.test(attr) && next(elem);
@@ -302480,7 +302651,7 @@ var init_attributes = __esmMin((() => {
 			const { name, value } = data;
 			if (value === "") return import_boolbase$5.default.falseFunc;
 			if (shouldIgnoreCase(data, options)) {
-				const regex = new RegExp(escapeRegex$1(value), "i");
+				const regex = new RegExp(escapeRegex$2(value), "i");
 				return function anyIC(elem) {
 					const attr = adapter.getAttributeValue(elem, name);
 					return attr != null && attr.length >= value.length && regex.test(attr) && next(elem);
@@ -308946,6 +309117,137 @@ var init_blun_web_search = __esmMin((() => {
 	};
 }));
 //#endregion
+//#region ../../packages/agent-core/src/tools/providers/blun-media.ts
+async function parseBlockedStatus(response, id) {
+	let payload = {};
+	try {
+		payload = await response.json();
+	} catch {}
+	const sourceId = payload["source_id"];
+	const sourceStatus = payload["source_status"];
+	const retryable = payload["retryable"];
+	return {
+		kind: "status",
+		id,
+		status: "blocked",
+		...typeof sourceId === "string" && sourceId.length > 0 ? { sourceId } : {},
+		...typeof sourceStatus === "string" && sourceStatus.length > 0 ? { sourceStatus } : {},
+		...typeof retryable === "boolean" ? { retryable } : {}
+	};
+}
+function parseJob(payload) {
+	const id = payload["id"];
+	const status = payload["status"];
+	if (typeof id !== "string" || id.length === 0 || typeof status !== "string" || status.length === 0) throw new Error("Media request returned an invalid job response.");
+	return {
+		id,
+		status
+	};
+}
+function parseStatus(payload, expectedId) {
+	const id = typeof payload["id"] === "string" && payload["id"].length > 0 ? payload["id"] : expectedId;
+	const status = payload["status"];
+	if (typeof status !== "string" || status.length === 0) throw new Error("Media lookup returned an invalid status response.");
+	return {
+		kind: "status",
+		id,
+		status
+	};
+}
+async function assertSuccess(response, operation) {
+	if (response.ok) return;
+	let detail = "";
+	try {
+		detail = (await response.text()).trim();
+	} catch {}
+	throw new Error(`${operation} failed: HTTP ${String(response.status)}${detail ? `: ${detail}` : ""}`);
+}
+var BlunMediaService;
+var init_blun_media = __esmMin((() => {
+	BlunMediaService = class {
+		tokenProvider;
+		apiKey;
+		baseUrl;
+		defaultHeaders;
+		customHeaders;
+		fetchImpl;
+		constructor(options) {
+			this.tokenProvider = options.tokenProvider;
+			this.apiKey = options.apiKey;
+			this.baseUrl = options.baseUrl.replace(/\/+$/, "");
+			this.defaultHeaders = options.defaultHeaders ?? {};
+			this.customHeaders = options.customHeaders ?? {};
+			this.fetchImpl = options.fetchImpl ?? globalThis.fetch.bind(globalThis);
+		}
+		generateImage(prompt, options) {
+			return this.submit("/images/generations", { prompt }, options);
+		}
+		generateVideo(prompt, options) {
+			return this.submit("/videos/generations", { prompt }, options);
+		}
+		generateSpeech(input, options) {
+			return this.submit("/audio/speech", { input }, options);
+		}
+		async getMedia(id, options) {
+			const response = await this.request(`/media/${encodeURIComponent(id)}`, { method: "GET" }, options);
+			if (response.status === 409) return parseBlockedStatus(response, id);
+			if (response.status === 410) return {
+				kind: "status",
+				id,
+				status: "expired"
+			};
+			await assertSuccess(response, "Media lookup");
+			const mimeType = response.headers.get("content-type")?.split(";", 1)[0]?.trim().toLowerCase() ?? "";
+			if (mimeType === "application/json" || mimeType.endsWith("+json")) return parseStatus(await response.json(), id);
+			if (!mimeType.startsWith("image/") && !mimeType.startsWith("audio/") && !mimeType.startsWith("video/")) throw new Error(`Media lookup returned unsupported content type ${mimeType || "(missing)"}`);
+			return {
+				kind: "file",
+				id,
+				mimeType,
+				data: new Uint8Array(await response.arrayBuffer())
+			};
+		}
+		async submit(path, body, options) {
+			const response = await this.request(path, {
+				method: "POST",
+				body: JSON.stringify(body)
+			}, options);
+			await assertSuccess(response, "Media request");
+			return parseJob(await response.json());
+		}
+		async request(path, init, options) {
+			const firstToken = await this.resolveToken(false);
+			const first = await this.fetchWithToken(path, init, options, firstToken);
+			if (first.status !== 401 || this.tokenProvider === void 0) return first;
+			const refreshed = await this.resolveToken(true);
+			return this.fetchWithToken(path, init, options, refreshed);
+		}
+		fetchWithToken(path, init, options, token) {
+			return this.fetchImpl(`${this.baseUrl}${path}`, {
+				...init,
+				signal: options?.signal,
+				headers: {
+					...this.defaultHeaders,
+					Authorization: `Bearer ${token}`,
+					...init.body === void 0 ? {} : { "Content-Type": "application/json" },
+					...options?.toolCallId === void 0 ? {} : { "X-Msh-Tool-Call-Id": options.toolCallId },
+					...this.customHeaders
+				}
+			});
+		}
+		async resolveToken(force) {
+			if (this.tokenProvider !== void 0) try {
+				return force ? await this.tokenProvider.getAccessToken({ force: true }) : await this.tokenProvider.getAccessToken();
+			} catch (error) {
+				if (this.apiKey !== void 0 && this.apiKey.length > 0) return this.apiKey;
+				throw error;
+			}
+			if (this.apiKey !== void 0 && this.apiKey.length > 0) return this.apiKey;
+			throw new Error("BLUN media service is not configured: missing API key or OAuth token provider.");
+		}
+	};
+}));
+//#endregion
 //#region ../../packages/agent-core/src/session/export/manifest.ts
 function buildExportManifest(args) {
 	return {
@@ -309314,7 +309616,7 @@ var require_dist$5 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region ../../node_modules/.pnpm/yazl@3.3.1/node_modules/yazl/index.js
 var require_yazl = /* @__PURE__ */ __commonJSMin(((exports) => {
-	var fs$6 = __require("fs");
+	var fs$5 = __require("fs");
 	var Transform$2 = __require("stream").Transform;
 	var PassThrough$2 = __require("stream").PassThrough;
 	var zlib$1 = __require("zlib");
@@ -309343,14 +309645,14 @@ var require_yazl = /* @__PURE__ */ __commonJSMin(((exports) => {
 		if (shouldIgnoreAdding(self)) return;
 		var entry = new Entry(metadataPath, false, options);
 		self.entries.push(entry);
-		fs$6.stat(realPath, function(err, stats) {
+		fs$5.stat(realPath, function(err, stats) {
 			if (err) return self.emit("error", err);
 			if (!stats.isFile()) return self.emit("error", /* @__PURE__ */ new Error("not a file: " + realPath));
 			entry.uncompressedSize = stats.size;
 			if (options.mtime == null) entry.setLastModDate(stats.mtime);
 			if (options.mode == null) entry.setFileAttributesMode(stats.mode);
 			entry.setFileDataPumpFunction(function() {
-				var readStream = fs$6.createReadStream(realPath);
+				var readStream = fs$5.createReadStream(realPath);
 				entry.state = Entry.FILE_DATA_IN_PROGRESS;
 				readStream.on("error", function(err) {
 					self.emit("error", err);
@@ -310046,12 +310348,12 @@ function assertBlunProviderType(provider) {
 	if (provider.type !== "blun") throw new BlunError(ErrorCodes.MODEL_CONFIG_INVALID, "Only the BLUN provider type is supported.");
 }
 function providerValue(configured, env, envKey) {
-	return nonEmptyString$1(configured) ?? envValue(env, envKey);
+	return nonEmptyString$2(configured) ?? envValue(env, envKey);
 }
 function envValue(env, key) {
-	return nonEmptyString$1(env?.[key]);
+	return nonEmptyString$2(env?.[key]);
 }
-function nonEmptyString$1(value) {
+function nonEmptyString$2(value) {
 	const trimmed = value?.trim();
 	return trimmed === void 0 || trimmed.length === 0 ? void 0 : trimmed;
 }
@@ -310682,10 +310984,10 @@ async function appendForkedMarkers(state) {
 		time: Date.now()
 	};
 	const agents = state["agents"];
-	if (!isRecord$14(agents)) return;
+	if (!isRecord$15(agents)) return;
 	const paths = /* @__PURE__ */ new Set();
 	for (const agentMeta of Object.values(agents)) {
-		if (!isRecord$14(agentMeta)) continue;
+		if (!isRecord$15(agentMeta)) continue;
 		const homedir = agentMeta["homedir"];
 		if (typeof homedir !== "string") continue;
 		paths.add(join$4(homedir, "wire.jsonl"));
@@ -310697,7 +310999,7 @@ async function appendForkedMarkers(state) {
 	}));
 }
 function customMetadataForFork(value) {
-	if (!isRecord$14(value)) return {};
+	if (!isRecord$15(value)) return {};
 	const custom = {};
 	for (const [key, entry] of Object.entries(value)) {
 		if (key === "goal" || key === "managedQuotaWarningThreshold") continue;
@@ -310752,10 +311054,10 @@ function normalizeForkTitle(title, fallback) {
 	return typeof fallback === "string" && fallback.trim().length > 0 ? fallback : "New Session";
 }
 function rewriteAgentHomedirs(value, sourceDir, targetDir) {
-	if (!isRecord$14(value)) return {};
+	if (!isRecord$15(value)) return {};
 	const agents = {};
 	for (const [agentId, agentMeta] of Object.entries(value)) {
-		if (!isRecord$14(agentMeta)) {
+		if (!isRecord$15(agentMeta)) {
 			agents[agentId] = agentMeta;
 			continue;
 		}
@@ -310773,7 +311075,7 @@ function remapSessionPath(value, sourceDir, targetDir) {
 	if (rel.startsWith("..") || isAbsolute$2(rel)) return value;
 	return join$4(targetDir, rel);
 }
-function isRecord$14(value) {
+function isRecord$15(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function statIfExists(path) {
@@ -311021,7 +311323,7 @@ var init_session_store$1 = __esmMin((() => {
 			} catch (error) {
 				throw new BlunError(ErrorCodes.SESSION_STATE_NOT_FOUND, `Session "${input.sourceId}" state.json was not found`, { cause: error });
 			}
-			if (!isRecord$14(parsed)) throw new BlunError(ErrorCodes.SESSION_STATE_INVALID, `Session "${input.sourceId}" state.json is invalid`);
+			if (!isRecord$15(parsed)) throw new BlunError(ErrorCodes.SESSION_STATE_INVALID, `Session "${input.sourceId}" state.json is invalid`);
 			const title = normalizeForkTitle(input.title, parsed["title"]);
 			const now = (/* @__PURE__ */ new Date()).toISOString();
 			const next = {
@@ -311196,14 +311498,14 @@ async function readGitExecPath(deps, gitExe) {
 	}
 }
 function gitBashCandidatesFromGitExe(gitExe) {
-	const normalizedGitExe = path$17.win32.normalize(normalizeWindowsPath(gitExe));
-	const gitDir = path$17.win32.dirname(normalizedGitExe);
-	const gitDirName = path$17.win32.basename(gitDir).toLowerCase();
+	const normalizedGitExe = path$16.win32.normalize(normalizeWindowsPath(gitExe));
+	const gitDir = path$16.win32.dirname(normalizedGitExe);
+	const gitDirName = path$16.win32.basename(gitDir).toLowerCase();
 	if (gitDirName !== "cmd" && gitDirName !== "bin") return;
-	return gitBashCandidatesFromGitRoot(path$17.win32.dirname(gitDir));
+	return gitBashCandidatesFromGitRoot(path$16.win32.dirname(gitDir));
 }
 function gitBashCandidatesFromGitExecPath(execPath) {
-	const normalized = path$17.win32.normalize(normalizeWindowsPath(execPath));
+	const normalized = path$16.win32.normalize(normalizeWindowsPath(execPath));
 	const parts = normalized.split("\\");
 	for (let i = parts.length - 1; i >= 0; i -= 1) {
 		const segment = parts[i]?.toLowerCase();
@@ -311212,16 +311514,16 @@ function gitBashCandidatesFromGitExecPath(execPath) {
 			if (root.length > 0) return gitBashCandidatesFromGitRoot(root);
 		}
 	}
-	return gitBashCandidatesFromGitRoot(path$17.win32.join(normalized, "..", ".."));
+	return gitBashCandidatesFromGitRoot(path$16.win32.join(normalized, "..", ".."));
 }
 function gitBashCandidatesFromGitRoot(root) {
-	return [path$17.win32.normalize(path$17.win32.join(root, "bin", "bash.exe")), path$17.win32.normalize(path$17.win32.join(root, "usr", "bin", "bash.exe"))];
+	return [path$16.win32.normalize(path$16.win32.join(root, "bin", "bash.exe")), path$16.win32.normalize(path$16.win32.join(root, "usr", "bin", "bash.exe"))];
 }
 function normalizeWindowsPath(path) {
 	return path.replaceAll("/", "\\");
 }
 function isAbsoluteWindowsPath(path) {
-	return path$17.win32.isAbsolute(normalizeWindowsPath(path));
+	return path$16.win32.isAbsolute(normalizeWindowsPath(path));
 }
 function dedupeWindowsPaths(paths) {
 	const deduped = [];
@@ -312204,6 +312506,7 @@ async function createRuntimeConfig(input) {
 	const localFetcher = new LocalFetchURLProvider();
 	const searchService = input.config.services?.blunSearch;
 	const fetchService = input.config.services?.blunFetch;
+	const mediaService = input.config.services?.blunMedia;
 	return {
 		urlFetcher: fetchService?.baseUrl === void 0 ? localFetcher : new BlunFetchURLProvider({
 			baseUrl: fetchService.baseUrl,
@@ -312215,17 +312518,22 @@ async function createRuntimeConfig(input) {
 			baseUrl: searchService.baseUrl,
 			defaultHeaders: input.blunRequestHeaders,
 			...serviceCredentials(searchService, input.resolveOAuthTokenProvider)
+		}),
+		media: mediaService?.baseUrl === void 0 ? void 0 : new BlunMediaService({
+			baseUrl: mediaService.baseUrl,
+			defaultHeaders: input.blunRequestHeaders,
+			...serviceCredentials(mediaService, input.resolveOAuthTokenProvider)
 		})
 	};
 }
 function serviceCredentials(service, resolveOAuthTokenProvider) {
 	return {
-		apiKey: nonEmptyString(service.apiKey),
+		apiKey: nonEmptyString$1(service.apiKey),
 		tokenProvider: service.oauth !== void 0 ? resolveOAuthTokenProvider?.(BLUN_PROVIDER_NAME, service.oauth) : void 0,
 		customHeaders: service.customHeaders
 	};
 }
-function nonEmptyString(value) {
+function nonEmptyString$1(value) {
 	const trimmed = value?.trim();
 	return trimmed === void 0 || trimmed.length === 0 ? void 0 : trimmed;
 }
@@ -312309,6 +312617,7 @@ var init_core_impl = __esmMin((() => {
 	init_local_fetch_url();
 	init_blun_fetch_url();
 	init_blun_web_search();
+	init_blun_media();
 	init_version();
 	init_thinking();
 	init_agent();
@@ -324034,7 +324343,7 @@ var SDKRpcClientBase = class {
 				type: "error",
 				sessionId: request.sessionId,
 				agentId: request.agentId,
-				...makeErrorPayload(ErrorCodes.SESSION_APPROVAL_HANDLER_ERROR, errorMessage$6(error))
+				...makeErrorPayload(ErrorCodes.SESSION_APPROVAL_HANDLER_ERROR, errorMessage$9(error))
 			});
 			return {
 				decision: "cancelled",
@@ -324052,7 +324361,7 @@ var SDKRpcClientBase = class {
 				type: "error",
 				sessionId: request.sessionId,
 				agentId: request.agentId,
-				...makeErrorPayload(ErrorCodes.SESSION_QUESTION_HANDLER_ERROR, errorMessage$6(error))
+				...makeErrorPayload(ErrorCodes.SESSION_QUESTION_HANDLER_ERROR, errorMessage$9(error))
 			});
 			return null;
 		}
@@ -324072,7 +324381,7 @@ var SDKRpcClientBase = class {
 			return await handler(request);
 		} catch (error) {
 			return {
-				output: `Tool handler error for "${request.toolName ?? "(unknown)"}": ${errorMessage$6(error)}`,
+				output: `Tool handler error for "${request.toolName ?? "(unknown)"}": ${errorMessage$9(error)}`,
 				isError: true
 			};
 		}
@@ -324096,7 +324405,7 @@ var ClientAPI = class {
 		return this.client.toolCall(request);
 	}
 };
-function errorMessage$6(error) {
+function errorMessage$9(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
@@ -325910,8 +326219,8 @@ var require_suggestSimilar = /* @__PURE__ */ __commonJSMin(((exports) => {
 var require_command = /* @__PURE__ */ __commonJSMin(((exports) => {
 	const EventEmitter$12 = __require("node:events").EventEmitter;
 	const childProcess = __require("node:child_process");
-	const path$7 = __require("node:path");
-	const fs$5 = __require("node:fs");
+	const path$6 = __require("node:path");
+	const fs$4 = __require("node:fs");
 	const process$2 = __require("node:process");
 	const { Argument, humanReadableArgName } = require_argument();
 	const { CommanderError } = require_error$2();
@@ -326794,7 +327103,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
 		* @param {string} subcommandName
 		*/
 		_checkForMissingExecutable(executableFile, executableDir, subcommandName) {
-			if (fs$5.existsSync(executableFile)) return;
+			if (fs$4.existsSync(executableFile)) return;
 			const executableMissing = `'${executableFile}' does not exist
  - if '${subcommandName}' is not meant to be an executable command, remove description parameter from '.command()' and use '.description()' instead
  - if the default executable name is not suitable, use the executableFile option to supply a custom name or path
@@ -326817,10 +327126,10 @@ Expecting one of '${allowedValues.join("', '")}'`);
 				".cjs"
 			];
 			function findFile(baseDir, baseName) {
-				const localBin = path$7.resolve(baseDir, baseName);
-				if (fs$5.existsSync(localBin)) return localBin;
-				if (sourceExt.includes(path$7.extname(baseName))) return void 0;
-				const foundExt = sourceExt.find((ext) => fs$5.existsSync(`${localBin}${ext}`));
+				const localBin = path$6.resolve(baseDir, baseName);
+				if (fs$4.existsSync(localBin)) return localBin;
+				if (sourceExt.includes(path$6.extname(baseName))) return void 0;
+				const foundExt = sourceExt.find((ext) => fs$4.existsSync(`${localBin}${ext}`));
 				if (foundExt) return `${localBin}${foundExt}`;
 			}
 			this._checkForMissingMandatoryOptions();
@@ -326830,21 +327139,21 @@ Expecting one of '${allowedValues.join("', '")}'`);
 			if (this._scriptPath) {
 				let resolvedScriptPath;
 				try {
-					resolvedScriptPath = fs$5.realpathSync(this._scriptPath);
+					resolvedScriptPath = fs$4.realpathSync(this._scriptPath);
 				} catch {
 					resolvedScriptPath = this._scriptPath;
 				}
-				executableDir = path$7.resolve(path$7.dirname(resolvedScriptPath), executableDir);
+				executableDir = path$6.resolve(path$6.dirname(resolvedScriptPath), executableDir);
 			}
 			if (executableDir) {
 				let localFile = findFile(executableDir, executableFile);
 				if (!localFile && !subcommand._executableFile && this._scriptPath) {
-					const legacyName = path$7.basename(this._scriptPath, path$7.extname(this._scriptPath));
+					const legacyName = path$6.basename(this._scriptPath, path$6.extname(this._scriptPath));
 					if (legacyName !== this._name) localFile = findFile(executableDir, `${legacyName}-${subcommand._name}`);
 				}
 				executableFile = localFile || executableFile;
 			}
-			launchWithNode = sourceExt.includes(path$7.extname(executableFile));
+			launchWithNode = sourceExt.includes(path$6.extname(executableFile));
 			let proc;
 			if (process$2.platform !== "win32") if (launchWithNode) {
 				args.unshift(executableFile);
@@ -327548,7 +327857,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
 		* @return {Command}
 		*/
 		nameFromFilename(filename) {
-			this._name = path$7.basename(filename, path$7.extname(filename));
+			this._name = path$6.basename(filename, path$6.extname(filename));
 			return this;
 		}
 		/**
@@ -333628,7 +333937,7 @@ var AcpSession = class {
 					break;
 			}
 		} catch (error) {
-			await this.emitLocalCommandMessage(`/${name} failed: ${errorMessage$5(error)}`);
+			await this.emitLocalCommandMessage(`/${name} failed: ${errorMessage$8(error)}`);
 		}
 		return { stopReason: "end_turn" };
 	}
@@ -334019,7 +334328,7 @@ var AcpSession = class {
 		}
 	}
 };
-function errorMessage$5(error) {
+function errorMessage$8(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 function formatHelpReport(commands) {
@@ -336508,8 +336817,8 @@ function createAccountMemoryClient(auth, options = {}) {
 }
 function readAccountMemoryConsentStatus(payload) {
 	const settings = unwrapPayload(payload)?.["settings"];
-	const dataControls = isRecord$13(settings) ? settings["data_controls"] : void 0;
-	if (!isRecord$13(dataControls)) throw new Error("Account memory returned an invalid response.");
+	const dataControls = isRecord$14(settings) ? settings["data_controls"] : void 0;
+	if (!isRecord$14(dataControls)) throw new Error("Account memory returned an invalid response.");
 	if (dataControls["memory_consent_asked"] !== true) return "never_asked";
 	if (dataControls["allow_memory"] === true) return "enabled";
 	if (dataControls["allow_memory"] === false) return "disabled";
@@ -336632,8 +336941,8 @@ function memoryContextSummary(facts, included) {
 	})}`;
 }
 function unwrapPayload(value) {
-	if (!isRecord$13(value)) return void 0;
-	return isRecord$13(value["data"]) ? value["data"] : value;
+	if (!isRecord$14(value)) return void 0;
+	return isRecord$14(value["data"]) ? value["data"] : value;
 }
 function readFacts(root) {
 	let rawFacts = [];
@@ -336641,7 +336950,7 @@ function readFacts(root) {
 	else {
 		const factsJson = parseFactsJson(root["facts_json"]);
 		if (Array.isArray(factsJson)) rawFacts = factsJson;
-		else if (isRecord$13(factsJson) && Array.isArray(factsJson["facts"])) rawFacts = factsJson["facts"];
+		else if (isRecord$14(factsJson) && Array.isArray(factsJson["facts"])) rawFacts = factsJson["facts"];
 	}
 	const facts = [];
 	const seen = /* @__PURE__ */ new Set();
@@ -336670,7 +336979,7 @@ function parseFactsJson(value) {
 	}
 }
 function normalizeFact(value) {
-	const raw = typeof value === "string" ? value : isRecord$13(value) && typeof value["text"] === "string" ? value["text"] : void 0;
+	const raw = typeof value === "string" ? value : isRecord$14(value) && typeof value["text"] === "string" ? value["text"] : void 0;
 	if (raw === void 0) return void 0;
 	const normalized = raw.replaceAll(/\s+/gu, " ").trim();
 	if (normalized.length === 0) return void 0;
@@ -336679,7 +336988,7 @@ function normalizeFact(value) {
 		truncated: normalized.length > ACCOUNT_MEMORY_MAX_FACT_CHARS
 	};
 }
-function isRecord$13(value) {
+function isRecord$14(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 //#endregion
@@ -337848,7 +338157,7 @@ async function updateTuiAppearance(appearance, filePath = getTuiConfigPath()) {
 				throw new TuiConfigParseError(DEFAULT_TUI_CONFIG);
 			}
 		} catch (error) {
-			if (!isNotFound$1(error)) throw error;
+			if (!isNotFound$3(error)) throw error;
 		}
 		const next = TuiConfigSchema.parse({
 			...current,
@@ -337946,7 +338255,7 @@ async function writeTuiConfigAtomic(config, filePath) {
 		throw error;
 	}
 }
-function isNotFound$1(error) {
+function isNotFound$3(error) {
 	return typeof error === "object" && error !== null && error.code === "ENOENT";
 }
 function renderAppearanceConfig(appearance) {
@@ -337966,7 +338275,7 @@ function escapeTomlBasicString(value) {
 //#region src/cli/sub/doctor.ts
 init_zod$1();
 async function handleDoctor(deps, options) {
-	const resolved = resolveDeps(deps);
+	const resolved = resolveDeps$1(deps);
 	const specs = await buildCheckSpecs(resolved, options, resolved.cwd());
 	const results = await Promise.all(specs.map((spec) => checkTomlFile(resolved, spec)));
 	const issueCount = results.filter((result) => result.status === "ERROR").length;
@@ -337993,11 +338302,11 @@ function registerDoctorCommand(parent, deps) {
 	});
 }
 async function runDoctorCommand(deps, options) {
-	const resolved = resolveDeps(deps);
+	const resolved = resolveDeps$1(deps);
 	const code = await handleDoctor(resolved, options);
 	if (code !== 0) resolved.exit(code);
 }
-function resolveDeps(deps) {
+function resolveDeps$1(deps) {
 	let configRpc = deps?.configRpc;
 	const getConfigRpc = () => {
 		configRpc ??= createBlunConfigRpc();
@@ -338120,7 +338429,7 @@ function formatErrorMessage$4(error, filePath) {
 function findValidationIssues(error) {
 	if (!(error instanceof Error)) return void 0;
 	const details = "details" in error ? error.details : void 0;
-	if (!isRecord$12(details)) return void 0;
+	if (!isRecord$13(details)) return void 0;
 	const validationIssues = details["validationIssues"];
 	return isValidationIssueArray(validationIssues) ? validationIssues : void 0;
 }
@@ -338128,11 +338437,11 @@ function isValidationIssueArray(value) {
 	return Array.isArray(value) && value.every(isValidationIssue);
 }
 function isValidationIssue(value) {
-	if (!isRecord$12(value) || typeof value["message"] !== "string") return false;
+	if (!isRecord$13(value) || typeof value["message"] !== "string") return false;
 	const path = value["path"];
 	return Array.isArray(path) && path.every((segment) => typeof segment === "string" || typeof segment === "number");
 }
-function isRecord$12(value) {
+function isRecord$13(value) {
 	return typeof value === "object" && value !== null;
 }
 function findZodError(error) {
@@ -338397,7 +338706,7 @@ async function handleExport(deps, sessionId, output, opts) {
 		});
 		deps.stdout.write(`${result.zipPath}\n`);
 	} catch (error) {
-		deps.stderr.write(`${errorMessage$4(error)}\n`);
+		deps.stderr.write(`${errorMessage$7(error)}\n`);
 		deps.exit(1);
 	}
 }
@@ -338500,7 +338809,7 @@ async function confirmPreviousSession(summary) {
 		rl.close();
 	}
 }
-function errorMessage$4(error) {
+function errorMessage$7(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
@@ -338511,6 +338820,1444 @@ function registerLoginCommand(parent) {
 	});
 }
 //#endregion
+//#region src/mistakes/inflow-client.ts
+const MISTAKE_INVENTORY_STATUSES = [
+	"counted",
+	"uncounted",
+	"unverified"
+];
+const MISTAKE_ACTUALITY_STATUSES = [
+	"fresh",
+	"stale",
+	"unverified"
+];
+const MISTAKE_SOURCE_FORMS = [
+	"case_collection",
+	"class_collection",
+	"finding_collection",
+	"lesson_collection",
+	"state_collection",
+	"mixed",
+	"unknown"
+];
+const MISTAKE_RECORD_TYPES = [
+	"case",
+	"class",
+	"finding",
+	"lesson",
+	"state",
+	"unknown"
+];
+const MISTAKE_RELATION_TYPES = [
+	"instance_of",
+	"lesson_from",
+	"state_of",
+	"independently_corroborates"
+];
+const MISTAKE_WATCHDOG_STATUSES = [
+	"disabled",
+	"green",
+	"yellow",
+	"red"
+];
+const DEFAULT_DEPS$2 = {
+	fetch: globalThis.fetch,
+	now: () => /* @__PURE__ */ new Date(),
+	randomUUID
+};
+const SOURCE_ID_RE = /^[a-z0-9][a-z0-9._-]{0,79}$/;
+const SHA256_RE = /^[a-f0-9]{64}$/;
+const UUID_RE$1 = /^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/i;
+const ENVELOPE_KEYS = [
+	"version",
+	"client_event_id",
+	"source_id",
+	"source_form",
+	"declared_record_types",
+	"original_name",
+	"captured_at",
+	"inventory",
+	"declared_raw_bytes",
+	"declared_raw_sha256",
+	"payload_base64",
+	"declarations"
+];
+const INVENTORY_KEYS = [
+	"scope",
+	"bestandsstatus",
+	"aktualitaetsstatus",
+	"declared_entry_count",
+	"last_raw_observed_at"
+];
+const STATE_ACTION_KEYS = [
+	"version",
+	"action_id",
+	"action",
+	"target_event_id",
+	"acted_at",
+	"server_sequence",
+	"principal_id",
+	"reason"
+];
+const MAX_MISTAKE_SOURCE_BYTES = 20 * 1024 * 1024;
+function normalizeMistakeSourceId(value) {
+	const normalized = value.normalize("NFKC").trim().toLocaleLowerCase("en-US");
+	if (!SOURCE_ID_RE.test(normalized)) throw new Error("source id must use 1-80 lowercase letters, digits, dots, underscores, or hyphens");
+	return normalized;
+}
+function assertSafeMistakeInflowEndpoint(value) {
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		throw new Error("mistake inflow endpoint is not a valid URL");
+	}
+	if (url.username !== "" || url.password !== "" || url.search !== "" || url.hash !== "") throw new Error("mistake inflow endpoint must not contain credentials, a query, or a fragment");
+	if (url.pathname !== "/" && url.pathname !== "") throw new Error("mistake inflow endpoint must not include a path");
+	if (url.protocol === "https:") return url;
+	if (url.protocol !== "http:" || !isPrivateHttpHost(url.hostname)) throw new Error("plain HTTP mistake inflow is allowed only on loopback or Tailscale addresses");
+	return url;
+}
+function isPrivateHttpHost(hostname) {
+	if (hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1" || hostname === "[::1]") return true;
+	const parts = hostname.split(".").map(Number);
+	const first = parts[0];
+	const second = parts[1];
+	return parts.length === 4 && parts.every((part) => Number.isInteger(part) && part >= 0 && part <= 255) && first === 100 && second !== void 0 && second >= 64 && second <= 127;
+}
+function assertIsoTimestamp$2(value, label) {
+	const parsed = new Date(value);
+	if (!Number.isFinite(parsed.valueOf()) || !/(?:Z|[+-]\d{2}:\d{2})$/.test(value)) throw new Error(`${label} must be an ISO-8601 timestamp with a timezone`);
+	return value;
+}
+function assertEntryCount(value) {
+	if (value === void 0) return null;
+	if (!Number.isSafeInteger(value) || value < 0) throw new Error("declared entry count must be a non-negative safe integer");
+	return value;
+}
+function parseMistakeRecordDeclarations(value, sourceId, declaredRecordTypes) {
+	if (!isRecord$12(value) || !hasOnlyKeys(value, [
+		"version",
+		"records",
+		"relations"
+	]) || value["version"] !== 1) throw new Error("record declarations must use version 1 and contain only records and relations");
+	if (!Array.isArray(value["records"]) || value["records"].length > 1e5 || !Array.isArray(value["relations"]) || value["relations"].length > 1e5) throw new Error("record declarations require records and relations arrays of at most 100000 items");
+	normalizeMistakeSourceId(sourceId);
+	const allowedRecordTypes = new Set(declaredRecordTypes);
+	if (allowedRecordTypes.size === 0 || [...allowedRecordTypes].some((type) => !MISTAKE_RECORD_TYPES.includes(type))) throw new Error("declared source record types are invalid");
+	const recordIds = /* @__PURE__ */ new Set();
+	return {
+		version: 1,
+		records: value["records"].map((candidate, index) => {
+			if (!isRecord$12(candidate) || !hasOnlyKeys(candidate, [
+				"source_record_id",
+				"type",
+				"raw_locator"
+			])) throw new Error(`record declaration ${index} is invalid`);
+			const recordId = candidate["source_record_id"];
+			const type = candidate["type"];
+			const rawLocator = candidate["raw_locator"];
+			if (typeof recordId !== "string" || !isValidRecordId(recordId)) throw new Error(`record declaration ${index} has an invalid record id`);
+			if (recordIds.has(recordId)) throw new Error(`duplicate record id: ${recordId}`);
+			if (typeof type !== "string" || !MISTAKE_RECORD_TYPES.includes(type) || !allowedRecordTypes.has(type)) throw new Error(`record ${recordId} uses a type not declared by its source`);
+			if (typeof rawLocator !== "string" || !isSafeRawLocator(rawLocator)) throw new Error(`record ${recordId} has an invalid raw locator`);
+			recordIds.add(recordId);
+			return {
+				source_record_id: recordId,
+				type,
+				raw_locator: rawLocator
+			};
+		}),
+		relations: value["relations"].map((candidate, index) => {
+			if (!isRecord$12(candidate) || !hasOnlyKeys(candidate, [
+				"from_source_record_id",
+				"type",
+				"to"
+			])) throw new Error(`record relation ${index} is invalid`);
+			const fromRecordId = candidate["from_source_record_id"];
+			const type = candidate["type"];
+			const target = candidate["to"];
+			if (typeof fromRecordId !== "string" || !isValidRecordId(fromRecordId) || !recordIds.has(fromRecordId)) throw new Error(`record relation ${index} must start at a declared local record`);
+			if (typeof type !== "string" || !MISTAKE_RELATION_TYPES.includes(type)) throw new Error(`record relation ${index} has an invalid relation type`);
+			if (!isRecord$12(target) || !hasOnlyKeys(target, ["source_id", "source_record_id"])) throw new Error(`record relation ${index} has an invalid target`);
+			const targetSourceId = target["source_id"];
+			const targetRecordId = target["source_record_id"];
+			if (typeof targetSourceId !== "string" || !isNormalizedSourceId(targetSourceId)) throw new Error(`record relation ${index} has an invalid target source id`);
+			if (typeof targetRecordId !== "string" || !isValidRecordId(targetRecordId)) throw new Error(`record relation ${index} has an invalid target record id`);
+			return {
+				from_source_record_id: fromRecordId,
+				type,
+				to: {
+					source_id: targetSourceId,
+					source_record_id: targetRecordId
+				}
+			};
+		})
+	};
+}
+async function queueMistakeObservation(input, outboxDir, deps = DEFAULT_DEPS$2) {
+	const sourceStat = await lstat(input.filePath);
+	if (sourceStat.isSymbolicLink()) throw new Error("mistake source must not be a symbolic link");
+	if (!sourceStat.isFile()) throw new Error("mistake source must be a regular file");
+	if (sourceStat.size > 20971520) throw new Error(`mistake source exceeds ${MAX_MISTAKE_SOURCE_BYTES} bytes`);
+	const sourceHandle = await open(input.filePath, "r");
+	let raw;
+	try {
+		const openedStat = await sourceHandle.stat();
+		if (!openedStat.isFile() || openedStat.dev !== sourceStat.dev || openedStat.ino !== sourceStat.ino) throw new Error("mistake source changed while it was being opened");
+		raw = await sourceHandle.readFile();
+	} finally {
+		await sourceHandle.close();
+	}
+	if (raw.byteLength > 20971520) throw new Error(`mistake source exceeds ${MAX_MISTAKE_SOURCE_BYTES} bytes`);
+	const clientEventId = input.clientEventId ?? deps.randomUUID();
+	if (!UUID_RE$1.test(clientEventId)) throw new Error("client event id must be a UUID");
+	const capturedAt = assertIsoTimestamp$2(input.capturedAt ?? deps.now().toISOString(), "captured at");
+	const lastRawObservedAt = input.lastRawObservedAt === void 0 ? null : assertIsoTimestamp$2(input.lastRawObservedAt, "last raw observed at");
+	const recordTypes = [...new Set(input.recordTypes)];
+	if (recordTypes.length === 0 || recordTypes.some((type) => !MISTAKE_RECORD_TYPES.includes(type))) throw new Error("at least one valid declared record type is required");
+	if (!MISTAKE_SOURCE_FORMS.includes(input.sourceForm)) throw new Error("invalid source form");
+	if (!MISTAKE_INVENTORY_STATUSES.includes(input.bestandsstatus)) throw new Error("invalid bestandsstatus");
+	if (!MISTAKE_ACTUALITY_STATUSES.includes(input.aktualitaetsstatus)) throw new Error("invalid aktualitaetsstatus");
+	const declaredEntryCount = assertEntryCount(input.declaredEntryCount);
+	assertInventoryInvariants(input.bestandsstatus, input.aktualitaetsstatus, declaredEntryCount, lastRawObservedAt, capturedAt);
+	const sourceId = normalizeMistakeSourceId(input.sourceId);
+	const declarations = input.declarations === void 0 ? void 0 : parseMistakeRecordDeclarations(input.declarations, sourceId, recordTypes);
+	const envelope = {
+		version: 1,
+		client_event_id: clientEventId,
+		source_id: sourceId,
+		source_form: input.sourceForm,
+		declared_record_types: recordTypes,
+		original_name: basename(input.filePath),
+		captured_at: capturedAt,
+		inventory: {
+			scope: "lower_bound",
+			bestandsstatus: input.bestandsstatus,
+			aktualitaetsstatus: input.aktualitaetsstatus,
+			declared_entry_count: declaredEntryCount,
+			last_raw_observed_at: lastRawObservedAt
+		},
+		declared_raw_bytes: raw.byteLength,
+		declared_raw_sha256: createHash("sha256").update(raw).digest("hex"),
+		payload_base64: raw.toString("base64"),
+		declarations
+	};
+	const eventsDir = join(outboxDir, "events");
+	await ensureDurableMistakeDirectory(eventsDir);
+	await durableExclusiveWrite(join(eventsDir, `${clientEventId}.json`), `${JSON.stringify(envelope)}\n`);
+	return envelope;
+}
+function endpointUrl(endpoint, path) {
+	const base = assertSafeMistakeInflowEndpoint(endpoint);
+	return new URL(path, base);
+}
+async function readJsonResponse(response) {
+	const text = await response.text();
+	try {
+		return JSON.parse(text);
+	} catch {
+		throw new Error(`mistake inflow returned non-JSON HTTP ${response.status}`);
+	}
+}
+function isReceipt(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const item = value;
+	return item["version"] === 1 && item["accepted"] === true && typeof item["event_id"] === "string" && UUID_RE$1.test(item["event_id"]) && typeof item["client_event_id"] === "string" && UUID_RE$1.test(item["client_event_id"]) && typeof item["source_id"] === "string" && isNormalizedSourceId(item["source_id"]) && typeof item["canonical_agent_id"] === "string" && isNormalizedSourceId(item["canonical_agent_id"]) && typeof item["received_at"] === "string" && isIsoTimestamp(item["received_at"]) && item["raw_count"] === 1 && item["accepted_count"] === 1 && item["rejected_count"] === 0 && Number.isSafeInteger(item["raw_bytes"]) && item["raw_bytes"] >= 0 && typeof item["raw_sha256"] === "string" && SHA256_RE.test(item["raw_sha256"]) && isNullableEntryCount(item["declared_entry_count"]);
+}
+async function deliverQueuedObservation(clientEventId, options, deps = DEFAULT_DEPS$2) {
+	if (!UUID_RE$1.test(clientEventId)) throw new Error("client event id must be a UUID");
+	const envelope = parseQueuedEnvelope(await readFile(join(options.outboxDir, "events", `${clientEventId}.json`), "utf8"), clientEventId);
+	const controller = new AbortController();
+	const timeout = setTimeout(() => {
+		controller.abort();
+	}, 15e3);
+	let response;
+	try {
+		response = await deps.fetch(endpointUrl(options.endpoint, "/v1/observations"), {
+			method: "POST",
+			headers: {
+				authorization: `Bearer ${options.token}`,
+				"content-type": "application/json"
+			},
+			body: JSON.stringify(envelope),
+			signal: controller.signal,
+			redirect: "error"
+		});
+	} finally {
+		clearTimeout(timeout);
+	}
+	const body = await readJsonResponse(response);
+	if (response.status !== 202 || !isReceipt(body)) {
+		const bodyError = typeof body === "object" && body !== null ? body["error"] : void 0;
+		const message = typeof bodyError === "string" ? bodyError : `HTTP ${response.status}`;
+		throw new Error(`mistake inflow rejected ${clientEventId}: ${message}`);
+	}
+	if (!receiptMatchesEnvelope(body, envelope)) throw new Error(`mistake inflow receipt mismatch for ${clientEventId}`);
+	const receiptsDir = join(options.outboxDir, "receipts", clientEventId);
+	await ensureDurableMistakeDirectory(receiptsDir);
+	const receiptPath = join(receiptsDir, `${body.event_id}.json`);
+	try {
+		await durableExclusiveWrite(receiptPath, `${JSON.stringify(body)}\n`);
+	} catch (error) {
+		if (!isAlreadyExists$1(error)) throw error;
+		const existing = await readReceipt(receiptPath);
+		if (existing !== null && existing.event_id === body.event_id && receiptMatchesEnvelope(existing, envelope)) {
+			if (!receiptsEqual(existing, body)) throw new Error(`conflicting local receipt for ${clientEventId}`, { cause: error });
+		} else await durableExclusiveWrite(join(receiptsDir, `${body.event_id}.${randomUUID()}.json`), `${JSON.stringify(body)}\n`);
+	}
+	return body;
+}
+async function uploadMistakeObservation(input, options, deps = DEFAULT_DEPS$2) {
+	return deliverQueuedObservation((await queueMistakeObservation(input, options.outboxDir, deps)).client_event_id, options, deps);
+}
+async function drainMistakeOutbox(options, deps = DEFAULT_DEPS$2) {
+	const eventsDir = join(options.outboxDir, "events");
+	await ensureDurableMistakeDirectory(eventsDir);
+	const names = (await readdir(eventsDir)).filter((name) => UUID_RE$1.test(name.replace(/\.json$/, "")) && name.endsWith(".json")).toSorted();
+	const delivered = [];
+	const failed = [];
+	const pending = [];
+	for (const name of names) {
+		const clientEventId = name.slice(0, -5);
+		try {
+			const envelope = parseQueuedEnvelope(await readFile(join(eventsDir, name), "utf8"), clientEventId);
+			if (await findVerifiedLocalReceipt(envelope, options.outboxDir) !== null) continue;
+			pending.push(envelope);
+		} catch (error) {
+			failed.push({
+				clientEventId,
+				error: errorMessage$6(error)
+			});
+		}
+	}
+	pending.sort(compareObservationOrder);
+	for (const envelope of pending) try {
+		delivered.push(await deliverQueuedObservation(envelope.client_event_id, options, deps));
+	} catch (error) {
+		failed.push({
+			clientEventId: envelope.client_event_id,
+			error: errorMessage$6(error)
+		});
+	}
+	return {
+		delivered,
+		failed
+	};
+}
+async function getMistakeInflowStatus(endpoint, token, deps = DEFAULT_DEPS$2) {
+	const response = await deps.fetch(endpointUrl(endpoint, "/v1/status"), {
+		headers: { authorization: `Bearer ${token}` },
+		redirect: "error"
+	});
+	const body = await readJsonResponse(response);
+	if (response.status !== 200) throw new Error(`mistake inflow status failed: HTTP ${response.status}`);
+	if (!isMistakeInflowStatus(body)) throw new Error("mistake inflow status returned an invalid payload");
+	return body;
+}
+async function changeMistakeObservationState(action, eventId, reason, endpoint, token, deps = DEFAULT_DEPS$2) {
+	if (!UUID_RE$1.test(eventId)) throw new Error("event id must be a UUID");
+	const trimmedReason = reason.trim();
+	if (trimmedReason.length < 3 || trimmedReason.length > 500) throw new Error("reason must contain 3-500 characters");
+	const actionId = deps.randomUUID();
+	if (!UUID_RE$1.test(actionId)) throw new Error("generated action id must be a UUID");
+	const response = await deps.fetch(endpointUrl(endpoint, `/v1/observations/${eventId}:${action}`), {
+		method: "POST",
+		headers: {
+			authorization: `Bearer ${token}`,
+			"content-type": "application/json"
+		},
+		body: JSON.stringify({
+			action_id: actionId,
+			reason: trimmedReason
+		}),
+		redirect: "error"
+	});
+	const body = await readJsonResponse(response);
+	if (response.status !== 201) {
+		const bodyError = typeof body === "object" && body !== null ? body["error"] : void 0;
+		const detail = typeof bodyError === "string" ? bodyError : `HTTP ${response.status}`;
+		throw new Error(`mistake inflow ${action} failed: ${detail}`);
+	}
+	if (!isStateActionReceipt(body) || body.action_id !== actionId || body.action !== action || body.target_event_id !== eventId || body.reason !== trimmedReason) throw new Error(`mistake inflow ${action} returned a mismatched action receipt`);
+	return body;
+}
+function parseQueuedEnvelope(text, expectedClientEventId) {
+	let value;
+	try {
+		value = JSON.parse(text);
+	} catch {
+		throw new Error(`queued mistake event ${expectedClientEventId} is not valid JSON`);
+	}
+	if (typeof value !== "object" || value === null) throw new Error(`queued mistake event ${expectedClientEventId} is invalid`);
+	const item = value;
+	if (!hasOnlyKeys(item, ENVELOPE_KEYS) || item["version"] !== 1 || item["client_event_id"] !== expectedClientEventId || !UUID_RE$1.test(expectedClientEventId)) throw new Error(`queued mistake event ${expectedClientEventId} has an invalid identity`);
+	if (typeof item["source_id"] !== "string" || !isNormalizedSourceId(item["source_id"])) throw new Error(`queued mistake event ${expectedClientEventId} has an invalid source`);
+	if (typeof item["source_form"] !== "string" || !MISTAKE_SOURCE_FORMS.includes(item["source_form"])) throw new Error(`queued mistake event ${expectedClientEventId} has an invalid source form`);
+	const recordTypes = item["declared_record_types"];
+	if (!Array.isArray(recordTypes) || recordTypes.length === 0 || new Set(recordTypes).size !== recordTypes.length || recordTypes.some((type) => typeof type !== "string" || !MISTAKE_RECORD_TYPES.includes(type))) throw new Error(`queued mistake event ${expectedClientEventId} has invalid record types`);
+	if (typeof item["original_name"] !== "string" || item["original_name"] === "" || basename(item["original_name"]) !== item["original_name"]) throw new Error(`queued mistake event ${expectedClientEventId} has an invalid original name`);
+	if (typeof item["captured_at"] !== "string" || !isIsoTimestamp(item["captured_at"])) throw new Error(`queued mistake event ${expectedClientEventId} has an invalid capture time`);
+	const inventory = item["inventory"];
+	if (typeof inventory !== "object" || inventory === null) throw new Error(`queued mistake event ${expectedClientEventId} has invalid inventory metadata`);
+	const inventoryItem = inventory;
+	if (!hasOnlyKeys(inventoryItem, INVENTORY_KEYS) || inventoryItem["scope"] !== "lower_bound" || typeof inventoryItem["bestandsstatus"] !== "string" || !MISTAKE_INVENTORY_STATUSES.includes(inventoryItem["bestandsstatus"]) || typeof inventoryItem["aktualitaetsstatus"] !== "string" || !MISTAKE_ACTUALITY_STATUSES.includes(inventoryItem["aktualitaetsstatus"]) || !isNullableEntryCount(inventoryItem["declared_entry_count"]) || inventoryItem["last_raw_observed_at"] !== null && (typeof inventoryItem["last_raw_observed_at"] !== "string" || !isIsoTimestamp(inventoryItem["last_raw_observed_at"]))) throw new Error(`queued mistake event ${expectedClientEventId} has invalid inventory metadata`);
+	try {
+		assertInventoryInvariants(inventoryItem["bestandsstatus"], inventoryItem["aktualitaetsstatus"], inventoryItem["declared_entry_count"], inventoryItem["last_raw_observed_at"], item["captured_at"]);
+	} catch (error) {
+		throw new Error(`queued mistake event ${expectedClientEventId} has contradictory inventory metadata`, { cause: error });
+	}
+	if (!Number.isSafeInteger(item["declared_raw_bytes"]) || item["declared_raw_bytes"] < 0 || item["declared_raw_bytes"] > 20971520 || typeof item["declared_raw_sha256"] !== "string" || !SHA256_RE.test(item["declared_raw_sha256"]) || typeof item["payload_base64"] !== "string") throw new Error(`queued mistake event ${expectedClientEventId} has invalid payload metadata`);
+	const payload = Buffer.from(item["payload_base64"], "base64");
+	if (payload.toString("base64") !== item["payload_base64"] || payload.byteLength !== item["declared_raw_bytes"] || createHash("sha256").update(payload).digest("hex") !== item["declared_raw_sha256"]) throw new Error(`queued mistake event ${expectedClientEventId} failed payload integrity verification`);
+	if (item["declarations"] !== void 0) try {
+		parseMistakeRecordDeclarations(item["declarations"], item["source_id"], recordTypes);
+	} catch (error) {
+		throw new Error(`queued mistake event ${expectedClientEventId} has invalid record declarations`, { cause: error });
+	}
+	return value;
+}
+async function findVerifiedLocalReceipt(envelope, outboxDir) {
+	const receiptRoot = join(outboxDir, "receipts");
+	const paths = [join(receiptRoot, `${envelope.client_event_id}.json`)];
+	const eventReceiptDir = join(receiptRoot, envelope.client_event_id);
+	try {
+		const names = (await readdir(eventReceiptDir)).filter((name) => name.endsWith(".json")).toSorted();
+		paths.push(...names.map((name) => join(eventReceiptDir, name)));
+	} catch (error) {
+		if (!isNotFound$2(error)) throw error;
+	}
+	for (const path of paths) {
+		const candidate = await readReceipt(path);
+		if (candidate !== null && receiptMatchesEnvelope(candidate, envelope)) return candidate;
+	}
+	return null;
+}
+async function readReceipt(path) {
+	try {
+		const value = JSON.parse(await readFile(path, "utf8"));
+		return isReceipt(value) ? value : null;
+	} catch (error) {
+		if (isNotFound$2(error) || error instanceof SyntaxError) return null;
+		throw error;
+	}
+}
+function receiptMatchesEnvelope(receipt, envelope) {
+	return receipt.client_event_id === envelope.client_event_id && receipt.source_id === envelope.source_id && receipt.raw_bytes === envelope.declared_raw_bytes && receipt.raw_sha256 === envelope.declared_raw_sha256 && receipt.declared_entry_count === envelope.inventory.declared_entry_count;
+}
+function receiptsEqual(left, right) {
+	return left.version === right.version && left.accepted === right.accepted && left.event_id === right.event_id && left.client_event_id === right.client_event_id && left.source_id === right.source_id && left.canonical_agent_id === right.canonical_agent_id && left.received_at === right.received_at && left.raw_count === right.raw_count && left.accepted_count === right.accepted_count && left.rejected_count === right.rejected_count && left.raw_bytes === right.raw_bytes && left.raw_sha256 === right.raw_sha256 && left.declared_entry_count === right.declared_entry_count;
+}
+function isStateActionReceipt(value) {
+	if (!isRecord$12(value) || !hasOnlyKeys(value, STATE_ACTION_KEYS)) return false;
+	const reason = value["reason"];
+	return value["version"] === 1 && typeof value["action_id"] === "string" && UUID_RE$1.test(value["action_id"]) && (value["action"] === "remove" || value["action"] === "restore") && typeof value["target_event_id"] === "string" && UUID_RE$1.test(value["target_event_id"]) && typeof value["acted_at"] === "string" && isIsoTimestamp(value["acted_at"]) && Number.isSafeInteger(value["server_sequence"]) && value["server_sequence"] >= 1 && typeof value["principal_id"] === "string" && isNormalizedSourceId(value["principal_id"]) && typeof reason === "string" && reason.trim() === reason && reason.length >= 3 && reason.length <= 500;
+}
+function compareObservationOrder(left, right) {
+	const leftObservedAt = left.inventory.last_raw_observed_at ?? left.captured_at;
+	const rightObservedAt = right.inventory.last_raw_observed_at ?? right.captured_at;
+	return Date.parse(leftObservedAt) - Date.parse(rightObservedAt) || Date.parse(left.captured_at) - Date.parse(right.captured_at) || left.source_id.localeCompare(right.source_id) || left.client_event_id.localeCompare(right.client_event_id);
+}
+async function ensureDurableMistakeDirectory(path, deps) {
+	const io = deps ?? {
+		lstat,
+		mkdir,
+		syncDirectory
+	};
+	const missing = [];
+	let cursor = resolve(path);
+	while (true) try {
+		const existing = await io.lstat(cursor);
+		if (existing.isSymbolicLink() || !existing.isDirectory()) throw new Error(`mistake outbox path is not a real directory: ${cursor}`);
+		break;
+	} catch (error) {
+		if (!isNotFound$2(error)) throw error;
+		missing.push(cursor);
+		const parent = dirname(cursor);
+		if (parent === cursor) throw new Error(`mistake outbox has no existing parent: ${path}`, { cause: error });
+		cursor = parent;
+	}
+	for (const directory of missing.toReversed()) {
+		try {
+			await io.mkdir(directory, { mode: 448 });
+		} catch (error) {
+			if (!isAlreadyExists$1(error)) throw error;
+			const raced = await io.lstat(directory);
+			if (raced.isSymbolicLink() || !raced.isDirectory()) throw new Error(`mistake outbox path is not a real directory: ${directory}`, { cause: error });
+		}
+		await io.syncDirectory(dirname(directory));
+	}
+}
+async function durableExclusiveWrite(path, contents) {
+	const directory = dirname(path);
+	const temporaryPath = join(directory, `.${basename(path)}.${process.pid}.${randomUUID()}.tmp`);
+	let handle;
+	let failure;
+	try {
+		handle = await open(temporaryPath, "wx", 384);
+		await handle.writeFile(contents, "utf8");
+		await handle.sync();
+		await handle.close();
+		handle = void 0;
+		await link(temporaryPath, path);
+		await syncDirectory(directory);
+	} catch (error) {
+		failure = error;
+	}
+	if (handle !== void 0) try {
+		await handle.close();
+	} catch (error) {
+		failure ??= error;
+	}
+	try {
+		await unlink(temporaryPath);
+		await syncDirectory(directory);
+	} catch (error) {
+		if (!isNotFound$2(error)) failure ??= error;
+	}
+	if (failure !== void 0) throw failure;
+}
+async function syncDirectory(path) {
+	let handle;
+	try {
+		handle = await open(path, "r");
+		await handle.sync();
+	} catch (error) {
+		if (process.platform !== "win32" || !isUnsupportedDirectorySync(error)) throw error;
+	} finally {
+		await handle?.close().catch(() => void 0);
+	}
+}
+function isNormalizedSourceId(value) {
+	try {
+		return normalizeMistakeSourceId(value) === value;
+	} catch {
+		return false;
+	}
+}
+function isIsoTimestamp(value) {
+	try {
+		assertIsoTimestamp$2(value, "timestamp");
+		return true;
+	} catch {
+		return false;
+	}
+}
+function isNullableEntryCount(value) {
+	return value === null || Number.isSafeInteger(value) && value >= 0;
+}
+function assertInventoryInvariants(bestandsstatus, aktualitaetsstatus, declaredEntryCount, lastRawObservedAt, capturedAt) {
+	if (bestandsstatus === "counted" && declaredEntryCount === null) throw new Error("counted inventory requires a declared entry count");
+	if (bestandsstatus !== "counted" && declaredEntryCount !== null) throw new Error(`${bestandsstatus} inventory must not declare an entry count`);
+	if (aktualitaetsstatus === "fresh" && lastRawObservedAt === null) throw new Error("fresh inventory requires a last raw observed timestamp");
+	if (capturedAt !== void 0 && lastRawObservedAt !== null && Date.parse(lastRawObservedAt) > Date.parse(capturedAt)) throw new Error("last raw observed timestamp must not be later than captured at");
+}
+function isRecord$12(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function hasOnlyKeys(value, allowedKeys) {
+	return Object.keys(value).every((key) => allowedKeys.includes(key));
+}
+function isValidRecordId(value) {
+	const length = [...value].length;
+	return length >= 1 && length <= 200 && value.normalize("NFKC").trim() === value && !hasControlCharacter(value);
+}
+function isSafeRawLocator(value) {
+	const length = [...value].length;
+	return length >= 1 && length <= 1e3 && !hasControlCharacter(value);
+}
+function hasControlCharacter(value) {
+	return [...value].some((character) => {
+		const codePoint = character.codePointAt(0);
+		return codePoint !== void 0 && (codePoint < 32 || codePoint === 127);
+	});
+}
+function isMistakeInflowStatus(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const item = value;
+	if (item["version"] !== 1 || item["scope"] !== "lower_bound" || typeof item["generated_at"] !== "string" || !isIsoTimestamp(item["generated_at"]) || !isNonNegativeInteger(item["stale_after_seconds"]) || !Array.isArray(item["sources"])) return false;
+	const sourceIds = /* @__PURE__ */ new Set();
+	for (const source of item["sources"]) {
+		if (!isMistakeSourceStatus(source)) return false;
+		const sourceId = source["source_id"];
+		if (sourceIds.has(sourceId)) return false;
+		sourceIds.add(sourceId);
+	}
+	return true;
+}
+function isMistakeSourceStatus(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const item = value;
+	const recordTypes = item["record_types"];
+	const watchdogReasons = item["watchdog_reasons"];
+	if (!(typeof item["source_id"] === "string" && isNormalizedSourceId(item["source_id"]) && typeof item["raw_agent_id"] === "string" && item["raw_agent_id"].trim() !== "" && typeof item["canonical_agent_id"] === "string" && isNormalizedSourceId(item["canonical_agent_id"]) && typeof item["source_form"] === "string" && MISTAKE_SOURCE_FORMS.includes(item["source_form"]) && Array.isArray(recordTypes) && recordTypes.length > 0 && new Set(recordTypes).size === recordTypes.length && recordTypes.every((type) => typeof type === "string" && MISTAKE_RECORD_TYPES.includes(type)) && typeof item["bestandsstatus"] === "string" && MISTAKE_INVENTORY_STATUSES.includes(item["bestandsstatus"]) && typeof item["aktualitaetsstatus"] === "string" && MISTAKE_ACTUALITY_STATUSES.includes(item["aktualitaetsstatus"]) && isNullableEntryCount(item["declared_entry_count"]) && isNullableIsoTimestamp(item["last_raw_observed_at"]) && isNullableIsoTimestamp(item["last_attempt_at"]) && isNullableIsoTimestamp(item["last_success_at"]) && isNonNegativeInteger(item["successful_observations"]) && isNonNegativeInteger(item["active_observations"]) && isNonNegativeInteger(item["rejected_attempts"]) && isNonNegativeInteger(item["seconds_since_success_or_monitor_start"]) && typeof item["watchdog"] === "string" && MISTAKE_WATCHDOG_STATUSES.includes(item["watchdog"]) && Array.isArray(watchdogReasons) && watchdogReasons.every((reason) => typeof reason === "string" && reason.trim() !== ""))) return false;
+	try {
+		assertInventoryInvariants(item["bestandsstatus"], item["aktualitaetsstatus"], item["declared_entry_count"], item["last_raw_observed_at"]);
+		return true;
+	} catch {
+		return false;
+	}
+}
+function isNullableIsoTimestamp(value) {
+	return value === null || typeof value === "string" && isIsoTimestamp(value);
+}
+function isNonNegativeInteger(value) {
+	return Number.isSafeInteger(value) && value >= 0;
+}
+function isAlreadyExists$1(error) {
+	return typeof error === "object" && error !== null && error.code === "EEXIST";
+}
+function isNotFound$2(error) {
+	return typeof error === "object" && error !== null && error.code === "ENOENT";
+}
+function isUnsupportedDirectorySync(error) {
+	if (typeof error !== "object" || error === null) return false;
+	return [
+		"EACCES",
+		"EBADF",
+		"EINVAL",
+		"EPERM"
+	].includes(error.code ?? "");
+}
+function errorMessage$6(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+//#endregion
+//#region src/mistakes/source-sync.ts
+const DIRECTORY_SNAPSHOT_FORMAT = "blun.mistakes.directory-snapshot.v1";
+const TOKEN_ENV_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const UUID_RE = /^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/i;
+const TRANSPORT_STALE_AFTER_SECONDS = 1440 * 60;
+const DEFAULT_DEPS$1 = {
+	drain: (options) => drainMistakeOutbox(options),
+	upload: (input, options) => uploadMistakeObservation(input, options),
+	now: () => /* @__PURE__ */ new Date()
+};
+async function loadMistakeSourceSyncConfig(configPath) {
+	const absolutePath = resolve(configPath);
+	const fileStat = await lstat(absolutePath);
+	if (fileStat.isSymbolicLink() || !fileStat.isFile()) throw new Error("mistake source config must be a regular, non-symlink file");
+	let value;
+	try {
+		value = JSON.parse(await readFile(absolutePath, "utf8"));
+	} catch (error) {
+		if (error instanceof SyntaxError) throw new Error("mistake source config is not valid JSON", { cause: error });
+		throw error;
+	}
+	return parseConfig(value, dirname(absolutePath));
+}
+async function buildSourceSnapshot(adapter) {
+	return adapter.type === "file" ? buildFileSnapshot(adapter.path) : buildDirectorySnapshot(adapter.path, {
+		include: adapter.include,
+		recursive: adapter.recursive
+	});
+}
+async function buildDirectorySnapshot(path, options = {}) {
+	const root = resolve(path);
+	const rootStat = await lstat(root);
+	if (rootStat.isSymbolicLink() || !rootStat.isDirectory()) throw new Error(`directory source must be a regular, non-symlink directory: ${root}`);
+	const canonicalRoot = await realpath(root);
+	const include = options.include === void 0 ? void 0 : validateIncludePatterns(options.include, "directory include");
+	const recursive = options.recursive ?? true;
+	const files = await readDirectoryFiles(root, canonicalRoot, recursive, include === void 0 ? void 0 : compileIncludePatterns(include));
+	if (include !== void 0 && files.length === 0) throw new Error(`directory include matched no regular files: ${include.join(", ")}`);
+	const orderedFiles = files.toSorted((left, right) => Buffer.compare(Buffer.from(left.path), Buffer.from(right.path)));
+	const totalBytes = orderedFiles.reduce((sum, file) => sum + file.bytes, 0);
+	const latestMtimeMs = orderedFiles.reduce((latest, file) => latest === null || file.mtimeMs > latest ? file.mtimeMs : latest, null);
+	const document = {
+		format: DIRECTORY_SNAPSHOT_FORMAT,
+		version: 1,
+		file_count: orderedFiles.length,
+		total_bytes: totalBytes,
+		latest_mtime: latestMtimeMs === null ? null : new Date(Math.trunc(latestMtimeMs)).toISOString(),
+		selection: {
+			include: include === void 0 ? null : include.toSorted(compareUtf8),
+			recursive
+		},
+		files: orderedFiles.map(({ mtimeMs: _mtimeMs, ...file }) => file)
+	};
+	const payload = Buffer.from(`${JSON.stringify(document)}\n`, "utf8");
+	assertSnapshotSize(payload);
+	return snapshotResult("directory", "directory-snapshot.json", payload, orderedFiles.length, totalBytes, document.latest_mtime);
+}
+async function syncMistakeSources(options, deps = DEFAULT_DEPS$1) {
+	const configPath = resolve(options.configPath);
+	const config = await loadMistakeSourceSyncConfig(configPath);
+	const baseOutbox = resolve(options.outboxDir ?? config.outbox ?? join(dirname(configPath), ".mistake-inflow-outbox"));
+	const startedAt = deps.now().toISOString();
+	const results = [];
+	for (const source of config.sources.toSorted((left, right) => compareUtf8(left.sourceId, right.sourceId))) {
+		if (source.adapter.type === "unsupported") {
+			results.push({
+				source_id: source.sourceId,
+				agent_id: source.agentId,
+				adapter: "unsupported",
+				bestandsstatus: source.bestandsstatus,
+				aktualitaetsstatus: source.aktualitaetsstatus,
+				status: "blocked",
+				retry: null,
+				entry_count: entryCountResult(source),
+				snapshot: null,
+				reason: source.adapter.reason
+			});
+			continue;
+		}
+		const sourceOutbox = join(baseOutbox, "sources", source.sourceId);
+		let retry = null;
+		try {
+			await assertOutboxOutsideSource(source.adapter, sourceOutbox);
+			const endpoint = options.endpoint ?? source.endpoint ?? config.endpoint;
+			if (!endpoint) throw new Error("no endpoint configured");
+			const tokenEnv = source.tokenEnv;
+			if (!tokenEnv) throw new Error("supported source has no token_env");
+			const token = options.env[tokenEnv];
+			if (!token || token.trim() === "") throw new Error(`missing bearer token in ${tokenEnv}`);
+			const connection = {
+				endpoint,
+				token,
+				outboxDir: sourceOutbox
+			};
+			retry = await deps.drain(connection);
+			if (retry.failed.length > 0) throw new Error(`retry failed for ${retry.failed.length} queued observation(s)`);
+			const snapshot = await buildSourceSnapshot(source.adapter);
+			assertEntryCountBasis(source, snapshot);
+			const declarations = source.declarationsPath === void 0 ? void 0 : await readExplicitDeclarations(source.declarationsPath, source.sourceId, source.recordTypes);
+			const capturedAt = deps.now().toISOString();
+			const input = observationInput(source, snapshot, capturedAt, declarations);
+			const existing = await findVerifiedSnapshotReceipt(source, snapshot, input, sourceOutbox);
+			const heartbeatIntervalSeconds = source.heartbeatIntervalSeconds ?? config.heartbeatIntervalSeconds;
+			if (existing !== null && receiptIsWithinHeartbeat(existing, capturedAt, heartbeatIntervalSeconds)) {
+				results.push(resultForSnapshot(source, snapshot, "unchanged", retry, existing));
+				continue;
+			}
+			const materializedPath = await materializeSnapshot(snapshot, sourceOutbox);
+			const receipt = await deps.upload({
+				...input,
+				filePath: materializedPath
+			}, connection);
+			assertReceiptIdentity(receipt, source, snapshot, input.declaredEntryCount);
+			results.push(resultForSnapshot(source, snapshot, existing === null ? "uploaded" : "heartbeat", retry, receipt, existing ?? void 0));
+		} catch (error) {
+			results.push({
+				source_id: source.sourceId,
+				agent_id: source.agentId,
+				adapter: source.adapter.type,
+				bestandsstatus: source.bestandsstatus,
+				aktualitaetsstatus: source.aktualitaetsstatus,
+				status: "failed",
+				retry: retry === null ? null : {
+					delivered: retry.delivered.length,
+					failed: retry.failed.length
+				},
+				entry_count: entryCountResult(source, false),
+				snapshot: null,
+				reason: errorMessage$5(error)
+			});
+		}
+	}
+	return {
+		version: 1,
+		config_path: configPath,
+		started_at: startedAt,
+		finished_at: deps.now().toISOString(),
+		results
+	};
+}
+async function watchMistakeSources(options, deps = DEFAULT_DEPS$1) {
+	if (!Number.isSafeInteger(options.intervalMs) || options.intervalMs < 1e3) throw new Error("watch interval must be at least 1000 milliseconds");
+	while (!options.signal?.aborted) {
+		await options.onRun(await syncMistakeSources(options, deps));
+		await waitForInterval(options.intervalMs, options.signal);
+	}
+}
+function parseConfig(value, configDir) {
+	const root = objectValue(value, "config");
+	exactKeys(root, [
+		"version",
+		"endpoint",
+		"outbox",
+		"heartbeat_interval_seconds",
+		"sources"
+	], "config");
+	if (root["version"] !== 1) throw new Error("mistake source config version must be 1");
+	const endpoint = optionalNonEmptyString$1(root["endpoint"], "config.endpoint");
+	const outboxValue = optionalNonEmptyString$1(root["outbox"], "config.outbox");
+	const heartbeatIntervalSeconds = heartbeatInterval(root["heartbeat_interval_seconds"], "config.heartbeat_interval_seconds") ?? 43200;
+	const sourcesValue = root["sources"];
+	if (!Array.isArray(sourcesValue) || sourcesValue.length === 0) throw new Error("config.sources must be a non-empty array");
+	const sources = sourcesValue.map((source, index) => parseSource(source, index, configDir));
+	const sourceIds = sources.map((source) => source.sourceId);
+	if (new Set(sourceIds).size !== sourceIds.length) throw new Error("config contains duplicate normalized source ids");
+	const tokenEnvs = sources.flatMap((source) => source.tokenEnv === void 0 ? [] : [source.tokenEnv]);
+	if (new Set(tokenEnvs).size !== tokenEnvs.length) throw new Error("each supported source must use its own token_env");
+	return {
+		version: 1,
+		endpoint,
+		outbox: outboxValue === void 0 ? void 0 : configuredPath(outboxValue, configDir, "config.outbox"),
+		heartbeatIntervalSeconds,
+		sources
+	};
+}
+function parseSource(value, index, configDir) {
+	const label = `config.sources[${index}]`;
+	const source = objectValue(value, label);
+	exactKeys(source, [
+		"source_id",
+		"agent_id",
+		"endpoint",
+		"token_env",
+		"heartbeat_interval_seconds",
+		"source_form",
+		"record_types",
+		"bestandsstatus",
+		"aktualitaetsstatus",
+		"declared_entry_count",
+		"entry_count_basis",
+		"declarations_path",
+		"adapter"
+	], label);
+	const sourceId = normalizeMistakeSourceId(nonEmptyString(source["source_id"], `${label}.source_id`));
+	const agentId = normalizeMistakeSourceId(nonEmptyString(source["agent_id"], `${label}.agent_id`));
+	const sourceForm = enumValue(source["source_form"], MISTAKE_SOURCE_FORMS, `${label}.source_form`);
+	const recordTypes = enumArray(source["record_types"], MISTAKE_RECORD_TYPES, `${label}.record_types`);
+	const bestandsstatus = enumValue(source["bestandsstatus"], MISTAKE_INVENTORY_STATUSES, `${label}.bestandsstatus`);
+	const aktualitaetsstatus = enumValue(source["aktualitaetsstatus"], MISTAKE_ACTUALITY_STATUSES, `${label}.aktualitaetsstatus`);
+	const endpoint = optionalNonEmptyString$1(source["endpoint"], `${label}.endpoint`);
+	const tokenEnv = optionalNonEmptyString$1(source["token_env"], `${label}.token_env`);
+	const heartbeatIntervalSeconds = heartbeatInterval(source["heartbeat_interval_seconds"], `${label}.heartbeat_interval_seconds`);
+	const declaredEntryCount = optionalCount(source["declared_entry_count"], `${label}.declared_entry_count`);
+	const entryCountBasis = optionalEnumValue(source["entry_count_basis"], ["files", "declared"], `${label}.entry_count_basis`);
+	const declarationsValue = optionalNonEmptyString$1(source["declarations_path"], `${label}.declarations_path`);
+	const declarationsPath = declarationsValue === void 0 ? void 0 : configuredPath(declarationsValue, configDir, `${label}.declarations_path`);
+	const adapter = parseAdapter(source["adapter"], label, configDir);
+	if (bestandsstatus === "counted" && declaredEntryCount === void 0) throw new Error(`${label}.declared_entry_count is required when bestandsstatus is counted`);
+	if (bestandsstatus === "counted" && entryCountBasis === void 0) throw new Error(`${label}.entry_count_basis is required when bestandsstatus is counted`);
+	if (bestandsstatus !== "counted" && declaredEntryCount !== void 0) throw new Error(`${label}.declared_entry_count is forbidden unless bestandsstatus is counted`);
+	if (bestandsstatus !== "counted" && entryCountBasis !== void 0) throw new Error(`${label}.entry_count_basis is forbidden unless bestandsstatus is counted`);
+	if (adapter.type === "unsupported") {
+		if (bestandsstatus !== "unverified" || aktualitaetsstatus !== "unverified") throw new Error(`${label} unsupported adapters must use unverified inventory and actuality statuses`);
+		if (tokenEnv !== void 0 || endpoint !== void 0 || heartbeatIntervalSeconds !== void 0 || declarationsPath !== void 0) throw new Error(`${label} unsupported adapters must not declare endpoint, token_env, heartbeat_interval_seconds, or declarations_path`);
+	} else if (tokenEnv === void 0 || !TOKEN_ENV_RE.test(tokenEnv)) throw new Error(`${label}.token_env must name a dedicated environment variable`);
+	return {
+		sourceId,
+		agentId,
+		endpoint,
+		tokenEnv,
+		heartbeatIntervalSeconds,
+		sourceForm,
+		recordTypes,
+		bestandsstatus,
+		aktualitaetsstatus,
+		declaredEntryCount,
+		entryCountBasis,
+		declarationsPath,
+		adapter
+	};
+}
+function parseAdapter(value, sourceLabel, configDir) {
+	const label = `${sourceLabel}.adapter`;
+	const adapter = objectValue(value, label);
+	const type = adapter["type"];
+	if (type === "file" || type === "directory") {
+		if (type === "file") {
+			exactKeys(adapter, ["type", "path"], label);
+			return {
+				type,
+				path: configuredPath(nonEmptyString(adapter["path"], `${label}.path`), configDir, `${label}.path`)
+			};
+		}
+		exactKeys(adapter, [
+			"type",
+			"path",
+			"include",
+			"recursive"
+		], label);
+		const include = adapter["include"] === void 0 ? void 0 : validateIncludePatterns(adapter["include"], `${label}.include`);
+		const recursive = adapter["recursive"] === void 0 ? true : booleanValue(adapter["recursive"], `${label}.recursive`);
+		return {
+			type,
+			path: configuredPath(nonEmptyString(adapter["path"], `${label}.path`), configDir, `${label}.path`),
+			include,
+			recursive
+		};
+	}
+	if (type === "unsupported") {
+		exactKeys(adapter, [
+			"type",
+			"kind",
+			"reason"
+		], label);
+		return {
+			type,
+			kind: nonEmptyString(adapter["kind"], `${label}.kind`),
+			reason: nonEmptyString(adapter["reason"], `${label}.reason`)
+		};
+	}
+	throw new Error(`${label}.type must be file, directory, or unsupported`);
+}
+async function buildFileSnapshot(path) {
+	const absolutePath = resolve(path);
+	const before = await lstat(absolutePath);
+	if (before.isSymbolicLink() || !before.isFile()) throw new Error(`file source must be a regular, non-symlink file: ${absolutePath}`);
+	const handle = await openWithoutFollowing(absolutePath);
+	let payload;
+	try {
+		const opened = await handle.stat();
+		if (!opened.isFile()) throw new Error(`file source changed while reading: ${absolutePath}`);
+		if (before.size !== opened.size || before.mtimeMs !== opened.mtimeMs) throw new Error(`file source changed while opening: ${absolutePath}`);
+		payload = await handle.readFile();
+		const after = await handle.stat();
+		if (opened.size !== after.size || opened.mtimeMs !== after.mtimeMs) throw new Error(`file source changed while reading: ${absolutePath}`);
+	} finally {
+		await handle.close();
+	}
+	assertSnapshotSize(payload);
+	return snapshotResult("file", basename(absolutePath), payload, 1, payload.byteLength, new Date(Math.trunc(before.mtimeMs)).toISOString());
+}
+async function readDirectoryFiles(root, canonicalRoot, recursive, matches) {
+	const files = [];
+	async function visit(directory) {
+		const entries = (await readdir(directory, { withFileTypes: true })).toSorted((left, right) => Buffer.compare(Buffer.from(left.name), Buffer.from(right.name)));
+		for (const entry of entries) {
+			const absolutePath = join(directory, entry.name);
+			const entryStat = await lstat(absolutePath);
+			if (entry.isSymbolicLink() || entryStat.isSymbolicLink()) throw new Error(`directory source contains a symlink: ${absolutePath}`);
+			const relativePath = canonicalRelativePath(root, absolutePath);
+			assertContained(canonicalRoot, await realpath(absolutePath), absolutePath);
+			if (entryStat.isDirectory()) {
+				if (recursive) await visit(absolutePath);
+				continue;
+			}
+			if (!entryStat.isFile()) throw new Error(`directory source contains a non-regular entry: ${absolutePath}`);
+			if (matches !== void 0 && !matches(relativePath)) continue;
+			const handle = await openWithoutFollowing(absolutePath);
+			let content;
+			try {
+				const before = await handle.stat();
+				if (!before.isFile()) throw new Error(`directory source entry changed while reading: ${absolutePath}`);
+				if (entryStat.size !== before.size || entryStat.mtimeMs !== before.mtimeMs) throw new Error(`directory source entry changed while opening: ${absolutePath}`);
+				content = await handle.readFile();
+				const after = await handle.stat();
+				if (before.size !== after.size || before.mtimeMs !== after.mtimeMs) throw new Error(`directory source entry changed while reading: ${absolutePath}`);
+			} finally {
+				await handle.close();
+			}
+			files.push({
+				path: relativePath,
+				bytes: content.byteLength,
+				sha256: sha256$3(content),
+				mtime: new Date(Math.trunc(entryStat.mtimeMs)).toISOString(),
+				content_base64: content.toString("base64"),
+				mtimeMs: entryStat.mtimeMs
+			});
+		}
+	}
+	await visit(root);
+	const secondScan = await scanDirectoryMetadata(root, canonicalRoot, recursive, matches);
+	const firstScan = files.map((file) => ({
+		path: file.path,
+		bytes: file.bytes,
+		mtimeMs: file.mtimeMs
+	})).toSorted(compareMetadata);
+	if (JSON.stringify(firstScan) !== JSON.stringify(secondScan)) throw new Error("directory source changed while snapshotting");
+	return files;
+}
+async function scanDirectoryMetadata(root, canonicalRoot, recursive, matches) {
+	const files = [];
+	async function visit(directory) {
+		const entries = (await readdir(directory, { withFileTypes: true })).toSorted((left, right) => Buffer.compare(Buffer.from(left.name), Buffer.from(right.name)));
+		for (const entry of entries) {
+			const absolutePath = join(directory, entry.name);
+			const entryStat = await lstat(absolutePath);
+			if (entry.isSymbolicLink() || entryStat.isSymbolicLink()) throw new Error(`directory source contains a symlink: ${absolutePath}`);
+			const relativePath = canonicalRelativePath(root, absolutePath);
+			assertContained(canonicalRoot, await realpath(absolutePath), absolutePath);
+			if (entryStat.isDirectory()) {
+				if (recursive) await visit(absolutePath);
+				continue;
+			}
+			if (!entryStat.isFile()) throw new Error(`directory source contains a non-regular entry: ${absolutePath}`);
+			if (matches === void 0 || matches(relativePath)) files.push({
+				path: relativePath,
+				bytes: entryStat.size,
+				mtimeMs: entryStat.mtimeMs
+			});
+		}
+	}
+	await visit(root);
+	return files.toSorted(compareMetadata);
+}
+function compareMetadata(left, right) {
+	return compareUtf8(left.path, right.path) || left.bytes - right.bytes || left.mtimeMs - right.mtimeMs;
+}
+async function openWithoutFollowing(path) {
+	const noFollow = typeof constants.O_NOFOLLOW === "number" ? constants.O_NOFOLLOW : 0;
+	try {
+		return await open(path, constants.O_RDONLY | noFollow);
+	} catch (error) {
+		if (isSymlinkOpenError(error)) throw new Error(`refusing to follow source symlink: ${path}`, { cause: error });
+		throw error;
+	}
+}
+function canonicalRelativePath(root, path) {
+	const value = relative(root, path);
+	const segments = value.split(sep);
+	if (value === "" || isAbsolute(value) || segments.some((segment) => segment === "" || segment === "." || segment === "..")) throw new Error(`source entry escapes its configured directory: ${path}`);
+	const canonical = segments.join("/");
+	if (canonical.startsWith("/") || canonical.includes("/../") || canonical.includes("\\")) throw new Error(`source entry has an unsafe relative path: ${path}`);
+	return canonical;
+}
+function assertContained(root, candidate, originalPath) {
+	const value = relative(root, candidate);
+	if (value === ".." || value.startsWith(`..${sep}`) || isAbsolute(value)) throw new Error(`source entry resolves outside its configured directory: ${originalPath}`);
+}
+function snapshotResult(adapterType, originalName, payload, fileCount, totalBytes, latestMtime) {
+	return {
+		adapterType,
+		originalName,
+		payload,
+		rawBytes: payload.byteLength,
+		rawSha256: sha256$3(payload),
+		fileCount,
+		totalBytes,
+		latestMtime
+	};
+}
+function observationInput(source, snapshot, capturedAt, declarations) {
+	return {
+		sourceId: source.sourceId,
+		sourceForm: source.sourceForm,
+		recordTypes: source.recordTypes,
+		bestandsstatus: source.bestandsstatus,
+		aktualitaetsstatus: source.aktualitaetsstatus,
+		declaredEntryCount: source.declaredEntryCount,
+		lastRawObservedAt: snapshot.latestMtime ?? void 0,
+		capturedAt,
+		declarations
+	};
+}
+async function readExplicitDeclarations(path, sourceId, recordTypes) {
+	const fileStat = await lstat(path);
+	if (fileStat.isSymbolicLink() || !fileStat.isFile()) throw new Error(`declarations_path must be a regular, non-symlink file: ${path}`);
+	const handle = await openWithoutFollowing(path);
+	let text;
+	try {
+		const opened = await handle.stat();
+		if (fileStat.size !== opened.size || fileStat.mtimeMs !== opened.mtimeMs) throw new Error(`declarations_path changed while opening: ${path}`);
+		text = await handle.readFile("utf8");
+		const after = await handle.stat();
+		if (opened.size !== after.size || opened.mtimeMs !== after.mtimeMs) throw new Error(`declarations_path changed while reading: ${path}`);
+	} finally {
+		await handle.close();
+	}
+	let value;
+	try {
+		value = JSON.parse(text);
+	} catch (error) {
+		throw new Error(`declarations_path is not valid JSON: ${path}`, { cause: error });
+	}
+	return parseMistakeRecordDeclarations(value, sourceId, recordTypes);
+}
+async function materializeSnapshot(snapshot, outboxDir) {
+	const directory = join(outboxDir, "snapshots", snapshot.rawSha256);
+	await mkdir(directory, {
+		recursive: true,
+		mode: 448
+	});
+	const path = join(directory, snapshot.originalName);
+	try {
+		await writeFile(path, snapshot.payload, {
+			flag: "wx",
+			mode: 384
+		});
+	} catch (error) {
+		if (!isAlreadyExists(error)) throw error;
+		if (!(await readFile(path)).equals(snapshot.payload)) throw new Error(`snapshot cache conflict for ${snapshot.rawSha256}`, { cause: error });
+	}
+	return path;
+}
+async function findVerifiedSnapshotReceipt(source, snapshot, input, outboxDir) {
+	const eventsDir = join(outboxDir, "events");
+	let names;
+	try {
+		names = (await readdir(eventsDir)).filter((name) => name.endsWith(".json")).toSorted();
+	} catch (error) {
+		if (isNotFound$1(error)) return null;
+		throw error;
+	}
+	let newest = null;
+	for (const name of names) {
+		const event = await readJson(join(eventsDir, name));
+		if (!eventMatchesSnapshot(event, source, snapshot, input)) continue;
+		const clientEventId = event.client_event_id;
+		const paths = [join(outboxDir, "receipts", `${clientEventId}.json`)];
+		try {
+			const receiptNames = (await readdir(join(outboxDir, "receipts", clientEventId))).filter((receiptName) => receiptName.endsWith(".json")).toSorted();
+			paths.push(...receiptNames.map((receiptName) => join(outboxDir, "receipts", clientEventId, receiptName)));
+		} catch (error) {
+			if (!isNotFound$1(error)) throw error;
+		}
+		for (const path of paths) {
+			const receipt = await readJson(path);
+			if (receiptMatchesSnapshot(receipt, source, snapshot, event.inventory.declared_entry_count, event.client_event_id)) {
+				if (newest === null || compareReceiptsByReceivedAt(receipt, newest) > 0) newest = receipt;
+			}
+		}
+	}
+	return newest;
+}
+function compareReceiptsByReceivedAt(left, right) {
+	return Date.parse(left.received_at) - Date.parse(right.received_at) || compareUtf8(left.event_id, right.event_id);
+}
+function receiptIsWithinHeartbeat(receipt, nowIso, heartbeatIntervalSeconds) {
+	const ageMilliseconds = Date.parse(nowIso) - Date.parse(receipt.received_at);
+	return ageMilliseconds >= 0 && ageMilliseconds < heartbeatIntervalSeconds * 1e3;
+}
+function eventMatchesSnapshot(value, source, snapshot, input) {
+	if (!isObject$3(value)) return false;
+	const inventory = value["inventory"];
+	if (!isObject$3(inventory)) return false;
+	const payloadBase64 = value["payload_base64"];
+	if (typeof payloadBase64 !== "string") return false;
+	const payload = Buffer.from(payloadBase64, "base64");
+	return payload.toString("base64") === payloadBase64 && payload.equals(snapshot.payload) && value["version"] === 1 && value["source_id"] === source.sourceId && value["source_form"] === source.sourceForm && arraysEqual(value["declared_record_types"], source.recordTypes) && value["declared_raw_bytes"] === snapshot.rawBytes && value["declared_raw_sha256"] === snapshot.rawSha256 && sha256$3(payload) === snapshot.rawSha256 && inventory["scope"] === "lower_bound" && inventory["bestandsstatus"] === source.bestandsstatus && inventory["aktualitaetsstatus"] === source.aktualitaetsstatus && inventory["declared_entry_count"] === (input.declaredEntryCount ?? null) && inventory["last_raw_observed_at"] === (input.lastRawObservedAt ?? null) && declarationsEqual(value["declarations"], input.declarations) && typeof value["client_event_id"] === "string" && UUID_RE.test(value["client_event_id"]);
+}
+function receiptMatchesSnapshot(value, source, snapshot, declaredEntryCount, expectedClientEventId) {
+	if (!isObject$3(value)) return false;
+	return value["version"] === 1 && value["accepted"] === true && value["source_id"] === source.sourceId && value["canonical_agent_id"] === source.agentId && value["raw_count"] === 1 && value["accepted_count"] === 1 && value["rejected_count"] === 0 && value["raw_bytes"] === snapshot.rawBytes && value["raw_sha256"] === snapshot.rawSha256 && value["declared_entry_count"] === declaredEntryCount && typeof value["event_id"] === "string" && UUID_RE.test(value["event_id"]) && typeof value["client_event_id"] === "string" && UUID_RE.test(value["client_event_id"]) && (expectedClientEventId === void 0 || value["client_event_id"] === expectedClientEventId) && typeof value["received_at"] === "string" && Number.isFinite(Date.parse(value["received_at"]));
+}
+function assertReceiptIdentity(receipt, source, snapshot, declaredEntryCount) {
+	if (!receiptMatchesSnapshot(receipt, source, snapshot, declaredEntryCount ?? null, receipt.client_event_id)) throw new Error(`receipt identity mismatch for ${source.sourceId}`);
+}
+function resultForSnapshot(source, snapshot, status, retry, receipt, previousReceipt) {
+	return {
+		source_id: source.sourceId,
+		agent_id: source.agentId,
+		adapter: source.adapter.type,
+		bestandsstatus: source.bestandsstatus,
+		aktualitaetsstatus: source.aktualitaetsstatus,
+		status,
+		retry: {
+			delivered: retry.delivered.length,
+			failed: retry.failed.length
+		},
+		entry_count: entryCountResult(source),
+		snapshot: {
+			file_count: snapshot.fileCount,
+			total_bytes: snapshot.totalBytes,
+			raw_bytes: snapshot.rawBytes,
+			raw_sha256: snapshot.rawSha256,
+			latest_mtime: snapshot.latestMtime
+		},
+		receipt,
+		...previousReceipt === void 0 ? {} : { previous_receipt_received_at: previousReceipt.received_at }
+	};
+}
+function configuredPath(value, configDir, label) {
+	if (isAbsolute(value)) return resolve(value);
+	if (value.replaceAll("\\", "/").split("/").some((segment) => segment === "..")) throw new Error(`${label} must not traverse above the config directory; use an absolute path instead`);
+	return resolve(configDir, value);
+}
+async function assertOutboxOutsideSource(adapter, outboxDir) {
+	if (adapter.type !== "directory") return;
+	const sourceStat = await lstat(adapter.path);
+	if (sourceStat.isSymbolicLink() || !sourceStat.isDirectory()) throw new Error(`directory source must be a regular, non-symlink directory: ${adapter.path}`);
+	const position = relative(await realpath(adapter.path), await canonicalProspectivePath(outboxDir));
+	if (position === "" || !isAbsolute(position) && position !== ".." && !position.startsWith(`..${sep}`)) throw new Error(`outbox must not be the directory source or be contained by it: ${adapter.path}`);
+}
+async function canonicalProspectivePath(path) {
+	let cursor = resolve(path);
+	const tail = [];
+	while (true) try {
+		await lstat(cursor);
+		return resolve(await realpath(cursor), ...tail.toReversed());
+	} catch (error) {
+		if (!isNotFound$1(error)) throw error;
+		const parent = dirname(cursor);
+		if (parent === cursor) throw error;
+		tail.push(basename(cursor));
+		cursor = parent;
+	}
+}
+function objectValue(value, label) {
+	if (!isObject$3(value) || Array.isArray(value)) throw new Error(`${label} must be an object`);
+	return value;
+}
+function exactKeys(value, keys, label) {
+	const allowed = new Set(keys);
+	const unknown = Object.keys(value).filter((key) => !allowed.has(key));
+	if (unknown.length > 0) throw new Error(`${label} contains unknown fields: ${unknown.join(", ")}`);
+}
+function nonEmptyString(value, label) {
+	if (typeof value !== "string" || value.trim() === "") throw new Error(`${label} must be a non-empty string`);
+	return value.trim();
+}
+function optionalNonEmptyString$1(value, label) {
+	return value === void 0 ? void 0 : nonEmptyString(value, label);
+}
+function optionalCount(value, label) {
+	if (value === void 0) return void 0;
+	if (!Number.isSafeInteger(value) || value < 0) throw new Error(`${label} must be a non-negative integer`);
+	return value;
+}
+function heartbeatInterval(value, label) {
+	if (value === void 0) return void 0;
+	if (!Number.isSafeInteger(value) || value < 60 || value >= TRANSPORT_STALE_AFTER_SECONDS) throw new Error(`${label} must be an integer from 60 through 86399 seconds`);
+	return value;
+}
+function optionalEnumValue(value, allowed, label) {
+	return value === void 0 ? void 0 : enumValue(value, allowed, label);
+}
+function enumValue(value, allowed, label) {
+	if (typeof value !== "string" || !allowed.includes(value)) throw new Error(`${label} must be one of: ${allowed.join(", ")}`);
+	return value;
+}
+function enumArray(value, allowed, label) {
+	if (!Array.isArray(value) || value.length === 0 || value.some((item) => typeof item !== "string" || !allowed.includes(item))) throw new Error(`${label} must contain one or more of: ${allowed.join(", ")}`);
+	const unique = [...new Set(value)];
+	if (unique.length !== value.length) throw new Error(`${label} must not contain duplicates`);
+	return unique;
+}
+function arraysEqual(value, expected) {
+	return Array.isArray(value) && value.length === expected.length && value.every((item, index) => item === expected[index]);
+}
+function booleanValue(value, label) {
+	if (typeof value !== "boolean") throw new Error(`${label} must be a boolean`);
+	return value;
+}
+function validateIncludePatterns(value, label) {
+	if (!Array.isArray(value) || value.length === 0) throw new Error(`${label} must be a non-empty array`);
+	const patterns = value.map((candidate, index) => {
+		if (typeof candidate !== "string" || candidate === "" || candidate.startsWith("/") || candidate.includes("\\") || candidate.split("/").some((segment) => segment === "" || segment === "." || segment === "..")) throw new Error(`${label}[${index}] must be a safe relative glob using forward slashes`);
+		if ([...candidate].length > 300 || candidate.includes("\0")) throw new Error(`${label}[${index}] is too long or unsafe`);
+		return candidate;
+	});
+	if (new Set(patterns).size !== patterns.length) throw new Error(`${label} must not contain duplicates`);
+	return patterns;
+}
+function compileIncludePatterns(patterns) {
+	const expressions = patterns.map((pattern) => new RegExp(`^${globExpression(pattern)}$`, "u"));
+	return (path) => expressions.some((expression) => expression.test(path));
+}
+function globExpression(pattern) {
+	let expression = "";
+	for (let index = 0; index < pattern.length; index += 1) {
+		const character = pattern[index];
+		if (character === "*" && pattern[index + 1] === "*") if (pattern[index + 2] === "/") {
+			expression += "(?:.*/)?";
+			index += 2;
+		} else {
+			expression += ".*";
+			index += 1;
+		}
+		else if (character === "*") expression += "[^/]*";
+		else if (character === "?") expression += "[^/]";
+		else expression += escapeRegex$1(character);
+	}
+	return expression;
+}
+function escapeRegex$1(value) {
+	return /[\\^$.*+?()[\]{}|]/.test(value) ? `\\${value}` : value;
+}
+function compareUtf8(left, right) {
+	return Buffer.compare(Buffer.from(left), Buffer.from(right));
+}
+function assertEntryCountBasis(source, snapshot) {
+	if (source.entryCountBasis === "files" && source.declaredEntryCount !== snapshot.fileCount) throw new Error(`declared entry count ${source.declaredEntryCount} does not match snapshot file count ${snapshot.fileCount}`);
+}
+function entryCountResult(source, checked = true) {
+	return {
+		declared: source.declaredEntryCount ?? null,
+		basis: source.entryCountBasis ?? null,
+		verification: source.entryCountBasis === "files" ? checked ? "matched_file_count" : "not_checked" : source.entryCountBasis === "declared" ? "not_derivable_from_raw_files" : "not_declared"
+	};
+}
+function declarationsEqual(value, expected) {
+	return expected === void 0 ? value === void 0 : JSON.stringify(value) === JSON.stringify(expected);
+}
+async function readJson(path) {
+	try {
+		return JSON.parse(await readFile(path, "utf8"));
+	} catch (error) {
+		if (isNotFound$1(error) || error instanceof SyntaxError) return null;
+		throw error;
+	}
+}
+function assertSnapshotSize(payload) {
+	if (payload.byteLength > 20971520) throw new Error(`source snapshot exceeds ${MAX_MISTAKE_SOURCE_BYTES} bytes`);
+}
+function sha256$3(value) {
+	return createHash("sha256").update(value).digest("hex");
+}
+function isObject$3(value) {
+	return typeof value === "object" && value !== null;
+}
+function isAlreadyExists(error) {
+	return isObject$3(error) && error["code"] === "EEXIST";
+}
+function isNotFound$1(error) {
+	return isObject$3(error) && error["code"] === "ENOENT";
+}
+function isSymlinkOpenError(error) {
+	return isObject$3(error) && ["ELOOP", "EMLINK"].includes(String(error["code"]));
+}
+function errorMessage$5(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+function waitForInterval(milliseconds, signal) {
+	if (signal?.aborted) return Promise.resolve();
+	let timeout;
+	const delay = new Promise((resolveDelay) => {
+		timeout = setTimeout(resolveDelay, milliseconds);
+	});
+	if (signal === void 0) return delay;
+	let stop;
+	const aborted = new Promise((resolveAbort) => {
+		stop = resolveAbort;
+		signal.addEventListener("abort", stop, { once: true });
+	});
+	return Promise.race([delay, aborted]).finally(() => {
+		if (timeout !== void 0) clearTimeout(timeout);
+		if (stop !== void 0) signal.removeEventListener("abort", stop);
+	});
+}
+//#endregion
+//#region src/cli/sub/mistakes.ts
+const DEFAULT_TOKEN_ENV = "BLUN_MISTAKE_INFLOW_TOKEN";
+const DEFAULT_ENDPOINT_ENV = "BLUN_MISTAKE_INFLOW_URL";
+function registerMistakesCommand(parent, overrides = {}) {
+	const deps = resolveDeps(overrides);
+	const mistakes = parent.command("mistakes").description("Upload and inspect append-only mistake source snapshots.");
+	mistakes.command("upload").description("Queue a source snapshot locally, then upload it.").argument("<path>", "Source file to upload.").requiredOption("--source <id>", "Registered source id.").addOption(choiceOption("--form <form>", "Source form.", MISTAKE_SOURCE_FORMS, "unknown")).option("--record-types <types>", "Comma-separated declared record types.", "unknown").option("--entries <count>", "Declared logical entry count.", parseNonNegativeInteger).addOption(choiceOption("--bestandsstatus <status>", "Inventory status.", MISTAKE_INVENTORY_STATUSES, "unverified")).addOption(choiceOption("--aktualitaetsstatus <status>", "Actuality status.", MISTAKE_ACTUALITY_STATUSES, "unverified")).option("--last-entry-at <timestamp>", "Timestamp of the newest raw entry.").option("--endpoint <url>", `Inflow URL (or ${DEFAULT_ENDPOINT_ENV}).`).option("--token-env <name>", "Environment variable containing the bearer token.", DEFAULT_TOKEN_ENV).option("--outbox <path>", "Local durable outbox directory.").action(async (path, options) => {
+		await run$1(deps, async () => {
+			const connection = connectionOptions(deps, options);
+			const receipt = await uploadMistakeObservation({
+				filePath: resolve(path),
+				sourceId: options.source,
+				sourceForm: options.form,
+				recordTypes: parseRecordTypes(options.recordTypes),
+				bestandsstatus: options.bestandsstatus,
+				aktualitaetsstatus: options.aktualitaetsstatus,
+				declaredEntryCount: options.entries,
+				lastRawObservedAt: options.lastEntryAt,
+				capturedAt: deps.now().toISOString()
+			}, connection);
+			deps.stdout.write(`${JSON.stringify(receipt)}\n`);
+		});
+	});
+	mistakes.command("retry").description("Retry every queued snapshot that has no verified receipt.").option("--endpoint <url>", `Inflow URL (or ${DEFAULT_ENDPOINT_ENV}).`).option("--token-env <name>", "Environment variable containing the bearer token.", DEFAULT_TOKEN_ENV).option("--outbox <path>", "Local durable outbox directory.").action(async (options) => {
+		await run$1(deps, async () => {
+			const result = await drainMistakeOutbox(connectionOptions(deps, options));
+			deps.stdout.write(`${JSON.stringify(result)}\n`);
+			if (result.failed.length > 0) deps.exit(1);
+		});
+	});
+	mistakes.command("sync").description("Retry and upload every configured file or directory source once.").requiredOption("--config <path>", "Source registry JSON file.").option("--endpoint <url>", "Override the configured inflow URL for every supported source.").option("--outbox <path>", "Override the configured local outbox root.").action(async (options) => {
+		await run$1(deps, async () => {
+			const result = await syncMistakeSources({
+				configPath: resolve(options.config),
+				env: deps.env,
+				endpoint: options.endpoint,
+				outboxDir: options.outbox === void 0 ? void 0 : resolve(options.outbox)
+			});
+			deps.stdout.write(`${JSON.stringify(result)}\n`);
+			if (result.results.some((item) => item.status === "failed" || item.status === "blocked")) deps.exit(2);
+		});
+	});
+	mistakes.command("watch").description("Run source sync repeatedly in the foreground until interrupted.").requiredOption("--config <path>", "Source registry JSON file.").option("--endpoint <url>", "Override the configured inflow URL for every supported source.").option("--outbox <path>", "Override the configured local outbox root.").option("--interval <seconds>", "Foreground sync interval in seconds.", parseWatchInterval, 300).action(async (options) => {
+		await run$1(deps, async () => {
+			const controller = new AbortController();
+			const stop = () => controller.abort();
+			process.once("SIGINT", stop);
+			process.once("SIGTERM", stop);
+			try {
+				await watchMistakeSources({
+					configPath: resolve(options.config),
+					env: deps.env,
+					endpoint: options.endpoint,
+					outboxDir: options.outbox === void 0 ? void 0 : resolve(options.outbox),
+					intervalMs: options.interval * 1e3,
+					signal: controller.signal,
+					onRun: (result) => {
+						deps.stdout.write(`${JSON.stringify(result)}\n`);
+					}
+				});
+			} finally {
+				process.off("SIGINT", stop);
+				process.off("SIGTERM", stop);
+			}
+		});
+	});
+	mistakes.command("status").description("Show per-source inventory, actuality, and 24-hour watchdog state.").option("--endpoint <url>", `Inflow URL (or ${DEFAULT_ENDPOINT_ENV}).`).option("--token-env <name>", "Environment variable containing the bearer token.", DEFAULT_TOKEN_ENV).option("--no-fail-on-red", "Return success even when one or more sources are red.").action(async (options) => {
+		await run$1(deps, async () => {
+			const connection = connectionOptions(deps, options);
+			const status = await getMistakeInflowStatus(connection.endpoint, connection.token);
+			deps.stdout.write(`${JSON.stringify(status)}\n`);
+			if (options.failOnRed && hasRedSource(status)) deps.exit(2);
+		});
+	});
+	for (const action of ["remove", "restore"]) mistakes.command(action).description(action === "remove" ? "Append a manual removal marker without deleting raw data." : "Append a restore marker for a previously removed observation.").argument("<eventId>", "Observation event id.").requiredOption("--reason <text>", "Auditable reason for the state change.").option("--endpoint <url>", `Inflow URL (or ${DEFAULT_ENDPOINT_ENV}).`).option("--token-env <name>", "Environment variable containing the bearer token.", DEFAULT_TOKEN_ENV).action(async (eventId, options) => {
+		await run$1(deps, async () => {
+			const connection = connectionOptions(deps, options);
+			const result = await changeMistakeObservationState(action, eventId, options.reason, connection.endpoint, connection.token);
+			deps.stdout.write(`${JSON.stringify(result)}\n`);
+		});
+	});
+}
+async function run$1(deps, operation) {
+	try {
+		await operation();
+	} catch (error) {
+		deps.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+		deps.exit(1);
+	}
+}
+function connectionOptions(deps, options) {
+	const endpoint = options.endpoint ?? deps.env[DEFAULT_ENDPOINT_ENV];
+	if (!endpoint) throw new Error(`missing --endpoint or ${DEFAULT_ENDPOINT_ENV}`);
+	const token = deps.env[options.tokenEnv];
+	if (!token || token.trim() === "") throw new Error(`missing bearer token in ${options.tokenEnv}`);
+	return {
+		endpoint,
+		token,
+		outboxDir: resolve(options.outbox ?? join(resolveBlunHome$1(), "mistake", "inflow-outbox"))
+	};
+}
+function parseRecordTypes(value) {
+	const values = [...new Set(value.split(",").map((item) => item.trim()).filter(Boolean))];
+	if (values.length === 0 || values.some((value) => !MISTAKE_RECORD_TYPES.includes(value))) throw new Error(`record types must be one or more of: ${MISTAKE_RECORD_TYPES.join(", ")}`);
+	return values;
+}
+function parseNonNegativeInteger(value) {
+	if (!/^\d+$/.test(value)) throw new Error("entry count must be a non-negative integer");
+	const parsed = Number(value);
+	if (!Number.isSafeInteger(parsed)) throw new Error("entry count is too large");
+	return parsed;
+}
+function parseWatchInterval(value) {
+	if (!/^\d+$/.test(value)) throw new Error("watch interval must be a positive integer");
+	const parsed = Number(value);
+	if (!Number.isSafeInteger(parsed) || parsed < 1) throw new Error("watch interval must be at least one second");
+	return parsed;
+}
+function hasRedSource(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const sources = value["sources"];
+	return Array.isArray(sources) && sources.some((source) => typeof source === "object" && source !== null && source["watchdog"] === "red");
+}
+function choiceOption(flags, description, choices, defaultValue) {
+	return new Option(flags, description).choices([...choices]).default(defaultValue);
+}
+function resolveDeps(overrides) {
+	return {
+		env: overrides.env ?? process.env,
+		now: overrides.now ?? (() => /* @__PURE__ */ new Date()),
+		stdout: overrides.stdout ?? process.stdout,
+		stderr: overrides.stderr ?? process.stderr,
+		exit: overrides.exit ?? ((code) => process.exit(code))
+	};
+}
+//#endregion
 //#region src/personal-memory/phase1-contract.json
 var clientOperations = {
 	"settingsRead": {
@@ -338829,9 +340576,9 @@ function isErrno$1(error, code) {
 	return error.code === code;
 }
 function outputFailure(error, cleanupError) {
-	return new Error(`${errorMessage$3(error)} Output reservation cleanup failed: ${errorMessage$3(cleanupError)}`, { cause: new AggregateError([error, cleanupError], "Output reservation cleanup failed.") });
+	return new Error(`${errorMessage$4(error)} Output reservation cleanup failed: ${errorMessage$4(cleanupError)}`, { cause: new AggregateError([error, cleanupError], "Output reservation cleanup failed.") });
 }
-function errorMessage$3(error) {
+function errorMessage$4(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
@@ -339445,7 +341192,7 @@ async function handleProof(deps, options) {
 		await reservation.write(proof);
 	} catch (error) {
 		await reservation?.abort().catch(() => void 0);
-		deps.stderr.write(`${errorMessage$2(error)}\n`);
+		deps.stderr.write(`${errorMessage$3(error)}\n`);
 		deps.exit(1);
 	}
 	deps.stdout.write(`${outputPath}\n`);
@@ -339477,7 +341224,7 @@ function createDefaultProofDeps(overrides = {}) {
 function defaultProofFilename(now) {
 	return `proof-${now.toISOString().replaceAll(/[:.]/g, "-")}.json`;
 }
-function errorMessage$2(error) {
+function errorMessage$3(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 function samePath$2(left, right) {
@@ -343691,10 +345438,10 @@ var require_atomic_sleep = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region ../../node_modules/.pnpm/sonic-boom@4.2.1/node_modules/sonic-boom/index.js
 var require_sonic_boom = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const fs$4 = __require("fs");
+	const fs$3 = __require("fs");
 	const EventEmitter$10 = __require("events");
 	const inherits$6 = __require("util").inherits;
-	const path$6 = __require("path");
+	const path$5 = __require("path");
 	const sleep = require_atomic_sleep();
 	const assert$8 = __require("assert");
 	const BUSY_WRITE_TIMEOUT = 100;
@@ -343734,17 +345481,17 @@ var require_sonic_boom = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		const flags = sonic.append ? "a" : "w";
 		const mode = sonic.mode;
 		if (sonic.sync) try {
-			if (sonic.mkdir) fs$4.mkdirSync(path$6.dirname(file), { recursive: true });
-			fileOpened(null, fs$4.openSync(file, flags, mode));
+			if (sonic.mkdir) fs$3.mkdirSync(path$5.dirname(file), { recursive: true });
+			fileOpened(null, fs$3.openSync(file, flags, mode));
 		} catch (err) {
 			fileOpened(err);
 			throw err;
 		}
-		else if (sonic.mkdir) fs$4.mkdir(path$6.dirname(file), { recursive: true }, (err) => {
+		else if (sonic.mkdir) fs$3.mkdir(path$5.dirname(file), { recursive: true }, (err) => {
 			if (err) return fileOpened(err);
-			fs$4.open(file, flags, mode, fileOpened);
+			fs$3.open(file, flags, mode, fileOpened);
 		});
-		else fs$4.open(file, flags, mode, fileOpened);
+		else fs$3.open(file, flags, mode, fileOpened);
 	}
 	function SonicBoom(opts) {
 		if (!(this instanceof SonicBoom)) return new SonicBoom(opts);
@@ -343782,8 +345529,8 @@ var require_sonic_boom = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			this.flush = flushBuffer;
 			this.flushSync = flushBufferSync;
 			this._actualWrite = actualWriteBuffer;
-			fsWriteSync = () => fs$4.writeSync(this.fd, this._writingBuf);
-			fsWrite = () => fs$4.write(this.fd, this._writingBuf, this.release);
+			fsWriteSync = () => fs$3.writeSync(this.fd, this._writingBuf);
+			fsWrite = () => fs$3.write(this.fd, this._writingBuf, this.release);
 		} else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
 			this._writingBuf = "";
 			this.write = write;
@@ -343791,12 +345538,12 @@ var require_sonic_boom = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			this.flushSync = flushSync;
 			this._actualWrite = actualWrite;
 			fsWriteSync = () => {
-				if (Buffer.isBuffer(this._writingBuf)) return fs$4.writeSync(this.fd, this._writingBuf);
-				return fs$4.writeSync(this.fd, this._writingBuf, "utf8");
+				if (Buffer.isBuffer(this._writingBuf)) return fs$3.writeSync(this.fd, this._writingBuf);
+				return fs$3.writeSync(this.fd, this._writingBuf, "utf8");
 			};
 			fsWrite = () => {
-				if (Buffer.isBuffer(this._writingBuf)) return fs$4.write(this.fd, this._writingBuf, this.release);
-				return fs$4.write(this.fd, this._writingBuf, "utf8", this.release);
+				if (Buffer.isBuffer(this._writingBuf)) return fs$3.write(this.fd, this._writingBuf, this.release);
+				return fs$3.write(this.fd, this._writingBuf, "utf8", this.release);
 			};
 		} else throw new Error(`SonicBoom supports "${kContentModeUtf8}" and "${kContentModeBuffer}", but passed ${contentMode}`);
 		if (typeof fd === "number") {
@@ -343841,7 +345588,7 @@ var require_sonic_boom = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					return;
 				}
 			}
-			if (this._fsync) fs$4.fsyncSync(this.fd);
+			if (this._fsync) fs$3.fsyncSync(this.fd);
 			const len = this._len;
 			if (this._reopening) {
 				this._writing = false;
@@ -343938,7 +345685,7 @@ var require_sonic_boom = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		this._flushPending = true;
 		const onDrain = () => {
 			if (!this._fsync) try {
-				fs$4.fsync(this.fd, (err) => {
+				fs$3.fsync(this.fd, (err) => {
 					this._flushPending = false;
 					cb(err);
 				});
@@ -344015,7 +345762,7 @@ var require_sonic_boom = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		if (this._writing) return;
 		const fd = this.fd;
 		this.once("ready", () => {
-			if (fd !== this.fd) fs$4.close(fd, (err) => {
+			if (fd !== this.fd) fs$3.close(fd, (err) => {
 				if (err) return this.emit("error", err);
 			});
 		});
@@ -344046,7 +345793,7 @@ var require_sonic_boom = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		while (this._bufs.length || buf.length) {
 			if (buf.length <= 0) buf = this._bufs[0];
 			try {
-				const n = Buffer.isBuffer(buf) ? fs$4.writeSync(this.fd, buf) : fs$4.writeSync(this.fd, buf, "utf8");
+				const n = Buffer.isBuffer(buf) ? fs$3.writeSync(this.fd, buf) : fs$3.writeSync(this.fd, buf, "utf8");
 				const releasedBufObj = releaseWritingBuf(buf, this._len, n);
 				buf = releasedBufObj.writingBuf;
 				this._len = releasedBufObj.len;
@@ -344057,7 +345804,7 @@ var require_sonic_boom = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			}
 		}
 		try {
-			fs$4.fsyncSync(this.fd);
+			fs$3.fsyncSync(this.fd);
 		} catch {}
 	}
 	function flushBufferSync() {
@@ -344071,7 +345818,7 @@ var require_sonic_boom = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		while (this._bufs.length || buf.length) {
 			if (buf.length <= 0) buf = mergeBuf(this._bufs[0], this._lens[0]);
 			try {
-				const n = fs$4.writeSync(this.fd, buf);
+				const n = fs$3.writeSync(this.fd, buf);
 				buf = buf.subarray(n);
 				this._len = Math.max(this._len - n, 0);
 				if (buf.length <= 0) {
@@ -344093,24 +345840,24 @@ var require_sonic_boom = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		this._writing = true;
 		this._writingBuf = this._writingBuf.length ? this._writingBuf : this._bufs.shift() || "";
 		if (this.sync) try {
-			release(null, Buffer.isBuffer(this._writingBuf) ? fs$4.writeSync(this.fd, this._writingBuf) : fs$4.writeSync(this.fd, this._writingBuf, "utf8"));
+			release(null, Buffer.isBuffer(this._writingBuf) ? fs$3.writeSync(this.fd, this._writingBuf) : fs$3.writeSync(this.fd, this._writingBuf, "utf8"));
 		} catch (err) {
 			release(err);
 		}
-		else fs$4.write(this.fd, this._writingBuf, release);
+		else fs$3.write(this.fd, this._writingBuf, release);
 	}
 	function actualWriteBuffer() {
 		const release = this.release;
 		this._writing = true;
 		this._writingBuf = this._writingBuf.length ? this._writingBuf : mergeBuf(this._bufs.shift(), this._lens.shift());
 		if (this.sync) try {
-			release(null, fs$4.writeSync(this.fd, this._writingBuf));
+			release(null, fs$3.writeSync(this.fd, this._writingBuf));
 		} catch (err) {
 			release(err);
 		}
 		else {
 			if (kCopyBuffer) this._writingBuf = Buffer.from(this._writingBuf);
-			fs$4.write(this.fd, this._writingBuf, release);
+			fs$3.write(this.fd, this._writingBuf, release);
 		}
 	}
 	function actualClose(sonic) {
@@ -344124,10 +345871,10 @@ var require_sonic_boom = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		sonic._lens = [];
 		assert$8(typeof sonic.fd === "number", `sonic.fd must be a number, got ${typeof sonic.fd}`);
 		try {
-			fs$4.fsync(sonic.fd, closeWrapped);
+			fs$3.fsync(sonic.fd, closeWrapped);
 		} catch {}
 		function closeWrapped() {
-			if (sonic.fd !== 1 && sonic.fd !== 2) fs$4.close(sonic.fd, done);
+			if (sonic.fd !== 1 && sonic.fd !== 2) fs$3.close(sonic.fd, done);
 			else done();
 		}
 		function done(err) {
@@ -366750,8 +368497,8 @@ var require_constants$2 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region ../../../../node_modules/node-gyp-build/node-gyp-build.js
 var require_node_gyp_build$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var fs$3 = __require("fs");
-	var path$5 = __require("path");
+	var fs$2 = __require("fs");
+	var path$4 = __require("path");
 	var os$3 = __require("os");
 	var runtimeRequire = typeof __webpack_require__ === "function" ? __non_webpack_require__ : __require;
 	var vars = process.config && process.config.variables || {};
@@ -366768,20 +368515,20 @@ var require_node_gyp_build$1 = /* @__PURE__ */ __commonJSMin(((exports, module)
 		return runtimeRequire(load.resolve(dir));
 	}
 	load.resolve = load.path = function(dir) {
-		dir = path$5.resolve(dir || ".");
+		dir = path$4.resolve(dir || ".");
 		try {
-			var name = runtimeRequire(path$5.join(dir, "package.json")).name.toUpperCase().replace(/-/g, "_");
+			var name = runtimeRequire(path$4.join(dir, "package.json")).name.toUpperCase().replace(/-/g, "_");
 			if (process.env[name + "_PREBUILD"]) dir = process.env[name + "_PREBUILD"];
 		} catch (err) {}
 		if (!prebuildsOnly) {
-			var release = getFirst(path$5.join(dir, "build/Release"), matchBuild);
+			var release = getFirst(path$4.join(dir, "build/Release"), matchBuild);
 			if (release) return release;
-			var debug = getFirst(path$5.join(dir, "build/Debug"), matchBuild);
+			var debug = getFirst(path$4.join(dir, "build/Debug"), matchBuild);
 			if (debug) return debug;
 		}
 		var prebuild = resolve(dir);
 		if (prebuild) return prebuild;
-		var nearby = resolve(path$5.dirname(process.execPath));
+		var nearby = resolve(path$4.dirname(process.execPath));
 		if (nearby) return nearby;
 		var target = [
 			"platform=" + platform,
@@ -366797,23 +368544,23 @@ var require_node_gyp_build$1 = /* @__PURE__ */ __commonJSMin(((exports, module)
 		].filter(Boolean).join(" ");
 		throw new Error("No native build was found for " + target + "\n    loaded from: " + dir + "\n");
 		function resolve(dir) {
-			var tuple = readdirSync(path$5.join(dir, "prebuilds")).map(parseTuple).filter(matchTuple(platform, arch)).sort(compareTuples)[0];
+			var tuple = readdirSync(path$4.join(dir, "prebuilds")).map(parseTuple).filter(matchTuple(platform, arch)).sort(compareTuples)[0];
 			if (!tuple) return;
-			var prebuilds = path$5.join(dir, "prebuilds", tuple.name);
+			var prebuilds = path$4.join(dir, "prebuilds", tuple.name);
 			var winner = readdirSync(prebuilds).map(parseTags).filter(matchTags(runtime, abi)).sort(compareTags(runtime))[0];
-			if (winner) return path$5.join(prebuilds, winner.file);
+			if (winner) return path$4.join(prebuilds, winner.file);
 		}
 	};
 	function readdirSync(dir) {
 		try {
-			return fs$3.readdirSync(dir);
+			return fs$2.readdirSync(dir);
 		} catch (err) {
 			return [];
 		}
 	}
 	function getFirst(dir, filter) {
 		var files = readdirSync(dir).filter(filter);
-		return files[0] && path$5.join(dir, files[0]);
+		return files[0] && path$4.join(dir, files[0]);
 	}
 	function matchBuild(name) {
 		return /\.node$/.test(name);
@@ -366894,7 +368641,7 @@ var require_node_gyp_build$1 = /* @__PURE__ */ __commonJSMin(((exports, module)
 		return typeof window !== "undefined" && window.process && window.process.type === "renderer";
 	}
 	function isAlpine(platform) {
-		return platform === "linux" && fs$3.existsSync("/etc/alpine-release");
+		return platform === "linux" && fs$2.existsSync("/etc/alpine-release");
 	}
 	load.parseTags = parseTags;
 	load.matchTags = matchTags;
@@ -374010,7 +375757,7 @@ var import_multipart = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((
 	const fp = require_plugin();
 	const { createWriteStream: createWriteStream$1 } = __require("node:fs");
 	const { unlink: unlink$1 } = __require("node:fs/promises");
-	const path$4 = __require("node:path");
+	const path$3 = __require("node:path");
 	const { generateId } = require_generateId();
 	const createError = require_error$1();
 	const streamToNull = require_stream_consumer();
@@ -374305,7 +376052,7 @@ var import_multipart = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((
 			for await (const part of parts) {
 				values = part.fields;
 				if (!part.file) continue;
-				const filepath = path$4.join(tmpdir, generateId() + path$4.extname(part.filename || "file" + i++));
+				const filepath = path$3.join(tmpdir, generateId() + path$3.extname(part.filename || "file" + i++));
 				const target = createWriteStream$1(filepath);
 				try {
 					this.tmpUploads.push(filepath);
@@ -387046,8 +388793,8 @@ var require_dist$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
 //#endregion
 //#region ../../node_modules/.pnpm/@fastify+swagger@9.7.0/node_modules/@fastify/swagger/lib/mode/static.js
 var require_static = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const path$3 = __require("node:path");
-	const fs$2 = __require("node:fs");
+	const path$2 = __require("node:path");
+	const fs$1 = __require("node:fs");
 	const yaml = require_dist$1();
 	module.exports = function(fastify, opts, done) {
 		if (!opts.specification) return done(/* @__PURE__ */ new Error("specification is missing in the module options"));
@@ -387056,14 +388803,14 @@ var require_static = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		if (!opts.specification.path && !opts.specification.document) return done(/* @__PURE__ */ new Error("both specification.path and specification.document are missing, should be path to the file or swagger document spec"));
 		else if (opts.specification.path) {
 			if (typeof opts.specification.path !== "string") return done(/* @__PURE__ */ new Error("specification.path is not a string"));
-			if (!fs$2.existsSync(path$3.resolve(opts.specification.path))) return done(/* @__PURE__ */ new Error(`${opts.specification.path} does not exist`));
-			const extName = path$3.extname(opts.specification.path).toLowerCase();
+			if (!fs$1.existsSync(path$2.resolve(opts.specification.path))) return done(/* @__PURE__ */ new Error(`${opts.specification.path} does not exist`));
+			const extName = path$2.extname(opts.specification.path).toLowerCase();
 			if ([".yaml", ".json"].indexOf(extName) === -1) return done(/* @__PURE__ */ new Error("specification.path extension name is not supported, should be one from ['.yaml', '.json']"));
 			if (opts.specification.postProcessor && typeof opts.specification.postProcessor !== "function") return done(/* @__PURE__ */ new Error("specification.postProcessor should be a function"));
 			if (opts.specification.baseDir && typeof opts.specification.baseDir !== "string") return done(/* @__PURE__ */ new Error("specification.baseDir should be string"));
-			if (!opts.specification.baseDir) opts.specification.baseDir = path$3.resolve(path$3.dirname(opts.specification.path));
+			if (!opts.specification.baseDir) opts.specification.baseDir = path$2.resolve(path$2.dirname(opts.specification.path));
 			else while (opts.specification.baseDir.endsWith("/")) opts.specification.baseDir = opts.specification.baseDir.slice(0, -1);
-			const source = fs$2.readFileSync(path$3.resolve(opts.specification.path), "utf8");
+			const source = fs$1.readFileSync(path$2.resolve(opts.specification.path), "utf8");
 			switch (extName) {
 				case ".yaml":
 					swaggerObject = yaml.parse(source);
@@ -387330,11 +389077,11 @@ var require_should_route_hide = /* @__PURE__ */ __commonJSMin(((exports, module)
 //#endregion
 //#region ../../node_modules/.pnpm/@fastify+swagger@9.7.0/node_modules/@fastify/swagger/lib/util/read-package-json.js
 var require_read_package_json = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const fs$1 = __require("node:fs");
-	const path$2 = __require("node:path");
+	const fs = __require("node:fs");
+	const path$1 = __require("node:path");
 	function readPackageJson() {
 		try {
-			return JSON.parse(fs$1.readFileSync(path$2.join(__dirname, "..", "..", "package.json")));
+			return JSON.parse(fs.readFileSync(path$1.join(__dirname, "..", "..", "package.json")));
 		} catch {
 			return {};
 		}
@@ -395793,7 +397540,7 @@ async function abortAndFail(deps, reservation, error) {
 	if (reservation !== void 0) try {
 		await reservation.abort();
 	} catch (cleanupError) {
-		fail(deps, new Error(`${errorMessage$1(error)} Output reservation cleanup failed: ${errorMessage$1(cleanupError)}`, { cause: new AggregateError([error, cleanupError], "Output reservation cleanup failed.") }));
+		fail(deps, new Error(`${errorMessage$2(error)} Output reservation cleanup failed: ${errorMessage$2(cleanupError)}`, { cause: new AggregateError([error, cleanupError], "Output reservation cleanup failed.") }));
 	}
 	fail(deps, error);
 }
@@ -395804,10 +397551,10 @@ function stringArray(value) {
 	return Array.isArray(value) && value.every((item) => typeof item === "string") ? value : [];
 }
 function fail(deps, error) {
-	deps.stderr.write(`${errorMessage$1(error)}\n`);
+	deps.stderr.write(`${errorMessage$2(error)}\n`);
 	return deps.exit(1);
 }
-function errorMessage$1(error) {
+function errorMessage$2(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
@@ -396534,14 +398281,14 @@ async function run(deps, operation) {
 	try {
 		await operation();
 	} catch (error) {
-		deps.stderr.write(`${errorMessage(error)}\n`);
+		deps.stderr.write(`${errorMessage$1(error)}\n`);
 		deps.exit(1);
 	}
 }
 function writeJson(deps, value) {
 	deps.stdout.write(`${JSON.stringify(value, null, 2)}\n`);
 }
-function errorMessage(error) {
+function errorMessage$1(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
@@ -396574,6 +398321,7 @@ function createProgram(version, onMain, onPluginNodeRunner = () => {}, onUpgrade
 	registerAcpCommand(program);
 	registerServerCommand(program);
 	registerLoginCommand(program);
+	registerMistakesCommand(program);
 	registerPersonalMemoryCommand(program);
 	registerDoctorCommand(program);
 	registerVisCommand(program);
@@ -402281,9 +404029,9 @@ var TUI = class TUI extends Container {
 		const debugRedraw = process.env["PI_DEBUG_REDRAW"] === "1";
 		const logRedraw = (reason) => {
 			if (!debugRedraw) return;
-			const logPath = path$17.join(nodeOs.homedir(), ".pi", "agent", "pi-debug.log");
+			const logPath = path$16.join(nodeOs.homedir(), ".pi", "agent", "pi-debug.log");
 			const msg = `[${(/* @__PURE__ */ new Date()).toISOString()}] fullRender: ${reason} (prev=${this.previousLines.length}, new=${newLines.length}, height=${height})\n`;
-			fs$17.appendFileSync(logPath, msg);
+			fs$16.appendFileSync(logPath, msg);
 		};
 		if (this.previousLines.length === 0 && !widthChanged && !heightChanged) {
 			logRedraw("first render");
@@ -402430,8 +404178,8 @@ var TUI = class TUI extends Container {
 		buffer += "\x1B[?2026l";
 		if (process.env["PI_TUI_DEBUG"] === "1") {
 			const debugDir = "/tmp/tui";
-			fs$17.mkdirSync(debugDir, { recursive: true });
-			const debugPath = path$17.join(debugDir, `render-${Date.now()}-${Math.random().toString(36).slice(2)}.log`);
+			fs$16.mkdirSync(debugDir, { recursive: true });
+			const debugPath = path$16.join(debugDir, `render-${Date.now()}-${Math.random().toString(36).slice(2)}.log`);
 			const debugData = [
 				`firstChanged: ${firstChanged}`,
 				`viewportTop: ${viewportTop}`,
@@ -402454,7 +404202,7 @@ var TUI = class TUI extends Container {
 				"=== buffer ===",
 				JSON.stringify(buffer)
 			].join("\n");
-			fs$17.writeFileSync(debugPath, debugData);
+			fs$16.writeFileSync(debugPath, debugData);
 		}
 		this.terminal.write(buffer);
 		this.cursorRow = Math.max(0, newLines.length - 1);
@@ -407035,12 +408783,12 @@ function loadNativeModifiersHelper() {
 	if (process.platform !== "darwin") return void 0;
 	const arch = process.arch;
 	if (arch !== "x64" && arch !== "arm64") return void 0;
-	const moduleDir = path$17.dirname(fileURLToPath(import.meta.url));
-	const nativePath = path$17.join("native", "darwin", "prebuilds", `darwin-${arch}`, "darwin-modifiers.node");
+	const moduleDir = path$16.dirname(fileURLToPath(import.meta.url));
+	const nativePath = path$16.join("native", "darwin", "prebuilds", `darwin-${arch}`, "darwin-modifiers.node");
 	const candidates = [
-		path$17.join(moduleDir, "..", nativePath),
-		path$17.join(moduleDir, nativePath),
-		path$17.join(path$17.dirname(process.execPath), nativePath)
+		path$16.join(moduleDir, "..", nativePath),
+		path$16.join(moduleDir, nativePath),
+		path$16.join(path$16.dirname(process.execPath), nativePath)
 	];
 	for (const modulePath of candidates) try {
 		const helper = cjsRequire$1(modulePath);
@@ -407113,10 +408861,10 @@ var ProcessTerminal = class {
 		const env = process.env["PI_TUI_WRITE_LOG"] || "";
 		if (!env) return "";
 		try {
-			if (fs$17.statSync(env).isDirectory()) {
+			if (fs$16.statSync(env).isDirectory()) {
 				const now = /* @__PURE__ */ new Date();
 				const ts = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}-${String(now.getDate()).padStart(2, "0")}_${String(now.getHours()).padStart(2, "0")}-${String(now.getMinutes()).padStart(2, "0")}-${String(now.getSeconds()).padStart(2, "0")}`;
-				return path$17.join(env, `tui-${ts}-${process.pid}.log`);
+				return path$16.join(env, `tui-${ts}-${process.pid}.log`);
 			}
 		} catch {}
 		return env;
@@ -407319,12 +409067,12 @@ var ProcessTerminal = class {
 		try {
 			const arch = process.arch;
 			if (arch !== "x64" && arch !== "arm64") return;
-			const moduleDir = path$17.dirname(fileURLToPath(import.meta.url));
-			const nativePath = path$17.join("native", "win32", "prebuilds", `win32-${arch}`, "win32-console-mode.node");
+			const moduleDir = path$16.dirname(fileURLToPath(import.meta.url));
+			const nativePath = path$16.join("native", "win32", "prebuilds", `win32-${arch}`, "win32-console-mode.node");
 			const candidates = [
-				path$17.join(moduleDir, "..", nativePath),
-				path$17.join(moduleDir, nativePath),
-				path$17.join(path$17.dirname(process.execPath), nativePath)
+				path$16.join(moduleDir, "..", nativePath),
+				path$16.join(moduleDir, nativePath),
+				path$16.join(path$16.dirname(process.execPath), nativePath)
 			];
 			for (const modulePath of candidates) try {
 				cjsRequire(modulePath).enableVirtualTerminalInput?.();
@@ -407396,7 +409144,7 @@ var ProcessTerminal = class {
 	write(data) {
 		process.stdout.write(data);
 		if (this.writeLogPath) try {
-			fs$17.appendFileSync(this.writeLogPath, data, { encoding: "utf8" });
+			fs$16.appendFileSync(this.writeLogPath, data, { encoding: "utf8" });
 		} catch {}
 	}
 	get columns() {
@@ -511439,6 +513187,103 @@ function runNativeAssetSmokeIfRequested() {
 	return true;
 }
 //#endregion
+//#region src/mistakes/automatic-sync.ts
+const AUTOMATIC_MISTAKE_SYNC_CONFIG_ENV = "BLUN_MISTAKE_SYNC_CONFIG";
+const DEFAULT_DEPS = {
+	lstat,
+	lock: (path) => import_proper_lockfile.default.lock(path, {
+		realpath: false,
+		retries: 0,
+		stale: 3e4,
+		update: 1e4
+	}),
+	watch: (options) => watchMistakeSources(options),
+	logger: log
+};
+async function startAutomaticMistakeSync(options, deps = DEFAULT_DEPS) {
+	const env = options.env ?? process.env;
+	const configuredPath = env[AUTOMATIC_MISTAKE_SYNC_CONFIG_ENV]?.trim();
+	const configPath = resolve(configuredPath && configuredPath.length > 0 ? configuredPath : join(options.homeDir, "mistake", "source-sync.json"));
+	const inactive = () => ({
+		active: false,
+		configPath,
+		stop: async () => {}
+	});
+	try {
+		const stat = await deps.lstat(configPath);
+		if (stat.isSymbolicLink() || !stat.isFile()) {
+			deps.logger.warn("automatic mistake sync config is not a regular file", { configPath });
+			return inactive();
+		}
+	} catch (error) {
+		if (isErrorCode(error, "ENOENT")) return inactive();
+		deps.logger.warn("automatic mistake sync config is unavailable", {
+			configPath,
+			error: errorMessage(error)
+		});
+		return inactive();
+	}
+	let release;
+	try {
+		release = await deps.lock(configPath);
+	} catch (error) {
+		if (isErrorCode(error, "ELOCKED")) return inactive();
+		deps.logger.warn("automatic mistake sync lock failed", {
+			configPath,
+			error: errorMessage(error)
+		});
+		return inactive();
+	}
+	const controller = new AbortController();
+	let released = false;
+	const releaseOnce = async () => {
+		if (released) return;
+		released = true;
+		try {
+			await release();
+		} catch {}
+	};
+	const watchPromise = deps.watch({
+		configPath,
+		env,
+		intervalMs: options.intervalMs ?? 3e5,
+		signal: controller.signal,
+		onRun: (run) => logRun(deps.logger, run)
+	}).catch((error) => {
+		deps.logger.warn("automatic mistake sync stopped", {
+			configPath,
+			error: errorMessage(error)
+		});
+	}).finally(releaseOnce);
+	return {
+		active: true,
+		configPath,
+		stop: async () => {
+			controller.abort();
+			await watchPromise;
+		}
+	};
+}
+function logRun(logger, run) {
+	const counts = Object.fromEntries([
+		"uploaded",
+		"heartbeat",
+		"unchanged",
+		"blocked",
+		"failed"
+	].map((status) => [status, run.results.filter((result) => result.status === status).length]));
+	logger.info("automatic mistake sync completed", {
+		configPath: run.config_path,
+		...counts
+	});
+}
+function isErrorCode(error, code) {
+	return typeof error === "object" && error !== null && error.code === code;
+}
+function errorMessage(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+//#endregion
 //#region src/main.ts
 /**
 * BLUN King entry point.
@@ -511471,9 +513316,15 @@ async function handleMainCommand(opts, version) {
 	} : { track });
 	if (preflightResult === "exit") process.exit(0);
 	const updateStartupNotice = typeof preflightResult === "object" ? preflightResult.startupNotice : void 0;
-	if (validated.uiMode === "print") {
+	const mistakeSync = await startAutomaticMistakeSync({
+		homeDir: resolveBlunHome$1(),
+		env: process.env
+	});
+	if (validated.uiMode === "print") try {
 		await runPrompt(validated.options, version);
 		return { headlessCompleted: true };
+	} finally {
+		await mistakeSync.stop();
 	}
 	await runShell(validated.options, version, updateStartupNotice);
 	return { headlessCompleted: false };