blun-king-cli 9.1.19 → 9.1.21

package/blun.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// BLUN_BUILD_INPUT_SHA256:b991ad9b5744a4c7edb806fc71b837f5d58205791bc5979c4e05b6b5f3564456
+// BLUN_BUILD_INPUT_SHA256:18b6ba1c5baca9739e0e2b5c280d073bac714589178a987d0bc9fd63d56020f0
 import { fileURLToPath as __cjsShimFileURLToPath } from 'node:url';
 import { dirname as __cjsShimDirname } from 'node:path';
 const __filename = __cjsShimFileURLToPath(import.meta.url);
@@ -1167,7 +1167,7 @@ function normalizeBlunToolSchema(schema) {
 }
 function ensureBlunPropertyTypes(schema) {
 	const normalized = cloneJsonValue(schema);
-	if (!isRecord$22(normalized)) throw new Error("JSON Schema root must normalize to an object.");
+	if (!isRecord$23(normalized)) throw new Error("JSON Schema root must normalize to an object.");
 	recurseSchema(normalized);
 	return normalized;
 }
@@ -1228,7 +1228,7 @@ function resolveLocalJsonPointer(root, ref) {
 	let current = root;
 	for (const rawPart of ref.slice(2).split("/")) {
 		const part = unescapeJsonPointerPart(rawPart);
-		if (isRecord$22(current)) {
+		if (isRecord$23(current)) {
 			if (!hasOwn(current, part)) return { found: false };
 			current = current[part];
 		} else if (Array.isArray(current)) {
@@ -1250,20 +1250,20 @@ function parseJsonPointerArrayIndex(part) {
 	return Number(part);
 }
 function recurseSchema(node) {
-	if (!isRecord$22(node)) return;
+	if (!isRecord$23(node)) return;
 	visitChildSchemas(node, normalizeProperty);
 }
 function visitChildSchemas(node, visit) {
 	for (const { key, kind } of CHILD_SCHEMA_SLOTS) {
 		const value = node[key];
 		if (kind === "single") {
-			if (isRecord$22(value)) visit(value);
+			if (isRecord$23(value)) visit(value);
 		} else if (kind === "array") {
 			if (Array.isArray(value)) for (const item of value) visit(item);
 		} else if (kind === "map") {
-			if (isRecord$22(value)) for (const item of Object.values(value)) visit(item);
+			if (isRecord$23(value)) for (const item of Object.values(value)) visit(item);
 		} else if (kind === "schema-or-array") {
-			if (isRecord$22(value)) visit(value);
+			if (isRecord$23(value)) visit(value);
 			else if (Array.isArray(value)) for (const item of value) visit(item);
 		}
 	}
@@ -1275,7 +1275,7 @@ function childSchemaKeysForParentType(parentType) {
 	});
 }
 function normalizeProperty(node) {
-	if (!isRecord$22(node)) return;
+	if (!isRecord$23(node)) return;
 	if (!hasOwn(node, "type") && !hasAnyKey(node, TYPE_COMPLETION_SKIP_KEYS)) {
 		const enumValues = node["enum"];
 		if (Array.isArray(enumValues) && enumValues.length > 0) node["type"] = inferTypeFromValues(enumValues);
@@ -1359,14 +1359,14 @@ function hasAnyKey(obj, keys) {
 }
 function cloneJsonValue(value) {
 	if (Array.isArray(value)) return value.map((item) => cloneJsonValue(item));
-	if (isRecord$22(value)) {
+	if (isRecord$23(value)) {
 		const cloned = {};
 		for (const [key, child] of Object.entries(value)) cloned[key] = cloneJsonValue(child);
 		return cloned;
 	}
 	return value;
 }
-function isRecord$22(value) {
+function isRecord$23(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function hasOwn(obj, key) {
@@ -1587,7 +1587,7 @@ function isProviderRateLimitError(error) {
 	if (error instanceof APIProviderRateLimitError) return true;
 	const statusCode = getStatusCode(error);
 	if (statusCode !== void 0) return statusCode === 429;
-	const lowerMessage = errorMessage$9(error).toLowerCase();
+	const lowerMessage = errorMessage$13(error).toLowerCase();
 	return PROVIDER_RATE_LIMIT_MESSAGE_PATTERNS.some((pattern) => pattern.test(lowerMessage));
 }
 function getStatusCode(error) {
@@ -1605,7 +1605,7 @@ function getStatusCode(error) {
 	const responseStatus = responseRecord["status"];
 	return typeof responseStatus === "number" ? responseStatus : void 0;
 }
-function errorMessage$9(error) {
+function errorMessage$13(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 var ChatProviderError, APIConnectionError, APITimeoutError, APIStatusError, APIContextOverflowError, APIProviderRateLimitError, APIPaymentRequiredError, APIEmptyResponseError, CompactionStallError$1, NETWORK_RE, TIMEOUT_RE, CONTEXT_OVERFLOW_MESSAGE_PATTERNS, PROVIDER_RATE_LIMIT_MESSAGE_PATTERNS, PROVIDER_QUOTA_EXHAUSTED_MESSAGE_PATTERN, PROVIDER_QUOTA_EXHAUSTED_CONTEXT_PATTERNS, TOOL_EXCHANGE_ADJACENCY_MESSAGE_PATTERNS, STRUCTURAL_REQUEST_MESSAGE_PATTERNS;
@@ -1824,7 +1824,7 @@ function retryAfterHeaderMs(headers) {
 	const fromDate = Math.max(0, retryAt - Date.now());
 	return fromDate <= MAX_RETRY_DELAY_MS ? fromDate : null;
 }
-async function readJson(response) {
+async function readJson$1(response) {
 	const body = await response.text();
 	if (body.trim().length === 0) throw new ChatProviderError("Provider returned an empty JSON response.");
 	try {
@@ -1924,7 +1924,7 @@ var init_fetch_http_client = __esmMin((() => {
 				signal: options?.signal
 			}, options?.maxRetries);
 			if (isStream) return parseServerSentJson(response);
-			return readJson(response);
+			return readJson$1(response);
 		}
 		async uploadFile(params, options) {
 			const form = new FormData();
@@ -1932,7 +1932,7 @@ var init_fetch_http_client = __esmMin((() => {
 			form.append("file", params.file);
 			const headers = this.requestHeaders();
 			headers.delete("content-type");
-			const uploaded = await readJson(await this.fetchWithRetries("/files", {
+			const uploaded = await readJson$1(await this.fetchWithRetries("/files", {
 				method: "POST",
 				headers,
 				body: form,
@@ -5436,16 +5436,16 @@ function esc(str) {
 function slugify(input) {
 	return input.toLowerCase().trim().replace(/[^\w\s-]/g, "").replace(/[\s_-]+/g, "-").replace(/^-+|-+$/g, "");
 }
-function isObject$4(data) {
+function isObject$5(data) {
 	return typeof data === "object" && data !== null && !Array.isArray(data);
 }
 function isPlainObject$4(o) {
-	if (isObject$4(o) === false) return false;
+	if (isObject$5(o) === false) return false;
 	const ctor = o.constructor;
 	if (ctor === void 0) return true;
 	if (typeof ctor !== "function") return true;
 	const prot = ctor.prototype;
-	if (isObject$4(prot) === false) return false;
+	if (isObject$5(prot) === false) return false;
 	if (Object.prototype.hasOwnProperty.call(prot, "isPrototypeOf") === false) return false;
 	return true;
 }
@@ -5454,7 +5454,7 @@ function shallowClone(o) {
 	if (Array.isArray(o)) return [...o];
 	return o;
 }
-function escapeRegex$2(str) {
+function escapeRegex$3(str) {
 	return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function clone$1(inst, def, params) {
@@ -6201,7 +6201,7 @@ var init_checks$2 = __esmMin((() => {
 	});
 	$ZodCheckIncludes = /* @__PURE__ */ $constructor("$ZodCheckIncludes", (inst, def) => {
 		$ZodCheck.init(inst, def);
-		const escapedRegex = escapeRegex$2(def.includes);
+		const escapedRegex = escapeRegex$3(def.includes);
 		const pattern = new RegExp(typeof def.position === "number" ? `^.{${def.position}}${escapedRegex}` : escapedRegex);
 		def.pattern = pattern;
 		inst._zod.onattach.push((inst) => {
@@ -6224,7 +6224,7 @@ var init_checks$2 = __esmMin((() => {
 	});
 	$ZodCheckStartsWith = /* @__PURE__ */ $constructor("$ZodCheckStartsWith", (inst, def) => {
 		$ZodCheck.init(inst, def);
-		const pattern = new RegExp(`^${escapeRegex$2(def.prefix)}.*`);
+		const pattern = new RegExp(`^${escapeRegex$3(def.prefix)}.*`);
 		def.pattern ?? (def.pattern = pattern);
 		inst._zod.onattach.push((inst) => {
 			const bag = inst._zod.bag;
@@ -6246,7 +6246,7 @@ var init_checks$2 = __esmMin((() => {
 	});
 	$ZodCheckEndsWith = /* @__PURE__ */ $constructor("$ZodCheckEndsWith", (inst, def) => {
 		$ZodCheck.init(inst, def);
-		const pattern = new RegExp(`.*${escapeRegex$2(def.suffix)}$`);
+		const pattern = new RegExp(`.*${escapeRegex$3(def.suffix)}$`);
 		def.pattern ?? (def.pattern = pattern);
 		inst._zod.onattach.push((inst) => {
 			const bag = inst._zod.bag;
@@ -7008,7 +7008,7 @@ var init_schemas$2 = __esmMin((() => {
 			}
 			return propValues;
 		});
-		const isObject = isObject$4;
+		const isObject = isObject$5;
 		const catchall = def.catchall;
 		let value;
 		inst._zod.parse = (payload, ctx) => {
@@ -7108,7 +7108,7 @@ var init_schemas$2 = __esmMin((() => {
 			return (payload, ctx) => fn(shape, payload, ctx);
 		};
 		let fastpass;
-		const isObject = isObject$4;
+		const isObject = isObject$5;
 		const jit = !globalConfig.jitless;
 		const fastEnabled = jit && allowsEval.value;
 		const catchall = def.catchall;
@@ -7203,7 +7203,7 @@ var init_schemas$2 = __esmMin((() => {
 		});
 		inst._zod.parse = (payload, ctx) => {
 			const input = payload.value;
-			if (!isObject$4(input)) {
+			if (!isObject$5(input)) {
 				payload.issues.push({
 					code: "invalid_type",
 					expected: "object",
@@ -7341,7 +7341,7 @@ var init_schemas$2 = __esmMin((() => {
 		const values = getEnumValues(def.entries);
 		const valuesSet = new Set(values);
 		inst._zod.values = valuesSet;
-		inst._zod.pattern = new RegExp(`^(${values.filter((k) => propertyKeyTypes.has(typeof k)).map((o) => typeof o === "string" ? escapeRegex$2(o) : o.toString()).join("|")})$`);
+		inst._zod.pattern = new RegExp(`^(${values.filter((k) => propertyKeyTypes.has(typeof k)).map((o) => typeof o === "string" ? escapeRegex$3(o) : o.toString()).join("|")})$`);
 		inst._zod.parse = (payload, _ctx) => {
 			const input = payload.value;
 			if (valuesSet.has(input)) return payload;
@@ -7359,7 +7359,7 @@ var init_schemas$2 = __esmMin((() => {
 		if (def.values.length === 0) throw new Error("Cannot create literal schema with no valid values");
 		const values = new Set(def.values);
 		inst._zod.values = values;
-		inst._zod.pattern = new RegExp(`^(${def.values.map((o) => typeof o === "string" ? escapeRegex$2(o) : o ? escapeRegex$2(o.toString()) : String(o)).join("|")})$`);
+		inst._zod.pattern = new RegExp(`^(${def.values.map((o) => typeof o === "string" ? escapeRegex$3(o) : o ? escapeRegex$3(o.toString()) : String(o)).join("|")})$`);
 		inst._zod.parse = (payload, _ctx) => {
 			const input = payload.value;
 			if (values.has(input)) return payload;
@@ -9987,6 +9987,7 @@ var init_schema = __esmMin((() => {
 	ServicesConfigSchema = object({
 		blunSearch: BlunServiceConfigSchema.optional(),
 		blunFetch: BlunServiceConfigSchema.optional(),
+		blunMedia: BlunServiceConfigSchema.optional(),
 		visionReader: VisionReaderConfigSchema.optional()
 	});
 	McpServerCommonFields = {
@@ -10081,6 +10082,7 @@ var init_schema = __esmMin((() => {
 	ServicesConfigPatchSchema = object({
 		blunSearch: BlunServiceConfigPatchSchema.optional(),
 		blunFetch: BlunServiceConfigPatchSchema.optional(),
+		blunMedia: BlunServiceConfigPatchSchema.optional(),
 		visionReader: VisionReaderConfigPatchSchema.optional()
 	});
 	BlunConfigPatchSchema = object({
@@ -10431,7 +10433,7 @@ function tokenFromWire(wire) {
 var init_types$17 = __esmMin((() => {}));
 //#endregion
 //#region ../../packages/oauth/src/utils.ts
-function isRecord$21(value) {
+function isRecord$22(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var init_utils$1 = __esmMin((() => {}));
@@ -10755,7 +10757,7 @@ var init_storage = __esmMin((() => {
 			} catch {
 				return;
 			}
-			if (!isRecord$21(parsed)) return void 0;
+			if (!isRecord$22(parsed)) return void 0;
 			return tokenFromWire(parsed);
 		}
 		async save(name, token) {
@@ -10849,15 +10851,15 @@ function extractApiErrorMessage(value) {
 		}
 		return;
 	}
-	if (!isRecord$21(value)) return void 0;
+	if (!isRecord$22(value)) return void 0;
 	for (const key of DIRECT_ERROR_KEYS) {
 		const message = stringField$4(value, key);
 		if (message !== void 0) return message;
 	}
 	const error = value["error"];
-	const errorString = nonEmptyString$6(error);
+	const errorString = nonEmptyString$7(error);
 	if (errorString !== void 0) return errorString;
-	if (isRecord$21(error)) for (const key of NESTED_ERROR_KEYS) {
+	if (isRecord$22(error)) for (const key of NESTED_ERROR_KEYS) {
 		const message = stringField$4(error, key);
 		if (message !== void 0) return message;
 	}
@@ -10877,9 +10879,9 @@ async function readApiErrorMessage(response, fallback) {
 	return extractApiErrorMessage(parsed) ?? fallback;
 }
 function stringField$4(record, key) {
-	return nonEmptyString$6(record[key]);
+	return nonEmptyString$7(record[key]);
 }
-function nonEmptyString$6(value) {
+function nonEmptyString$7(value) {
 	if (typeof value !== "string") return void 0;
 	const trimmed = value.trim();
 	return trimmed.length > 0 ? trimmed : void 0;
@@ -10947,7 +10949,7 @@ async function postForm(url, params, deviceHeaders, options) {
 	let data = {};
 	try {
 		const parsed = await response.json();
-		if (isRecord$21(parsed)) data = parsed;
+		if (isRecord$22(parsed)) data = parsed;
 	} catch {}
 	return {
 		status,
@@ -12859,9 +12861,9 @@ function blunContextWindowsUrl(oauthHost) {
 	return `${(oauthHost ?? process.env["BLUN_OAUTH_HOST"] ?? "https://account.blun.ai").replace(/\/+$/, "")}/api/verbrauch/tarife`;
 }
 function parseManagedContextWindow(payload, plan) {
-	if (!isRecord$21(payload)) return void 0;
+	if (!isRecord$22(payload)) return void 0;
 	const contextWindows = payload["kontext"];
-	if (!isRecord$21(contextWindows)) return void 0;
+	if (!isRecord$22(contextWindows)) return void 0;
 	const value = contextWindows[plan];
 	return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : void 0;
 }
@@ -12896,7 +12898,7 @@ function parseManagedUsagePayload(payload) {
 	const plan = typeof rec["plan"] === "string" && rec["plan"].trim().length > 0 ? rec["plan"].trim() : void 0;
 	const contextWindowTokens = managedContextWindowFrom(rec);
 	const unlimited = rec["unlimited"] === true;
-	const stand = isRecord$21(rec["stand"]) ? rec["stand"] : void 0;
+	const stand = isRecord$22(rec["stand"]) ? rec["stand"] : void 0;
 	if (stand !== void 0) for (const [sourceKey, id, label] of ACCOUNT_USAGE_WINDOWS) {
 		const row = toAccountUsageRow(stand[sourceKey], id, label, unlimited);
 		if (row !== null) limits.push(row);
@@ -12906,9 +12908,9 @@ function parseManagedUsagePayload(payload) {
 		const item = rawLimits[idx];
 		if (!item || typeof item !== "object") continue;
 		const detailRaw = item["detail"];
-		const detail = isRecord$21(detailRaw) ? detailRaw : item;
+		const detail = isRecord$22(detailRaw) ? detailRaw : item;
 		const windowRaw = item["window"];
-		const row = toUsageRow(detail, limitLabel(item, detail, isRecord$21(windowRaw) ? windowRaw : {}, idx));
+		const row = toUsageRow(detail, limitLabel(item, detail, isRecord$22(windowRaw) ? windowRaw : {}, idx));
 		if (row !== null) limits.push(row);
 	}
 	return {
@@ -12932,7 +12934,7 @@ function managedContextWindowFrom(payload) {
 	return values.every((value) => value === first) ? first : void 0;
 }
 function toAccountUsageRow(raw, id, label, accountUnlimited) {
-	if (!isRecord$21(raw)) return null;
+	if (!isRecord$22(raw)) return null;
 	const used = toInt(raw["verbraucht"]);
 	const unlimited = accountUnlimited || raw["unlimited"] === true;
 	const fraction = raw["anteil"];
@@ -12965,7 +12967,7 @@ function toAccountUsageRow(raw, id, label, accountUnlimited) {
 	};
 }
 function toUsageRow(raw, defaultLabel) {
-	if (!isRecord$21(raw)) return null;
+	if (!isRecord$22(raw)) return null;
 	const unlimited = raw["unlimited"] === true;
 	const limit = toInt(raw["limit"]);
 	let used = toInt(raw["used"]);
@@ -13086,7 +13088,7 @@ function isManagedQuotaErrorMessage(message) {
 	return /you(?:'|’)?ve reached your usage limit/.test(normalized) && /billing cycle|quota will be (?:refreshed|reset)|purchase extra usage/.test(normalized);
 }
 function hasManagedUsageShape(payload) {
-	if (!isRecord$21(payload)) return false;
+	if (!isRecord$22(payload)) return false;
 	let recognized = false;
 	if ("context_window_tokens" in payload || "contextWindowTokens" in payload) {
 		recognized = true;
@@ -13102,15 +13104,15 @@ function hasManagedUsageShape(payload) {
 		if (!Array.isArray(limits)) return false;
 		for (let index = 0; index < limits.length; index++) {
 			const item = limits[index];
-			if (!isRecord$21(item)) return false;
-			const detail = isRecord$21(item["detail"]) ? item["detail"] : item;
-			if (toUsageRow(detail, limitLabel(item, detail, isRecord$21(item["window"]) ? item["window"] : {}, index)) === null) return false;
+			if (!isRecord$22(item)) return false;
+			const detail = isRecord$22(item["detail"]) ? item["detail"] : item;
+			if (toUsageRow(detail, limitLabel(item, detail, isRecord$22(item["window"]) ? item["window"] : {}, index)) === null) return false;
 		}
 	}
 	if ("stand" in payload) {
 		recognized = true;
 		const stand = payload["stand"];
-		if (!isRecord$21(stand)) return false;
+		if (!isRecord$22(stand)) return false;
 		const windows = ACCOUNT_USAGE_WINDOWS.filter(([sourceKey]) => sourceKey in stand);
 		if (windows.length === 0) return false;
 		const unlimited = payload["unlimited"] === true;
@@ -13206,8 +13208,8 @@ function userExtras(existing, remoteOwnedFields) {
 	return out;
 }
 function mergeRefreshedModelAlias(existing, remote, remoteOwnedFields) {
-	const current = isRecord$21(existing) ? existing : {};
-	const overrides = cloneOverrides(isRecord$21(current["overrides"]) ? current["overrides"] : void 0);
+	const current = isRecord$22(existing) ? existing : {};
+	const overrides = cloneOverrides(isRecord$22(current["overrides"]) ? current["overrides"] : void 0);
 	return {
 		...userExtras(current, remoteOwnedFields),
 		...remote,
@@ -13389,7 +13391,7 @@ function parseModelContextLength(item, modelId) {
 	return values[0];
 }
 function toModelInfo(item) {
-	if (!isRecord$21(item) || typeof item["id"] !== "string" || item["id"].length === 0) return;
+	if (!isRecord$22(item) || typeof item["id"] !== "string" || item["id"].length === 0) return;
 	const contextLength = parseModelContextLength(item, item["id"]);
 	const displayName = item["display_name"];
 	const normalizedDisplayName = typeof displayName === "string" && displayName.length > 0 ? displayName : void 0;
@@ -13476,7 +13478,7 @@ async function fetchManagedBlunCodeModels(options) {
 			throw new Error(message);
 		}
 		const payload = await response.json();
-		if (!isRecord$21(payload) || !Array.isArray(payload["data"])) throw new Error(`Unexpected models response for ${baseUrl}.`);
+		if (!isRecord$22(payload) || !Array.isArray(payload["data"])) throw new Error(`Unexpected models response for ${baseUrl}.`);
 		return payload["data"].map((item) => toModelInfo(item)).filter((item) => item !== void 0);
 	}
 	throw new Error(`Failed to list BLUN models for ${baseUrl}.`);
@@ -13519,11 +13521,11 @@ function applyManagedBlunCodeConfig(config, options) {
 		apiKey
 	};
 	const upstreamKeys = new Set(options.models.map((m) => managedModelKey(m.id)));
-	for (const [key, model] of Object.entries(existingModels)) if (RETIRED_BLUN_MODEL_KEYS.has(key) || isRecord$21(model) && model["provider"] === "managed:blun" && !upstreamKeys.has(key)) delete existingModels[key];
+	for (const [key, model] of Object.entries(existingModels)) if (RETIRED_BLUN_MODEL_KEYS.has(key) || isRecord$22(model) && model["provider"] === "managed:blun" && !upstreamKeys.has(key)) delete existingModels[key];
 	for (const model of options.models) {
 		const capabilities = capabilitiesForModel(model);
 		const key = managedModelKey(model.id);
-		const existing = isRecord$21(existingModels[key]) ? existingModels[key] : {};
+		const existing = isRecord$22(existingModels[key]) ? existingModels[key] : {};
 		const supportsAdaptiveThinking = capabilities?.includes("thinking") === true || capabilities?.includes("always_thinking") === true;
 		existingModels[key] = mergeRefreshedModelAlias(existing, {
 			provider: BLUN_PROVIDER_NAME$1,
@@ -13555,6 +13557,10 @@ function applyManagedBlunCodeConfig(config, options) {
 		blunFetch: {
 			baseUrl: `${auxiliaryBaseUrl}/fetch`,
 			...serviceCredential
+		},
+		blunMedia: {
+			baseUrl,
+			...serviceCredential
 		}
 	};
 	return {
@@ -13567,7 +13573,7 @@ function applyManagedBlunCodeLogoutConfig(config) {
 	let removedDefaultModel = false;
 	const existingModels = config.models ?? {};
 	for (const [key, model] of Object.entries(existingModels)) {
-		if (!isRecord$21(model) || model["provider"] !== "managed:blun") continue;
+		if (!isRecord$22(model) || model["provider"] !== "managed:blun") continue;
 		delete existingModels[key];
 		if (config.defaultModel === key) removedDefaultModel = true;
 	}
@@ -13577,6 +13583,7 @@ function applyManagedBlunCodeLogoutConfig(config) {
 	if (config.services !== void 0) {
 		delete config.services.blunSearch;
 		delete config.services.blunFetch;
+		delete config.services.blunMedia;
 		if (Object.keys(config.services).length === 0) config.services = void 0;
 	}
 }
@@ -13606,7 +13613,7 @@ function selectDefaultModel(config, models, options) {
 function canPreserveDefaultModel(existingModels, defaultModel, managedModels) {
 	if (managedModels.has(defaultModel)) return true;
 	const existing = existingModels[defaultModel];
-	return isRecord$21(existing) && existing["provider"] !== "managed:blun";
+	return isRecord$22(existing) && existing["provider"] !== "managed:blun";
 }
 function assertPositiveContextLength(model) {
 	if (!Number.isInteger(model.contextLength) || model.contextLength <= 0) throw new Error(`BLUN model "${model.id}" must include a positive context_length.`);
@@ -13684,13 +13691,13 @@ function blunManagedQuotaUrl(oauthHost) {
 	return `${(oauthHost ?? process.env["BLUN_OAUTH_HOST"] ?? "https://account.blun.ai").replace(/\/+$/, "")}${MANAGED_QUOTA_PATH}`;
 }
 function parseManagedQuotaPayload(payload) {
-	if (!isRecord$21(payload)) return void 0;
-	const plan = nonEmptyString$5(payload["plan"]);
+	if (!isRecord$22(payload)) return void 0;
+	const plan = nonEmptyString$6(payload["plan"]);
 	const paid = payload["bezahlt"];
 	const creditCents = payload["guthaben_cent"];
-	const billingKind = nonEmptyString$5(payload["art"]);
+	const billingKind = nonEmptyString$6(payload["art"]);
 	const globalUnlimited = payload["unlimited"];
-	if (plan === void 0 || typeof paid !== "boolean" || !Number.isSafeInteger(creditCents) || creditCents < 0 || billingKind === void 0 || globalUnlimited !== void 0 && typeof globalUnlimited !== "boolean" || !isRecord$21(payload["stand"])) return;
+	if (plan === void 0 || typeof paid !== "boolean" || !Number.isSafeInteger(creditCents) || creditCents < 0 || billingKind === void 0 || globalUnlimited !== void 0 && typeof globalUnlimited !== "boolean" || !isRecord$22(payload["stand"])) return;
 	if (!hasStrictQuotaStand(payload["stand"], globalUnlimited === true)) return void 0;
 	const limits = parseManagedUsagePayload(payload).limits;
 	if (limits.length !== REQUIRED_WINDOWS.length || REQUIRED_WINDOWS.some(([, id]) => limits.filter((row) => row.id === id).length !== 1)) return;
@@ -13752,7 +13759,7 @@ async function managedQuotaErrorCode(response) {
 	if (response.status !== 403) return "unavailable";
 	return isManagedQuotaErrorMessage(await readApiErrorMessage(response, "")) ? "unavailable" : "unauthenticated";
 }
-function nonEmptyString$5(value) {
+function nonEmptyString$6(value) {
 	if (typeof value !== "string") return void 0;
 	const normalized = value.trim();
 	return normalized.length === 0 ? void 0 : normalized;
@@ -13760,7 +13767,7 @@ function nonEmptyString$5(value) {
 function hasStrictQuotaStand(stand, globalUnlimited) {
 	return REQUIRED_WINDOWS.every(([sourceKey]) => {
 		const row = stand[sourceKey];
-		if (!isRecord$21(row)) return false;
+		if (!isRecord$22(row)) return false;
 		const used = row["verbraucht"];
 		const rowUnlimited = row["unlimited"];
 		if (rowUnlimited !== void 0 && typeof rowUnlimited !== "boolean") return false;
@@ -14312,15 +14319,15 @@ function readModel(config, alias) {
 	const model = config.models?.[alias];
 	return model === void 0 ? void 0 : model;
 }
-function nonEmptyString$4(value) {
+function nonEmptyString$5(value) {
 	const trimmed = value?.trim();
 	return trimmed === void 0 || trimmed.length === 0 ? void 0 : trimmed;
 }
 function providerApiKey$1(provider) {
-	return nonEmptyString$4(provider.apiKey) ?? nonEmptyString$4(provider.env?.["BLUN_API_KEY"]);
+	return nonEmptyString$5(provider.apiKey) ?? nonEmptyString$5(provider.env?.["BLUN_API_KEY"]);
 }
 function providerBaseUrl(provider) {
-	return nonEmptyString$4(provider.baseUrl) ?? nonEmptyString$4(provider.env?.["BLUN_BASE_URL"]);
+	return nonEmptyString$5(provider.baseUrl) ?? nonEmptyString$5(provider.env?.["BLUN_BASE_URL"]);
 }
 function collectModelIdsForAliases(config, aliasKeys) {
 	const ids = /* @__PURE__ */ new Set();
@@ -14367,6 +14374,14 @@ function providerModelsEqual(config, nextConfig, providerId, aliasKeys) {
 function providerConfigEqual(config, nextConfig, providerId) {
 	return JSON.stringify(config.providers[providerId] ?? null) === JSON.stringify(nextConfig.providers[providerId] ?? null);
 }
+function managedServicesEqual(config, nextConfig) {
+	const snapshot = (candidate) => JSON.stringify({
+		blunSearch: candidate.services?.blunSearch ?? null,
+		blunFetch: candidate.services?.blunFetch ?? null,
+		blunMedia: candidate.services?.blunMedia ?? null
+	});
+	return snapshot(config) === snapshot(nextConfig);
+}
 async function refreshProviderModels(host, options = {}) {
 	const changed = [];
 	const unchanged = [];
@@ -14386,7 +14401,7 @@ async function refreshProviderModels(host, options = {}) {
 			failed
 		};
 	}
-	const managedApiKey = nonEmptyString$4(managedProvider?.apiKey);
+	const managedApiKey = nonEmptyString$5(managedProvider?.apiKey);
 	const managedHasOAuth = managedProvider?.oauth !== void 0;
 	if (managedWanted && managedProvider !== void 0 && managedProvider.type === "blun" && (managedApiKey !== void 0 || managedHasOAuth)) try {
 		if (managedApiKey !== void 0 && managedHasOAuth) throw new Error("Managed BLUN OAuth and API key credentials are mutually exclusive.");
@@ -14414,7 +14429,7 @@ async function refreshProviderModels(host, options = {}) {
 			});
 			const refreshedAliasKeys = providerAliasKeys(config, BLUN_PROVIDER_NAME$1);
 			for (const alias of providerAliasKeys(next, BLUN_PROVIDER_NAME$1)) refreshedAliasKeys.add(alias);
-			if (providerModelsEqual(config, next, "managed:blun", refreshedAliasKeys) && config.defaultModel === next.defaultModel) unchanged.push(BLUN_PROVIDER_NAME$1);
+			if (providerModelsEqual(config, next, "managed:blun", refreshedAliasKeys) && config.defaultModel === next.defaultModel && managedServicesEqual(config, next)) unchanged.push(BLUN_PROVIDER_NAME$1);
 			else {
 				const { added, removed } = computeChanges(collectModelIdsForAliases(config, refreshedAliasKeys), collectModelIdsForAliases(next, refreshedAliasKeys));
 				await host.removeProvider(BLUN_PROVIDER_NAME$1);
@@ -14422,7 +14437,8 @@ async function refreshProviderModels(host, options = {}) {
 					providers: next.providers,
 					models: next.models,
 					defaultModel: next.defaultModel,
-					thinking: next.thinking
+					thinking: next.thinking,
+					services: next.services
 				});
 				changed.push({
 					providerId: BLUN_PROVIDER_NAME$1,
@@ -16051,6 +16067,8 @@ function servicesToToml(services, rawServices) {
 	else delete out["blun_search"];
 	if (services.blunFetch !== void 0) out["blun_fetch"] = serviceToToml(services.blunFetch);
 	else delete out["blun_fetch"];
+	if (services.blunMedia !== void 0) out["blun_media"] = serviceToToml(services.blunMedia);
+	else delete out["blun_media"];
 	if (services.visionReader !== void 0) out["vision_reader"] = visionReaderToToml(services.visionReader);
 	else delete out["vision_reader"];
 	return out;
@@ -20925,11 +20943,11 @@ function parseSkillText(options) {
 		throw error;
 	}
 	const frontmatter = parsed.data ?? {};
-	if (!isRecord$20(frontmatter)) throw new SkillParseError(`Frontmatter in ${options.skillMdPath} must be a mapping at the top level`);
+	if (!isRecord$21(frontmatter)) throw new SkillParseError(`Frontmatter in ${options.skillMdPath} must be a mapping at the top level`);
 	const metadata = normalizeMetadata(frontmatter);
 	if (!isSupportedSkillType(metadata.type)) throw new UnsupportedSkillTypeError(metadata.type ?? String(frontmatter["type"]));
-	const name = nonEmptyString$3(metadata.name);
-	const description = nonEmptyString$3(metadata.description);
+	const name = nonEmptyString$4(metadata.name);
+	const description = nonEmptyString$4(metadata.description);
 	if (isDirectorySkill && (name === void 0 || description === void 0)) throw new SkillParseError(`Missing required frontmatter field ${name === void 0 ? "\"name\"" : "\"description\""} in ${options.skillMdPath}`);
 	const skillPath = posix$2.resolve(options.skillMdPath);
 	const content = parsed.body.trim();
@@ -20989,11 +21007,11 @@ function normalizeMetadata(raw) {
 		const key = METADATA_ALIASES[rawKey] ?? rawKey;
 		out[key] = value;
 	}
-	const type = nonEmptyString$3(out["type"]);
+	const type = nonEmptyString$4(out["type"]);
 	if (type !== void 0) out["type"] = type;
-	const name = nonEmptyString$3(out["name"]);
+	const name = nonEmptyString$4(out["name"]);
 	if (name !== void 0) out["name"] = name;
-	const description = nonEmptyString$3(out["description"]);
+	const description = nonEmptyString$4(out["description"]);
 	if (description !== void 0) out["description"] = description;
 	return out;
 }
@@ -21035,10 +21053,10 @@ function tokenizeArgs(raw) {
 	if (hasContent) out.push(current);
 	return out;
 }
-function nonEmptyString$3(value) {
+function nonEmptyString$4(value) {
 	return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
 }
-function isRecord$20(value) {
+function isRecord$21(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var import_regexp_escape, FrontmatterError, SkillParseError, UnsupportedSkillTypeError, FENCE, METADATA_ALIASES;
@@ -21087,14 +21105,14 @@ var init_parser$1 = __esmMin((() => {
 function parseCommandText(input) {
 	const { text, commandPath, pluginId } = input;
 	const parsed = parseFrontmatter(text);
-	const frontmatter = isRecord$19(parsed.data) ? parsed.data : {};
+	const frontmatter = isRecord$20(parsed.data) ? parsed.data : {};
 	const baseName = input.fallbackName ?? path.basename(commandPath).replace(/\.md$/i, "");
-	const name = nonEmptyString$2(frontmatter["name"]) ?? baseName;
+	const name = nonEmptyString$3(frontmatter["name"]) ?? baseName;
 	const body = parsed.body.trim();
 	return {
 		pluginId,
 		name,
-		description: nonEmptyString$2(frontmatter["description"]) ?? descriptionFromBody(body),
+		description: nonEmptyString$3(frontmatter["description"]) ?? descriptionFromBody(body),
 		body,
 		path: path.resolve(commandPath)
 	};
@@ -21121,7 +21139,7 @@ function expandCommandArguments(body, args) {
 	if (!body.includes("$ARGUMENTS") && args.length > 0) return `${replaced}\n\nARGUMENTS: ${args}`;
 	return replaced;
 }
-function nonEmptyString$2(value) {
+function nonEmptyString$3(value) {
 	return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
 }
 function descriptionFromBody(body) {
@@ -21129,7 +21147,7 @@ function descriptionFromBody(body) {
 	if (firstLine === void 0) return "No description provided.";
 	return firstLine.length > 240 ? `${firstLine.slice(0, 239)}…` : firstLine;
 }
-function isRecord$19(value) {
+function isRecord$20(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var init_commands = __esmMin((() => {
@@ -28340,7 +28358,7 @@ var init_load = __esmMin((() => {
 //#region ../../packages/agent-core/src/profile/default/agent.yaml?raw
 var agent_default$1;
 var init_agent$3 = __esmMin((() => {
-	agent_default$1 = "name: agent\ndescription: Default BLUN King agent\n\nsystemPromptPath: ./system.md\npromptVars:\n  roleAdditional: ''\n\ntools:\n  - Read\n  - Write\n  - Edit\n  - Grep\n  - Glob\n  - Bash\n  - TaskList\n  - TaskOutput\n  - TaskStop\n  - CronCreate\n  - CronList\n  - CronDelete\n  - ReadMediaFile\n  - TodoList\n  - Skill\n  - WebSearch\n  - Agent\n  - AgentSwarm\n  - FetchURL\n  - AskUserQuestion\n  - MistakeRecord\n  - CodebaseSearch\n  - EnterPlanMode\n  - ExitPlanMode\n  - CreateGoal\n  - GetGoal\n  - SetGoalBudget\n  - UpdateGoal\n  - mcp__*\n\nsubagents:\n  coder:\n    description: General software engineering agent — the only subagent type with file-editing tools; use it for any delegated task that must modify code.\n  explore:\n    description: Fast codebase exploration with prompt-enforced read-only behavior.\n  plan:\n    description: Read-only implementation planning and architecture design.\n";
+	agent_default$1 = "name: agent\ndescription: Default BLUN King agent\n\nsystemPromptPath: ./system.md\npromptVars:\n  roleAdditional: ''\n\ntools:\n  - Read\n  - Write\n  - Edit\n  - Grep\n  - Glob\n  - Bash\n  - TaskList\n  - TaskOutput\n  - TaskStop\n  - CronCreate\n  - CronList\n  - CronDelete\n  - ReadMediaFile\n  - TodoList\n  - Skill\n  - WebSearch\n  - Agent\n  - AgentSwarm\n  - FetchURL\n  - GenerateImage\n  - GenerateVideo\n  - GenerateSpeech\n  - GetMedia\n  - AskUserQuestion\n  - MistakeRecord\n  - CodebaseSearch\n  - EnterPlanMode\n  - ExitPlanMode\n  - CreateGoal\n  - GetGoal\n  - SetGoalBudget\n  - UpdateGoal\n  - mcp__*\n\nsubagents:\n  coder:\n    description: General software engineering agent — the only subagent type with file-editing tools; use it for any delegated task that must modify code.\n  explore:\n    description: Fast codebase exploration with prompt-enforced read-only behavior.\n  plan:\n    description: Read-only implementation planning and architecture design.\n";
 }));
 //#endregion
 //#region ../../packages/agent-core/src/profile/default/coder.yaml?raw
@@ -28476,7 +28494,7 @@ function isAbortError$4(err) {
 	if (err instanceof Error) return err.name === "AbortError";
 	return false;
 }
-function errorMessage$8(err) {
+function errorMessage$12(err) {
 	if (err instanceof Error) return err.message;
 	return String(err);
 }
@@ -28700,7 +28718,7 @@ function normalizePersistedTask$1(task) {
 }
 function legacyPersistedTaskToInfo$1(task) {
 	const status = legacyStatusToCurrent$1(task);
-	const stopReason = optionalNonEmptyString$1(task.stop_reason);
+	const stopReason = optionalNonEmptyString$2(task.stop_reason);
 	const timeoutMs = typeof task.timeout_ms === "number" ? task.timeout_ms : void 0;
 	const base = {
 		taskId: task.task_id,
@@ -28715,8 +28733,8 @@ function legacyPersistedTaskToInfo$1(task) {
 	if (task.task_id.startsWith("agent-")) return {
 		...base,
 		kind: "agent",
-		agentId: optionalNonEmptyString$1(task.agent_id),
-		subagentType: optionalNonEmptyString$1(task.subagent_type)
+		agentId: optionalNonEmptyString$2(task.agent_id),
+		subagentType: optionalNonEmptyString$2(task.subagent_type)
 	};
 	return {
 		...base,
@@ -28732,15 +28750,15 @@ function legacyStatusToCurrent$1(task) {
 	return task.status;
 }
 function isReadablePersistedTask$1(obj) {
-	return isRecord$18(obj) && (typeof obj["taskId"] === "string" || typeof obj["task_id"] === "string");
+	return isRecord$19(obj) && (typeof obj["taskId"] === "string" || typeof obj["task_id"] === "string");
 }
 function isLegacyPersistedTask$1(task) {
 	return "task_id" in task;
 }
-function isRecord$18(value) {
+function isRecord$19(value) {
 	return typeof value === "object" && value !== null;
 }
-function optionalNonEmptyString$1(value) {
+function optionalNonEmptyString$2(value) {
 	if (value === void 0) return void 0;
 	const trimmed = value.trim();
 	return trimmed.length > 0 ? trimmed : void 0;
@@ -28914,7 +28932,7 @@ var init_agent_task = __esmMin((() => {
 				}
 				await sink.settle({
 					status: "failed",
-					stopReason: errorMessage$8(error)
+					stopReason: errorMessage$12(error)
 				});
 			} finally {
 				sink.signal.removeEventListener("abort", requestAbort);
@@ -29040,7 +29058,7 @@ var init_process_task = __esmMin((() => {
 				this.exitCode = this.proc.exitCode;
 				settlement = {
 					status: sink.signal.aborted ? "killed" : "failed",
-					stopReason: sink.signal.aborted ? void 0 : errorMessage$8(error)
+					stopReason: sink.signal.aborted ? void 0 : errorMessage$12(error)
 				};
 			} finally {
 				sink.signal.removeEventListener("abort", requestStop);
@@ -29114,7 +29132,7 @@ var init_question_task = __esmMin((() => {
 				}
 				await sink.settle({
 					status: "failed",
-					stopReason: errorMessage$8(error)
+					stopReason: errorMessage$12(error)
 				});
 			}
 		}
@@ -29676,7 +29694,7 @@ var init_background = __esmMin((() => {
 			})).catch((error) => {
 				settleWorker({
 					status: entry.abortController.signal.aborted ? "killed" : "failed",
-					stopReason: entry.abortController.signal.aborted ? void 0 : errorMessage$8(error)
+					stopReason: entry.abortController.signal.aborted ? void 0 : errorMessage$12(error)
 				});
 			});
 			const timeout = resettableTimeoutOutcome(entry.options.timeoutMs, { kind: "timeout" });
@@ -73836,10 +73854,10 @@ function escapeXml(value) {
 function locationKey(messageIndex, partIndex) {
 	return `${String(messageIndex)}:${String(partIndex)}`;
 }
-function isRecord$17(value) {
+function isRecord$18(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-function isNonNegativeInteger(value) {
+function isNonNegativeInteger$1(value) {
 	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
 }
 function abortReason(signal) {
@@ -74035,7 +74053,7 @@ var init_vision_reader = __esmMin((() => {
 					reason: "malformed"
 				};
 			}
-			if (!isRecord$17(payload) || payload["done"] !== true || typeof payload["response"] !== "string" || !isNonNegativeInteger(payload["prompt_eval_count"]) || !isNonNegativeInteger(payload["eval_count"])) return {
+			if (!isRecord$18(payload) || payload["done"] !== true || typeof payload["response"] !== "string" || !isNonNegativeInteger$1(payload["prompt_eval_count"]) || !isNonNegativeInteger$1(payload["eval_count"])) return {
 				ok: false,
 				reason: "malformed"
 			};
@@ -229699,7 +229717,7 @@ async function runHook(command, input, options) {
 			} : void 0
 		});
 	} catch (error) {
-		return allowResult({ stderr: errorMessage$7(error) });
+		return allowResult({ stderr: errorMessage$11(error) });
 	}
 	return new Promise((resolve) => {
 		let stdout = "";
@@ -229747,7 +229765,7 @@ async function runHook(command, input, options) {
 		child.on("error", (error) => {
 			settle(allowResult({
 				stdout,
-				stderr: stderr + errorMessage$7(error)
+				stderr: stderr + errorMessage$11(error)
 			}));
 		});
 		child.on("close", (code) => {
@@ -229867,10 +229885,10 @@ function killProcessTreeWindows(child, force) {
 		} catch {}
 	}
 }
-function isRecord$16(value) {
+function isRecord$17(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function errorMessage$7(error) {
+function errorMessage$11(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 var DEFAULT_TIMEOUT_SECONDS, KILL_GRACE_MS$2, OptionalStringSchema, HookSpecificOutputSchema, HookJsonOutputSchema;
@@ -229883,7 +229901,7 @@ var init_runner = __esmMin((() => {
 		if (typeof value === "string") return value;
 		if (typeof value === "number" || typeof value === "boolean" || typeof value === "bigint") return String(value);
 	}, string().optional());
-	HookSpecificOutputSchema = preprocess((value) => isRecord$16(value) ? value : void 0, looseObject({
+	HookSpecificOutputSchema = preprocess((value) => isRecord$17(value) ? value : void 0, looseObject({
 		message: OptionalStringSchema,
 		permissionDecision: unknown().optional(),
 		permissionDecisionReason: OptionalStringSchema
@@ -230793,7 +230811,7 @@ function parsePersonalMemoryRecall(output) {
 	} catch {
 		return { kind: "invalid" };
 	}
-	if (!isRecord$15(parsed) || !isRecord$15(parsed["personal_memory"])) return { kind: "invalid" };
+	if (!isRecord$16(parsed) || !isRecord$16(parsed["personal_memory"])) return { kind: "invalid" };
 	const memory = parsed["personal_memory"];
 	const savedRaw = memory["saved"];
 	const threadsRaw = memory["threads"];
@@ -230802,7 +230820,7 @@ function parsePersonalMemoryRecall(output) {
 	if (savedRaw.length > MAX_SAVED_MEMORIES || threadsRaw.length > MAX_THREADS || historyRaw.length > 0) return { kind: "invalid" };
 	const saved = [];
 	for (const value of savedRaw) {
-		if (!isRecord$15(value)) return { kind: "invalid" };
+		if (!isRecord$16(value)) return { kind: "invalid" };
 		const text = boundedTrimmedString(value["text"], MAX_MEMORY_TEXT_CHARS);
 		const confidence = value["confidence"];
 		if (text === void 0 || typeof confidence !== "string" || !CONFIDENCE_VALUES.has(confidence)) return { kind: "invalid" };
@@ -230813,7 +230831,7 @@ function parsePersonalMemoryRecall(output) {
 	}
 	const threads = [];
 	for (const value of threadsRaw) {
-		if (!isRecord$15(value)) return { kind: "invalid" };
+		if (!isRecord$16(value)) return { kind: "invalid" };
 		const title = boundedTrimmedString(value["title"], MAX_THREAD_TITLE_CHARS);
 		const summary = boundedTrimmedString(value["summary"], MAX_THREAD_SUMMARY_CHARS);
 		if (title === void 0 || summary === void 0) return { kind: "invalid" };
@@ -230867,7 +230885,7 @@ function boundedTrimmedString(value, maxChars) {
 	const trimmed = value.trim();
 	return trimmed.length > 0 ? trimmed : void 0;
 }
-function isRecord$15(value) {
+function isRecord$16(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var PERSONAL_MEMORY_HOST_RECALL_HANDLER$1, RECALL_LIMIT, RECALL_TIMEOUT_MS, MAX_QUERY_CHARS, MAX_WIRE_CHARS, MAX_SAVED_MEMORIES, MAX_THREADS, MAX_MEMORY_TEXT_CHARS, MAX_THREAD_TITLE_CHARS, MAX_THREAD_SUMMARY_CHARS, CONFIDENCE_VALUES, TELEGRAM_GROUP_MARKER_RE, TELEGRAM_MARKER_RE, TELEGRAM_CHANNEL_RE, TELEGRAM_SOURCE_RE, TELEGRAM_CHAT_ID_RE, TELEGRAM_SENDER_LINE_RE, TELEGRAM_ATTACHMENT_BLOCK_RE, TELEGRAM_ATTACHMENT_NOTICE_RE, TELEGRAM_IMAGE_ATTACHMENT_RE, GENERIC_IMAGE_QUERY, GENERIC_FILE_QUERY, GENERIC_EMPTY_QUERY, PERSONAL_MEMORY_RECALL_VARIANT, PersonalMemoryRecallInjector;
@@ -231657,7 +231675,7 @@ function createEvidenceApi(dependencies) {
 var init_mission_contract_evidence = __esmMin((() => {}));
 //#endregion
 //#region ../../packages/agent-core/src/agent/injection/mission-contract.js
-var missionContractApi, SCHEMA_VERSION, CONTRACT_STATUSES, REQUIREMENT_TYPES, normalize$2, createDraft, validate$1, publicContract, contractPrompt, redact, createEvidenceState, recordToolStart, recordToolResult, recordFile, recordUrl, recordScreenshot, recordSecurity, recordDecision, recordCheckpoint, evaluateCriteria, canonicalString$1, sha256$3, finalizeEvidence;
+var missionContractApi, SCHEMA_VERSION, CONTRACT_STATUSES, REQUIREMENT_TYPES, normalize$2, createDraft, validate$1, publicContract, contractPrompt, redact, createEvidenceState, recordToolStart, recordToolResult, recordFile, recordUrl, recordScreenshot, recordSecurity, recordDecision, recordCheckpoint, evaluateCriteria, canonicalString$1, sha256$4, finalizeEvidence;
 var init_mission_contract = __esmMin((() => {
 	init_mission_contract_evidence();
 	missionContractApi = (function(root, factory) {
@@ -231935,7 +231953,7 @@ var init_mission_contract = __esmMin((() => {
 			})
 		};
 	});
-	({SCHEMA_VERSION, CONTRACT_STATUSES, REQUIREMENT_TYPES, normalize: normalize$2, createDraft, validate: validate$1, publicContract, contractPrompt, redact, createEvidenceState, recordToolStart, recordToolResult, recordFile, recordUrl, recordScreenshot, recordSecurity, recordDecision, recordCheckpoint, evaluateCriteria, canonicalString: canonicalString$1, sha256: sha256$3, finalizeEvidence} = missionContractApi);
+	({SCHEMA_VERSION, CONTRACT_STATUSES, REQUIREMENT_TYPES, normalize: normalize$2, createDraft, validate: validate$1, publicContract, contractPrompt, redact, createEvidenceState, recordToolStart, recordToolResult, recordFile, recordUrl, recordScreenshot, recordSecurity, recordDecision, recordCheckpoint, evaluateCriteria, canonicalString: canonicalString$1, sha256: sha256$4, finalizeEvidence} = missionContractApi);
 }));
 //#endregion
 //#region ../../packages/agent-core/src/agent/injection/mission-contract-bridge.ts
@@ -242727,7 +242745,7 @@ function parseToolCallArguments$1(raw) {
 			success: true,
 			data: {},
 			parseFailed: true,
-			error: errorMessage$8(error)
+			error: errorMessage$12(error)
 		};
 	}
 }
@@ -242914,7 +242932,7 @@ async function prepareToolCall(step, call) {
 			toolCallId: call.toolCall.id,
 			error
 		});
-		return settleError(effectiveArgs, error instanceof PathSecurityError ? error.message : `Tool "${call.toolName}" failed to resolve execution: ${errorMessage$8(error)}`);
+		return settleError(effectiveArgs, error instanceof PathSecurityError ? error.message : `Tool "${call.toolName}" failed to resolve execution: ${errorMessage$12(error)}`);
 	}
 	const displayFields = toolCallDisplayFieldsFromExecution(execution);
 	const settleAborted = () => settleError(effectiveArgs, abortedToolOutput(call.toolName, step.signal), displayFields);
@@ -242977,7 +242995,7 @@ async function runPrepareToolExecutionHook(step, call) {
 		return {
 			kind: "hookFailed",
 			args,
-			output: `prepareToolExecution hook failed for "${call.toolName}": ${errorMessage$8(error)}`
+			output: `prepareToolExecution hook failed for "${call.toolName}": ${errorMessage$12(error)}`
 		};
 	}
 	const effectiveArgs = hookResult?.updatedArgs ?? args;
@@ -243019,7 +243037,7 @@ async function runAuthorizeToolExecutionHook(step, call, args, execution) {
 		};
 		return {
 			block: true,
-			reason: `authorizeToolExecution hook failed for "${call.toolName}": ${errorMessage$8(error)}`
+			reason: `authorizeToolExecution hook failed for "${call.toolName}": ${errorMessage$12(error)}`
 		};
 	}
 }
@@ -243046,7 +243064,7 @@ async function runRunnableToolCall(step, call, effectiveArgs, metadata, executio
 			toolCallId: toolCall.id,
 			error
 		});
-		return makeErrorToolResult(call, effectiveArgs, aborted ? abortedToolOutput(toolName, signal) : `Tool "${toolName}" failed: ${errorMessage$8(error)}`);
+		return makeErrorToolResult(call, effectiveArgs, aborted ? abortedToolOutput(toolName, signal) : `Tool "${toolName}" failed: ${errorMessage$12(error)}`);
 	}
 	return makeToolResult(call, effectiveArgs, toolResult);
 }
@@ -243079,7 +243097,7 @@ async function finalizePendingToolResult(step, pendingResult) {
 			toolCallId: pendingResult.toolCall.id,
 			error
 		});
-		const output = aborted ? `Tool "${pendingResult.toolName}" aborted during finalizeToolResult hook.` : `finalizeToolResult hook failed for "${pendingResult.toolName}": ${errorMessage$8(error)}`;
+		const output = aborted ? `Tool "${pendingResult.toolName}" aborted during finalizeToolResult hook.` : `finalizeToolResult hook failed for "${pendingResult.toolName}": ${errorMessage$12(error)}`;
 		return {
 			...pendingResult,
 			stopTurn: pendingResult.stopTurn,
@@ -243338,8 +243356,8 @@ async function executeLoopStep(deps) {
 			log?.error("strict resend still rejected by provider; request remains wire-invalid", {
 				turnStep: `${turnId}.${String(currentStep)}`,
 				model: llm.modelName,
-				originalError: errorMessage$8(error),
-				strictError: errorMessage$8(strictError)
+				originalError: errorMessage$12(error),
+				strictError: errorMessage$12(strictError)
 			});
 			throw strictError;
 		}
@@ -243591,7 +243609,7 @@ async function runTurn(input) {
 				usage
 			};
 		}
-		dispatchEvent(makeInterruptedEvent(isMaxStepsExceededError(error) ? "max_steps" : "error", steps, activeStep, errorMessage$8(error)));
+		dispatchEvent(makeInterruptedEvent(isMaxStepsExceededError(error) ? "max_steps" : "error", steps, activeStep, errorMessage$12(error)));
 		throw error;
 	}
 	return {
@@ -247004,7 +247022,7 @@ var init_classic = __esmMin((() => {
 //#region ../../node_modules/.pnpm/zod@4.3.6/node_modules/zod/v4/index.js
 var init_v4 = __esmMin((() => {
 	init_classic();
-})), LATEST_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, isInitializedNotification, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, McpError, UrlElicitationRequiredError;
+})), LATEST_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, isInitializedNotification, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema$1, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, McpError, UrlElicitationRequiredError;
 var init_types$4 = __esmMin((() => {
 	init_v4();
 	LATEST_PROTOCOL_VERSION = "2025-11-25";
@@ -247646,7 +247664,7 @@ uri: string() });
 		*/
 		required: optional(boolean$1())
 	});
-	PromptSchema = object({
+	PromptSchema$1 = object({
 		...BaseMetadataSchema.shape,
 		...IconsSchema.shape,
 		/**
@@ -247664,7 +247682,7 @@ uri: string() });
 		_meta: optional(looseObject({}))
 	});
 	ListPromptsRequestSchema = PaginatedRequestSchema.extend({ method: literal("prompts/list") });
-	ListPromptsResultSchema = PaginatedResultSchema.extend({ prompts: array(PromptSchema) });
+	ListPromptsResultSchema = PaginatedResultSchema.extend({ prompts: array(PromptSchema$1) });
 	GetPromptRequestParamsSchema = BaseRequestParamsSchema.extend({
 		/**
 		* The name of the prompt or prompt template.
@@ -251881,7 +251899,7 @@ var init_ask_user = __esmMin((() => {
 			} catch (error) {
 				return {
 					isError: true,
-					output: errorMessage$8(error)
+					output: errorMessage$12(error)
 				};
 			}
 			const status = backgroundManager.getTask(taskId)?.status ?? "running";
@@ -261057,6 +261075,163 @@ var init_mistake_record = __esmMin((() => {
 	};
 }));
 //#endregion
+//#region ../../packages/agent-core/src/tools/builtin/media/blun-media.ts
+function contentPartFor(mimeType, url) {
+	if (mimeType.startsWith("image/")) return {
+		type: "image_url",
+		imageUrl: { url }
+	};
+	if (mimeType.startsWith("audio/")) return {
+		type: "audio_url",
+		audioUrl: { url }
+	};
+	if (mimeType.startsWith("video/")) return {
+		type: "video_url",
+		videoUrl: { url }
+	};
+}
+function errorMessage$10(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+var PromptSchema, MediaIdSchema, GenerateImageInputSchema, GenerateVideoInputSchema, GenerateSpeechInputSchema, GetMediaInputSchema, REQUEST_NOTE, MediaGenerationTool, GenerateImageTool, GenerateVideoTool, GenerateSpeechTool, GetMediaTool;
+var init_blun_media$1 = __esmMin((() => {
+	init_zod$1();
+	init_tool_access();
+	init_input_schema();
+	init_rule_match();
+	PromptSchema = string().trim().min(1).max(2e4);
+	MediaIdSchema = string().trim().min(1).max(200).regex(/^[A-Za-z0-9_-]+$/);
+	GenerateImageInputSchema = object({ prompt: PromptSchema.describe("A complete visual description of the image to generate.") });
+	GenerateVideoInputSchema = object({ prompt: PromptSchema.describe("A complete visual description of the video to generate.") });
+	GenerateSpeechInputSchema = object({ input: PromptSchema.describe("The exact text to synthesize as speech.") });
+	GetMediaInputSchema = object({ id: MediaIdSchema.describe("The media job id returned by a generation tool.") });
+	REQUEST_NOTE = "The request is asynchronous. Use GetMedia with the returned id to check progress and retrieve the result.";
+	MediaGenerationTool = class {
+		provider;
+		constructor(provider) {
+			this.provider = provider;
+		}
+		resolveExecution(args) {
+			const subject = this.subject(args);
+			const preview = subject.length > 60 ? `${subject.slice(0, 60)}...` : subject;
+			return {
+				accesses: ToolAccesses.all(),
+				description: `${this.name}: ${preview}`,
+				approvalRule: literalRulePattern(this.name, subject),
+				matchesRule: (ruleArgs) => matchesGlobRuleSubject(ruleArgs, subject),
+				execute: (ctx) => this.execution(args, ctx)
+			};
+		}
+		async execution(args, ctx) {
+			try {
+				const job = await this.submit(args, {
+					signal: ctx.signal,
+					toolCallId: ctx.toolCallId
+				});
+				return {
+					output: `Media job ${job.id} accepted with status ${job.status}. ${REQUEST_NOTE}`,
+					isError: false
+				};
+			} catch (error) {
+				return {
+					isError: true,
+					output: `Media request failed: ${errorMessage$10(error)}`
+				};
+			}
+		}
+	};
+	GenerateImageTool = class extends MediaGenerationTool {
+		name = "GenerateImage";
+		description = "Generate a new image from text with BLUN IMAGINE. Use this when the user asks to create an image, illustration, logo, or visual. This starts a billed asynchronous media job.";
+		parameters = toInputJsonSchema(GenerateImageInputSchema);
+		subject(args) {
+			return args.prompt;
+		}
+		submit(args, options) {
+			return this.provider.generateImage(args.prompt, options);
+		}
+	};
+	GenerateVideoTool = class extends MediaGenerationTool {
+		name = "GenerateVideo";
+		description = "Generate a new video from text with BLUN media models. Use this for motion or text-to-video requests, not for understanding an existing video. This starts a billed asynchronous media job.";
+		parameters = toInputJsonSchema(GenerateVideoInputSchema);
+		subject(args) {
+			return args.prompt;
+		}
+		submit(args, options) {
+			return this.provider.generateVideo(args.prompt, options);
+		}
+	};
+	GenerateSpeechTool = class extends MediaGenerationTool {
+		name = "GenerateSpeech";
+		description = "Synthesize spoken audio from exact text with BLUN VOICE. Use this for voice or speech generation. This starts a billed asynchronous media job.";
+		parameters = toInputJsonSchema(GenerateSpeechInputSchema);
+		subject(args) {
+			return args.input;
+		}
+		submit(args, options) {
+			return this.provider.generateSpeech(args.input, options);
+		}
+	};
+	GetMediaTool = class {
+		provider;
+		name = "GetMedia";
+		description = "Check a BLUN media job. If it is complete, return the generated image, audio, or video. Use only ids returned by GenerateImage, GenerateVideo, or GenerateSpeech.";
+		parameters = toInputJsonSchema(GetMediaInputSchema);
+		constructor(provider) {
+			this.provider = provider;
+		}
+		resolveExecution(args) {
+			return {
+				accesses: ToolAccesses.all(),
+				description: `GetMedia: ${args.id}`,
+				approvalRule: literalRulePattern(this.name, args.id),
+				matchesRule: (ruleArgs) => matchesGlobRuleSubject(ruleArgs, args.id),
+				execute: (ctx) => this.execution(args, ctx)
+			};
+		}
+		async execution(args, ctx) {
+			try {
+				const result = await this.provider.getMedia(args.id, {
+					signal: ctx.signal,
+					toolCallId: ctx.toolCallId
+				});
+				if (result.kind === "status") {
+					const terminalError = [
+						"failed",
+						"expired",
+						"blocked"
+					].includes(result.status.trim().toLowerCase());
+					const source = result.sourceId === void 0 ? "" : ` Source job ${result.sourceId}${result.sourceStatus === void 0 ? "" : ` status: ${result.sourceStatus}`}.`;
+					const retryable = result.retryable === void 0 ? "" : ` Retryable: ${result.retryable ? "yes" : "no"}.`;
+					return {
+						output: `Media job ${result.id} status: ${result.status}.${source}${retryable}`,
+						isError: terminalError
+					};
+				}
+				const url = `data:${result.mimeType};base64,${Buffer.from(result.data).toString("base64")}`;
+				const mediaPart = contentPartFor(result.mimeType, url);
+				if (mediaPart === void 0) return {
+					isError: true,
+					output: `Media job ${result.id} returned unsupported content type ${result.mimeType}.`
+				};
+				return {
+					output: [{
+						type: "text",
+						text: `Media job ${result.id} is complete.`
+					}, mediaPart],
+					isError: false
+				};
+			} catch (error) {
+				return {
+					isError: true,
+					output: `Media lookup failed: ${errorMessage$10(error)}`
+				};
+			}
+		}
+	};
+}));
+//#endregion
 //#region ../../packages/agent-core/src/tools/builtin/index.ts
 var init_builtin = __esmMin((() => {
 	init_task_list();
@@ -261087,6 +261262,7 @@ var init_builtin = __esmMin((() => {
 	init_web_search();
 	init_codebase_search();
 	init_mistake_record();
+	init_blun_media$1();
 }));
 //#endregion
 //#region ../../packages/agent-core/src/agent/tool/types.ts
@@ -261511,6 +261687,10 @@ var init_tool$1 = __esmMin((() => {
 				this.agent.subagentHost && new AgentSwarmTool(this.agent.subagentHost, this.agent.swarmMode),
 				toolServices?.webSearcher && new WebSearchTool(toolServices.webSearcher),
 				toolServices?.urlFetcher && new FetchURLTool(toolServices.urlFetcher),
+				toolServices?.media && new GenerateImageTool(toolServices.media),
+				toolServices?.media && new GenerateVideoTool(toolServices.media),
+				toolServices?.media && new GenerateSpeechTool(toolServices.media),
+				toolServices?.media && new GetMediaTool(toolServices.media),
 				new MistakeRecordTool(this.agent),
 				new CodebaseSearchTool(cwd)
 			].filter((tool) => !!tool).map((tool) => [tool.name, tool]));
@@ -294283,7 +294463,7 @@ async function parseManifest(pluginRoot) {
 			}]
 		};
 	}
-	if (!isObject$3(raw)) return {
+	if (!isObject$4(raw)) return {
 		manifestKind,
 		manifestPath,
 		shadowedManifestPath,
@@ -294430,7 +294610,7 @@ async function resolvePluginPathField(input) {
 }
 function readSessionStart(raw, diagnostics) {
 	if (raw === void 0) return void 0;
-	if (!isObject$3(raw)) {
+	if (!isObject$4(raw)) {
 		diagnostics.push({
 			severity: "warn",
 			message: "\"sessionStart\" must be an object"
@@ -294449,7 +294629,7 @@ function readSessionStart(raw, diagnostics) {
 }
 async function readMcpServers(pluginRoot, raw, diagnostics) {
 	if (raw === void 0) return void 0;
-	if (!isObject$3(raw)) {
+	if (!isObject$4(raw)) {
 		diagnostics.push({
 			severity: "warn",
 			message: "\"mcpServers\" must be an object"
@@ -294600,7 +294780,7 @@ async function normalizePluginMcpServer(input) {
 }
 function readAuthor(raw) {
 	if (typeof raw === "string") return { name: raw };
-	if (!isObject$3(raw)) return void 0;
+	if (!isObject$4(raw)) return void 0;
 	const name = stringField$3(raw, "name");
 	const email = stringField$3(raw, "email");
 	if (name === void 0 && email === void 0) return void 0;
@@ -294610,7 +294790,7 @@ function readAuthor(raw) {
 	};
 }
 function readInterface(raw) {
-	if (!isObject$3(raw)) return void 0;
+	if (!isObject$4(raw)) return void 0;
 	const out = {
 		displayName: stringField$3(raw, "displayName"),
 		shortDescription: stringField$3(raw, "shortDescription"),
@@ -294631,7 +294811,7 @@ function stringArrayField$1(raw, key) {
 	if (!Array.isArray(value) || !value.every((entry) => typeof entry === "string")) return;
 	return value;
 }
-function isObject$3(value) {
+function isObject$4(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isWithin$1(child, parent) {
@@ -302337,7 +302517,7 @@ var init_sort = __esmMin((() => {
 }));
 //#endregion
 //#region ../../node_modules/.pnpm/css-select@5.2.2/node_modules/css-select/lib/esm/attributes.js
-function escapeRegex$1(value) {
+function escapeRegex$2(value) {
 	return value.replace(reChars, "\\$&");
 }
 function shouldIgnoreCase(selector, options) {
@@ -302430,7 +302610,7 @@ var init_attributes = __esmMin((() => {
 			const { adapter } = options;
 			const { name, value } = data;
 			if (/\s/.test(value)) return import_boolbase$5.default.falseFunc;
-			const regex = new RegExp(`(?:^|\\s)${escapeRegex$1(value)}(?:$|\\s)`, shouldIgnoreCase(data, options) ? "i" : "");
+			const regex = new RegExp(`(?:^|\\s)${escapeRegex$2(value)}(?:$|\\s)`, shouldIgnoreCase(data, options) ? "i" : "");
 			return function element(elem) {
 				const attr = adapter.getAttributeValue(elem, name);
 				return attr != null && attr.length >= value.length && regex.test(attr) && next(elem);
@@ -302480,7 +302660,7 @@ var init_attributes = __esmMin((() => {
 			const { name, value } = data;
 			if (value === "") return import_boolbase$5.default.falseFunc;
 			if (shouldIgnoreCase(data, options)) {
-				const regex = new RegExp(escapeRegex$1(value), "i");
+				const regex = new RegExp(escapeRegex$2(value), "i");
 				return function anyIC(elem) {
 					const attr = adapter.getAttributeValue(elem, name);
 					return attr != null && attr.length >= value.length && regex.test(attr) && next(elem);
@@ -308946,6 +309126,137 @@ var init_blun_web_search = __esmMin((() => {
 	};
 }));
 //#endregion
+//#region ../../packages/agent-core/src/tools/providers/blun-media.ts
+async function parseBlockedStatus(response, id) {
+	let payload = {};
+	try {
+		payload = await response.json();
+	} catch {}
+	const sourceId = payload["source_id"];
+	const sourceStatus = payload["source_status"];
+	const retryable = payload["retryable"];
+	return {
+		kind: "status",
+		id,
+		status: "blocked",
+		...typeof sourceId === "string" && sourceId.length > 0 ? { sourceId } : {},
+		...typeof sourceStatus === "string" && sourceStatus.length > 0 ? { sourceStatus } : {},
+		...typeof retryable === "boolean" ? { retryable } : {}
+	};
+}
+function parseJob(payload) {
+	const id = payload["id"];
+	const status = payload["status"];
+	if (typeof id !== "string" || id.length === 0 || typeof status !== "string" || status.length === 0) throw new Error("Media request returned an invalid job response.");
+	return {
+		id,
+		status
+	};
+}
+function parseStatus(payload, expectedId) {
+	const id = typeof payload["id"] === "string" && payload["id"].length > 0 ? payload["id"] : expectedId;
+	const status = payload["status"];
+	if (typeof status !== "string" || status.length === 0) throw new Error("Media lookup returned an invalid status response.");
+	return {
+		kind: "status",
+		id,
+		status
+	};
+}
+async function assertSuccess(response, operation) {
+	if (response.ok) return;
+	let detail = "";
+	try {
+		detail = (await response.text()).trim();
+	} catch {}
+	throw new Error(`${operation} failed: HTTP ${String(response.status)}${detail ? `: ${detail}` : ""}`);
+}
+var BlunMediaService;
+var init_blun_media = __esmMin((() => {
+	BlunMediaService = class {
+		tokenProvider;
+		apiKey;
+		baseUrl;
+		defaultHeaders;
+		customHeaders;
+		fetchImpl;
+		constructor(options) {
+			this.tokenProvider = options.tokenProvider;
+			this.apiKey = options.apiKey;
+			this.baseUrl = options.baseUrl.replace(/\/+$/, "");
+			this.defaultHeaders = options.defaultHeaders ?? {};
+			this.customHeaders = options.customHeaders ?? {};
+			this.fetchImpl = options.fetchImpl ?? globalThis.fetch.bind(globalThis);
+		}
+		generateImage(prompt, options) {
+			return this.submit("/images/generations", { prompt }, options);
+		}
+		generateVideo(prompt, options) {
+			return this.submit("/videos/generations", { prompt }, options);
+		}
+		generateSpeech(input, options) {
+			return this.submit("/audio/speech", { input }, options);
+		}
+		async getMedia(id, options) {
+			const response = await this.request(`/media/${encodeURIComponent(id)}`, { method: "GET" }, options);
+			if (response.status === 409) return parseBlockedStatus(response, id);
+			if (response.status === 410) return {
+				kind: "status",
+				id,
+				status: "expired"
+			};
+			await assertSuccess(response, "Media lookup");
+			const mimeType = response.headers.get("content-type")?.split(";", 1)[0]?.trim().toLowerCase() ?? "";
+			if (mimeType === "application/json" || mimeType.endsWith("+json")) return parseStatus(await response.json(), id);
+			if (!mimeType.startsWith("image/") && !mimeType.startsWith("audio/") && !mimeType.startsWith("video/")) throw new Error(`Media lookup returned unsupported content type ${mimeType || "(missing)"}`);
+			return {
+				kind: "file",
+				id,
+				mimeType,
+				data: new Uint8Array(await response.arrayBuffer())
+			};
+		}
+		async submit(path, body, options) {
+			const response = await this.request(path, {
+				method: "POST",
+				body: JSON.stringify(body)
+			}, options);
+			await assertSuccess(response, "Media request");
+			return parseJob(await response.json());
+		}
+		async request(path, init, options) {
+			const firstToken = await this.resolveToken(false);
+			const first = await this.fetchWithToken(path, init, options, firstToken);
+			if (first.status !== 401 || this.tokenProvider === void 0) return first;
+			const refreshed = await this.resolveToken(true);
+			return this.fetchWithToken(path, init, options, refreshed);
+		}
+		fetchWithToken(path, init, options, token) {
+			return this.fetchImpl(`${this.baseUrl}${path}`, {
+				...init,
+				signal: options?.signal,
+				headers: {
+					...this.defaultHeaders,
+					Authorization: `Bearer ${token}`,
+					...init.body === void 0 ? {} : { "Content-Type": "application/json" },
+					...options?.toolCallId === void 0 ? {} : { "X-Msh-Tool-Call-Id": options.toolCallId },
+					...this.customHeaders
+				}
+			});
+		}
+		async resolveToken(force) {
+			if (this.tokenProvider !== void 0) try {
+				return force ? await this.tokenProvider.getAccessToken({ force: true }) : await this.tokenProvider.getAccessToken();
+			} catch (error) {
+				if (this.apiKey !== void 0 && this.apiKey.length > 0) return this.apiKey;
+				throw error;
+			}
+			if (this.apiKey !== void 0 && this.apiKey.length > 0) return this.apiKey;
+			throw new Error("BLUN media service is not configured: missing API key or OAuth token provider.");
+		}
+	};
+}));
+//#endregion
 //#region ../../packages/agent-core/src/session/export/manifest.ts
 function buildExportManifest(args) {
 	return {
@@ -310046,12 +310357,12 @@ function assertBlunProviderType(provider) {
 	if (provider.type !== "blun") throw new BlunError(ErrorCodes.MODEL_CONFIG_INVALID, "Only the BLUN provider type is supported.");
 }
 function providerValue(configured, env, envKey) {
-	return nonEmptyString$1(configured) ?? envValue(env, envKey);
+	return nonEmptyString$2(configured) ?? envValue(env, envKey);
 }
 function envValue(env, key) {
-	return nonEmptyString$1(env?.[key]);
+	return nonEmptyString$2(env?.[key]);
 }
-function nonEmptyString$1(value) {
+function nonEmptyString$2(value) {
 	const trimmed = value?.trim();
 	return trimmed === void 0 || trimmed.length === 0 ? void 0 : trimmed;
 }
@@ -310682,10 +310993,10 @@ async function appendForkedMarkers(state) {
 		time: Date.now()
 	};
 	const agents = state["agents"];
-	if (!isRecord$14(agents)) return;
+	if (!isRecord$15(agents)) return;
 	const paths = /* @__PURE__ */ new Set();
 	for (const agentMeta of Object.values(agents)) {
-		if (!isRecord$14(agentMeta)) continue;
+		if (!isRecord$15(agentMeta)) continue;
 		const homedir = agentMeta["homedir"];
 		if (typeof homedir !== "string") continue;
 		paths.add(join$4(homedir, "wire.jsonl"));
@@ -310697,7 +311008,7 @@ async function appendForkedMarkers(state) {
 	}));
 }
 function customMetadataForFork(value) {
-	if (!isRecord$14(value)) return {};
+	if (!isRecord$15(value)) return {};
 	const custom = {};
 	for (const [key, entry] of Object.entries(value)) {
 		if (key === "goal" || key === "managedQuotaWarningThreshold") continue;
@@ -310752,10 +311063,10 @@ function normalizeForkTitle(title, fallback) {
 	return typeof fallback === "string" && fallback.trim().length > 0 ? fallback : "New Session";
 }
 function rewriteAgentHomedirs(value, sourceDir, targetDir) {
-	if (!isRecord$14(value)) return {};
+	if (!isRecord$15(value)) return {};
 	const agents = {};
 	for (const [agentId, agentMeta] of Object.entries(value)) {
-		if (!isRecord$14(agentMeta)) {
+		if (!isRecord$15(agentMeta)) {
 			agents[agentId] = agentMeta;
 			continue;
 		}
@@ -310773,7 +311084,7 @@ function remapSessionPath(value, sourceDir, targetDir) {
 	if (rel.startsWith("..") || isAbsolute$2(rel)) return value;
 	return join$4(targetDir, rel);
 }
-function isRecord$14(value) {
+function isRecord$15(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function statIfExists(path) {
@@ -311021,7 +311332,7 @@ var init_session_store$1 = __esmMin((() => {
 			} catch (error) {
 				throw new BlunError(ErrorCodes.SESSION_STATE_NOT_FOUND, `Session "${input.sourceId}" state.json was not found`, { cause: error });
 			}
-			if (!isRecord$14(parsed)) throw new BlunError(ErrorCodes.SESSION_STATE_INVALID, `Session "${input.sourceId}" state.json is invalid`);
+			if (!isRecord$15(parsed)) throw new BlunError(ErrorCodes.SESSION_STATE_INVALID, `Session "${input.sourceId}" state.json is invalid`);
 			const title = normalizeForkTitle(input.title, parsed["title"]);
 			const now = (/* @__PURE__ */ new Date()).toISOString();
 			const next = {
@@ -312204,6 +312515,7 @@ async function createRuntimeConfig(input) {
 	const localFetcher = new LocalFetchURLProvider();
 	const searchService = input.config.services?.blunSearch;
 	const fetchService = input.config.services?.blunFetch;
+	const mediaService = input.config.services?.blunMedia ?? managedBlunMediaService(input.config);
 	return {
 		urlFetcher: fetchService?.baseUrl === void 0 ? localFetcher : new BlunFetchURLProvider({
 			baseUrl: fetchService.baseUrl,
@@ -312215,17 +312527,33 @@ async function createRuntimeConfig(input) {
 			baseUrl: searchService.baseUrl,
 			defaultHeaders: input.blunRequestHeaders,
 			...serviceCredentials(searchService, input.resolveOAuthTokenProvider)
+		}),
+		media: mediaService?.baseUrl === void 0 ? void 0 : new BlunMediaService({
+			baseUrl: mediaService.baseUrl,
+			defaultHeaders: input.blunRequestHeaders,
+			...serviceCredentials(mediaService, input.resolveOAuthTokenProvider)
 		})
 	};
 }
+function managedBlunMediaService(config) {
+	const provider = config.providers[BLUN_PROVIDER_NAME];
+	if (provider?.type !== "blun") return void 0;
+	const baseUrl = nonEmptyString$1(provider.baseUrl);
+	if (baseUrl === void 0) return void 0;
+	return {
+		baseUrl,
+		apiKey: provider.apiKey,
+		oauth: provider.oauth
+	};
+}
 function serviceCredentials(service, resolveOAuthTokenProvider) {
 	return {
-		apiKey: nonEmptyString(service.apiKey),
+		apiKey: nonEmptyString$1(service.apiKey),
 		tokenProvider: service.oauth !== void 0 ? resolveOAuthTokenProvider?.(BLUN_PROVIDER_NAME, service.oauth) : void 0,
 		customHeaders: service.customHeaders
 	};
 }
-function nonEmptyString(value) {
+function nonEmptyString$1(value) {
 	const trimmed = value?.trim();
 	return trimmed === void 0 || trimmed.length === 0 ? void 0 : trimmed;
 }
@@ -312309,6 +312637,7 @@ var init_core_impl = __esmMin((() => {
 	init_local_fetch_url();
 	init_blun_fetch_url();
 	init_blun_web_search();
+	init_blun_media();
 	init_version();
 	init_thinking();
 	init_agent();
@@ -324034,7 +324363,7 @@ var SDKRpcClientBase = class {
 				type: "error",
 				sessionId: request.sessionId,
 				agentId: request.agentId,
-				...makeErrorPayload(ErrorCodes.SESSION_APPROVAL_HANDLER_ERROR, errorMessage$6(error))
+				...makeErrorPayload(ErrorCodes.SESSION_APPROVAL_HANDLER_ERROR, errorMessage$9(error))
 			});
 			return {
 				decision: "cancelled",
@@ -324052,7 +324381,7 @@ var SDKRpcClientBase = class {
 				type: "error",
 				sessionId: request.sessionId,
 				agentId: request.agentId,
-				...makeErrorPayload(ErrorCodes.SESSION_QUESTION_HANDLER_ERROR, errorMessage$6(error))
+				...makeErrorPayload(ErrorCodes.SESSION_QUESTION_HANDLER_ERROR, errorMessage$9(error))
 			});
 			return null;
 		}
@@ -324072,7 +324401,7 @@ var SDKRpcClientBase = class {
 			return await handler(request);
 		} catch (error) {
 			return {
-				output: `Tool handler error for "${request.toolName ?? "(unknown)"}": ${errorMessage$6(error)}`,
+				output: `Tool handler error for "${request.toolName ?? "(unknown)"}": ${errorMessage$9(error)}`,
 				isError: true
 			};
 		}
@@ -324096,7 +324425,7 @@ var ClientAPI = class {
 		return this.client.toolCall(request);
 	}
 };
-function errorMessage$6(error) {
+function errorMessage$9(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
@@ -333628,7 +333957,7 @@ var AcpSession = class {
 					break;
 			}
 		} catch (error) {
-			await this.emitLocalCommandMessage(`/${name} failed: ${errorMessage$5(error)}`);
+			await this.emitLocalCommandMessage(`/${name} failed: ${errorMessage$8(error)}`);
 		}
 		return { stopReason: "end_turn" };
 	}
@@ -334019,7 +334348,7 @@ var AcpSession = class {
 		}
 	}
 };
-function errorMessage$5(error) {
+function errorMessage$8(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 function formatHelpReport(commands) {
@@ -336508,8 +336837,8 @@ function createAccountMemoryClient(auth, options = {}) {
 }
 function readAccountMemoryConsentStatus(payload) {
 	const settings = unwrapPayload(payload)?.["settings"];
-	const dataControls = isRecord$13(settings) ? settings["data_controls"] : void 0;
-	if (!isRecord$13(dataControls)) throw new Error("Account memory returned an invalid response.");
+	const dataControls = isRecord$14(settings) ? settings["data_controls"] : void 0;
+	if (!isRecord$14(dataControls)) throw new Error("Account memory returned an invalid response.");
 	if (dataControls["memory_consent_asked"] !== true) return "never_asked";
 	if (dataControls["allow_memory"] === true) return "enabled";
 	if (dataControls["allow_memory"] === false) return "disabled";
@@ -336632,8 +336961,8 @@ function memoryContextSummary(facts, included) {
 	})}`;
 }
 function unwrapPayload(value) {
-	if (!isRecord$13(value)) return void 0;
-	return isRecord$13(value["data"]) ? value["data"] : value;
+	if (!isRecord$14(value)) return void 0;
+	return isRecord$14(value["data"]) ? value["data"] : value;
 }
 function readFacts(root) {
 	let rawFacts = [];
@@ -336641,7 +336970,7 @@ function readFacts(root) {
 	else {
 		const factsJson = parseFactsJson(root["facts_json"]);
 		if (Array.isArray(factsJson)) rawFacts = factsJson;
-		else if (isRecord$13(factsJson) && Array.isArray(factsJson["facts"])) rawFacts = factsJson["facts"];
+		else if (isRecord$14(factsJson) && Array.isArray(factsJson["facts"])) rawFacts = factsJson["facts"];
 	}
 	const facts = [];
 	const seen = /* @__PURE__ */ new Set();
@@ -336670,7 +336999,7 @@ function parseFactsJson(value) {
 	}
 }
 function normalizeFact(value) {
-	const raw = typeof value === "string" ? value : isRecord$13(value) && typeof value["text"] === "string" ? value["text"] : void 0;
+	const raw = typeof value === "string" ? value : isRecord$14(value) && typeof value["text"] === "string" ? value["text"] : void 0;
 	if (raw === void 0) return void 0;
 	const normalized = raw.replaceAll(/\s+/gu, " ").trim();
 	if (normalized.length === 0) return void 0;
@@ -336679,7 +337008,7 @@ function normalizeFact(value) {
 		truncated: normalized.length > ACCOUNT_MEMORY_MAX_FACT_CHARS
 	};
 }
-function isRecord$13(value) {
+function isRecord$14(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 //#endregion
@@ -337848,7 +338177,7 @@ async function updateTuiAppearance(appearance, filePath = getTuiConfigPath()) {
 				throw new TuiConfigParseError(DEFAULT_TUI_CONFIG);
 			}
 		} catch (error) {
-			if (!isNotFound$1(error)) throw error;
+			if (!isNotFound$3(error)) throw error;
 		}
 		const next = TuiConfigSchema.parse({
 			...current,
@@ -337946,7 +338275,7 @@ async function writeTuiConfigAtomic(config, filePath) {
 		throw error;
 	}
 }
-function isNotFound$1(error) {
+function isNotFound$3(error) {
 	return typeof error === "object" && error !== null && error.code === "ENOENT";
 }
 function renderAppearanceConfig(appearance) {
@@ -337966,7 +338295,7 @@ function escapeTomlBasicString(value) {
 //#region src/cli/sub/doctor.ts
 init_zod$1();
 async function handleDoctor(deps, options) {
-	const resolved = resolveDeps(deps);
+	const resolved = resolveDeps$1(deps);
 	const specs = await buildCheckSpecs(resolved, options, resolved.cwd());
 	const results = await Promise.all(specs.map((spec) => checkTomlFile(resolved, spec)));
 	const issueCount = results.filter((result) => result.status === "ERROR").length;
@@ -337993,11 +338322,11 @@ function registerDoctorCommand(parent, deps) {
 	});
 }
 async function runDoctorCommand(deps, options) {
-	const resolved = resolveDeps(deps);
+	const resolved = resolveDeps$1(deps);
 	const code = await handleDoctor(resolved, options);
 	if (code !== 0) resolved.exit(code);
 }
-function resolveDeps(deps) {
+function resolveDeps$1(deps) {
 	let configRpc = deps?.configRpc;
 	const getConfigRpc = () => {
 		configRpc ??= createBlunConfigRpc();
@@ -338120,7 +338449,7 @@ function formatErrorMessage$4(error, filePath) {
 function findValidationIssues(error) {
 	if (!(error instanceof Error)) return void 0;
 	const details = "details" in error ? error.details : void 0;
-	if (!isRecord$12(details)) return void 0;
+	if (!isRecord$13(details)) return void 0;
 	const validationIssues = details["validationIssues"];
 	return isValidationIssueArray(validationIssues) ? validationIssues : void 0;
 }
@@ -338128,11 +338457,11 @@ function isValidationIssueArray(value) {
 	return Array.isArray(value) && value.every(isValidationIssue);
 }
 function isValidationIssue(value) {
-	if (!isRecord$12(value) || typeof value["message"] !== "string") return false;
+	if (!isRecord$13(value) || typeof value["message"] !== "string") return false;
 	const path = value["path"];
 	return Array.isArray(path) && path.every((segment) => typeof segment === "string" || typeof segment === "number");
 }
-function isRecord$12(value) {
+function isRecord$13(value) {
 	return typeof value === "object" && value !== null;
 }
 function findZodError(error) {
@@ -338397,7 +338726,7 @@ async function handleExport(deps, sessionId, output, opts) {
 		});
 		deps.stdout.write(`${result.zipPath}\n`);
 	} catch (error) {
-		deps.stderr.write(`${errorMessage$4(error)}\n`);
+		deps.stderr.write(`${errorMessage$7(error)}\n`);
 		deps.exit(1);
 	}
 }
@@ -338500,7 +338829,7 @@ async function confirmPreviousSession(summary) {
 		rl.close();
 	}
 }
-function errorMessage$4(error) {
+function errorMessage$7(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
@@ -338511,6 +338840,1444 @@ function registerLoginCommand(parent) {
 	});
 }
 //#endregion
+//#region src/mistakes/inflow-client.ts
+const MISTAKE_INVENTORY_STATUSES = [
+	"counted",
+	"uncounted",
+	"unverified"
+];
+const MISTAKE_ACTUALITY_STATUSES = [
+	"fresh",
+	"stale",
+	"unverified"
+];
+const MISTAKE_SOURCE_FORMS = [
+	"case_collection",
+	"class_collection",
+	"finding_collection",
+	"lesson_collection",
+	"state_collection",
+	"mixed",
+	"unknown"
+];
+const MISTAKE_RECORD_TYPES = [
+	"case",
+	"class",
+	"finding",
+	"lesson",
+	"state",
+	"unknown"
+];
+const MISTAKE_RELATION_TYPES = [
+	"instance_of",
+	"lesson_from",
+	"state_of",
+	"independently_corroborates"
+];
+const MISTAKE_WATCHDOG_STATUSES = [
+	"disabled",
+	"green",
+	"yellow",
+	"red"
+];
+const DEFAULT_DEPS$2 = {
+	fetch: globalThis.fetch,
+	now: () => /* @__PURE__ */ new Date(),
+	randomUUID
+};
+const SOURCE_ID_RE = /^[a-z0-9][a-z0-9._-]{0,79}$/;
+const SHA256_RE = /^[a-f0-9]{64}$/;
+const UUID_RE$1 = /^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/i;
+const ENVELOPE_KEYS = [
+	"version",
+	"client_event_id",
+	"source_id",
+	"source_form",
+	"declared_record_types",
+	"original_name",
+	"captured_at",
+	"inventory",
+	"declared_raw_bytes",
+	"declared_raw_sha256",
+	"payload_base64",
+	"declarations"
+];
+const INVENTORY_KEYS = [
+	"scope",
+	"bestandsstatus",
+	"aktualitaetsstatus",
+	"declared_entry_count",
+	"last_raw_observed_at"
+];
+const STATE_ACTION_KEYS = [
+	"version",
+	"action_id",
+	"action",
+	"target_event_id",
+	"acted_at",
+	"server_sequence",
+	"principal_id",
+	"reason"
+];
+const MAX_MISTAKE_SOURCE_BYTES = 20 * 1024 * 1024;
+function normalizeMistakeSourceId(value) {
+	const normalized = value.normalize("NFKC").trim().toLocaleLowerCase("en-US");
+	if (!SOURCE_ID_RE.test(normalized)) throw new Error("source id must use 1-80 lowercase letters, digits, dots, underscores, or hyphens");
+	return normalized;
+}
+function assertSafeMistakeInflowEndpoint(value) {
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		throw new Error("mistake inflow endpoint is not a valid URL");
+	}
+	if (url.username !== "" || url.password !== "" || url.search !== "" || url.hash !== "") throw new Error("mistake inflow endpoint must not contain credentials, a query, or a fragment");
+	if (url.pathname !== "/" && url.pathname !== "") throw new Error("mistake inflow endpoint must not include a path");
+	if (url.protocol === "https:") return url;
+	if (url.protocol !== "http:" || !isPrivateHttpHost(url.hostname)) throw new Error("plain HTTP mistake inflow is allowed only on loopback or Tailscale addresses");
+	return url;
+}
+function isPrivateHttpHost(hostname) {
+	if (hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1" || hostname === "[::1]") return true;
+	const parts = hostname.split(".").map(Number);
+	const first = parts[0];
+	const second = parts[1];
+	return parts.length === 4 && parts.every((part) => Number.isInteger(part) && part >= 0 && part <= 255) && first === 100 && second !== void 0 && second >= 64 && second <= 127;
+}
+function assertIsoTimestamp$2(value, label) {
+	const parsed = new Date(value);
+	if (!Number.isFinite(parsed.valueOf()) || !/(?:Z|[+-]\d{2}:\d{2})$/.test(value)) throw new Error(`${label} must be an ISO-8601 timestamp with a timezone`);
+	return value;
+}
+function assertEntryCount(value) {
+	if (value === void 0) return null;
+	if (!Number.isSafeInteger(value) || value < 0) throw new Error("declared entry count must be a non-negative safe integer");
+	return value;
+}
+function parseMistakeRecordDeclarations(value, sourceId, declaredRecordTypes) {
+	if (!isRecord$12(value) || !hasOnlyKeys(value, [
+		"version",
+		"records",
+		"relations"
+	]) || value["version"] !== 1) throw new Error("record declarations must use version 1 and contain only records and relations");
+	if (!Array.isArray(value["records"]) || value["records"].length > 1e5 || !Array.isArray(value["relations"]) || value["relations"].length > 1e5) throw new Error("record declarations require records and relations arrays of at most 100000 items");
+	normalizeMistakeSourceId(sourceId);
+	const allowedRecordTypes = new Set(declaredRecordTypes);
+	if (allowedRecordTypes.size === 0 || [...allowedRecordTypes].some((type) => !MISTAKE_RECORD_TYPES.includes(type))) throw new Error("declared source record types are invalid");
+	const recordIds = /* @__PURE__ */ new Set();
+	return {
+		version: 1,
+		records: value["records"].map((candidate, index) => {
+			if (!isRecord$12(candidate) || !hasOnlyKeys(candidate, [
+				"source_record_id",
+				"type",
+				"raw_locator"
+			])) throw new Error(`record declaration ${index} is invalid`);
+			const recordId = candidate["source_record_id"];
+			const type = candidate["type"];
+			const rawLocator = candidate["raw_locator"];
+			if (typeof recordId !== "string" || !isValidRecordId(recordId)) throw new Error(`record declaration ${index} has an invalid record id`);
+			if (recordIds.has(recordId)) throw new Error(`duplicate record id: ${recordId}`);
+			if (typeof type !== "string" || !MISTAKE_RECORD_TYPES.includes(type) || !allowedRecordTypes.has(type)) throw new Error(`record ${recordId} uses a type not declared by its source`);
+			if (typeof rawLocator !== "string" || !isSafeRawLocator(rawLocator)) throw new Error(`record ${recordId} has an invalid raw locator`);
+			recordIds.add(recordId);
+			return {
+				source_record_id: recordId,
+				type,
+				raw_locator: rawLocator
+			};
+		}),
+		relations: value["relations"].map((candidate, index) => {
+			if (!isRecord$12(candidate) || !hasOnlyKeys(candidate, [
+				"from_source_record_id",
+				"type",
+				"to"
+			])) throw new Error(`record relation ${index} is invalid`);
+			const fromRecordId = candidate["from_source_record_id"];
+			const type = candidate["type"];
+			const target = candidate["to"];
+			if (typeof fromRecordId !== "string" || !isValidRecordId(fromRecordId) || !recordIds.has(fromRecordId)) throw new Error(`record relation ${index} must start at a declared local record`);
+			if (typeof type !== "string" || !MISTAKE_RELATION_TYPES.includes(type)) throw new Error(`record relation ${index} has an invalid relation type`);
+			if (!isRecord$12(target) || !hasOnlyKeys(target, ["source_id", "source_record_id"])) throw new Error(`record relation ${index} has an invalid target`);
+			const targetSourceId = target["source_id"];
+			const targetRecordId = target["source_record_id"];
+			if (typeof targetSourceId !== "string" || !isNormalizedSourceId(targetSourceId)) throw new Error(`record relation ${index} has an invalid target source id`);
+			if (typeof targetRecordId !== "string" || !isValidRecordId(targetRecordId)) throw new Error(`record relation ${index} has an invalid target record id`);
+			return {
+				from_source_record_id: fromRecordId,
+				type,
+				to: {
+					source_id: targetSourceId,
+					source_record_id: targetRecordId
+				}
+			};
+		})
+	};
+}
+async function queueMistakeObservation(input, outboxDir, deps = DEFAULT_DEPS$2) {
+	const sourceStat = await lstat(input.filePath);
+	if (sourceStat.isSymbolicLink()) throw new Error("mistake source must not be a symbolic link");
+	if (!sourceStat.isFile()) throw new Error("mistake source must be a regular file");
+	if (sourceStat.size > 20971520) throw new Error(`mistake source exceeds ${MAX_MISTAKE_SOURCE_BYTES} bytes`);
+	const sourceHandle = await open(input.filePath, "r");
+	let raw;
+	try {
+		const openedStat = await sourceHandle.stat();
+		if (!openedStat.isFile() || openedStat.dev !== sourceStat.dev || openedStat.ino !== sourceStat.ino) throw new Error("mistake source changed while it was being opened");
+		raw = await sourceHandle.readFile();
+	} finally {
+		await sourceHandle.close();
+	}
+	if (raw.byteLength > 20971520) throw new Error(`mistake source exceeds ${MAX_MISTAKE_SOURCE_BYTES} bytes`);
+	const clientEventId = input.clientEventId ?? deps.randomUUID();
+	if (!UUID_RE$1.test(clientEventId)) throw new Error("client event id must be a UUID");
+	const capturedAt = assertIsoTimestamp$2(input.capturedAt ?? deps.now().toISOString(), "captured at");
+	const lastRawObservedAt = input.lastRawObservedAt === void 0 ? null : assertIsoTimestamp$2(input.lastRawObservedAt, "last raw observed at");
+	const recordTypes = [...new Set(input.recordTypes)];
+	if (recordTypes.length === 0 || recordTypes.some((type) => !MISTAKE_RECORD_TYPES.includes(type))) throw new Error("at least one valid declared record type is required");
+	if (!MISTAKE_SOURCE_FORMS.includes(input.sourceForm)) throw new Error("invalid source form");
+	if (!MISTAKE_INVENTORY_STATUSES.includes(input.bestandsstatus)) throw new Error("invalid bestandsstatus");
+	if (!MISTAKE_ACTUALITY_STATUSES.includes(input.aktualitaetsstatus)) throw new Error("invalid aktualitaetsstatus");
+	const declaredEntryCount = assertEntryCount(input.declaredEntryCount);
+	assertInventoryInvariants(input.bestandsstatus, input.aktualitaetsstatus, declaredEntryCount, lastRawObservedAt, capturedAt);
+	const sourceId = normalizeMistakeSourceId(input.sourceId);
+	const declarations = input.declarations === void 0 ? void 0 : parseMistakeRecordDeclarations(input.declarations, sourceId, recordTypes);
+	const envelope = {
+		version: 1,
+		client_event_id: clientEventId,
+		source_id: sourceId,
+		source_form: input.sourceForm,
+		declared_record_types: recordTypes,
+		original_name: basename(input.filePath),
+		captured_at: capturedAt,
+		inventory: {
+			scope: "lower_bound",
+			bestandsstatus: input.bestandsstatus,
+			aktualitaetsstatus: input.aktualitaetsstatus,
+			declared_entry_count: declaredEntryCount,
+			last_raw_observed_at: lastRawObservedAt
+		},
+		declared_raw_bytes: raw.byteLength,
+		declared_raw_sha256: createHash("sha256").update(raw).digest("hex"),
+		payload_base64: raw.toString("base64"),
+		declarations
+	};
+	const eventsDir = join(outboxDir, "events");
+	await ensureDurableMistakeDirectory(eventsDir);
+	await durableExclusiveWrite(join(eventsDir, `${clientEventId}.json`), `${JSON.stringify(envelope)}\n`);
+	return envelope;
+}
+function endpointUrl(endpoint, path) {
+	const base = assertSafeMistakeInflowEndpoint(endpoint);
+	return new URL(path, base);
+}
+async function readJsonResponse(response) {
+	const text = await response.text();
+	try {
+		return JSON.parse(text);
+	} catch {
+		throw new Error(`mistake inflow returned non-JSON HTTP ${response.status}`);
+	}
+}
+function isReceipt(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const item = value;
+	return item["version"] === 1 && item["accepted"] === true && typeof item["event_id"] === "string" && UUID_RE$1.test(item["event_id"]) && typeof item["client_event_id"] === "string" && UUID_RE$1.test(item["client_event_id"]) && typeof item["source_id"] === "string" && isNormalizedSourceId(item["source_id"]) && typeof item["canonical_agent_id"] === "string" && isNormalizedSourceId(item["canonical_agent_id"]) && typeof item["received_at"] === "string" && isIsoTimestamp(item["received_at"]) && item["raw_count"] === 1 && item["accepted_count"] === 1 && item["rejected_count"] === 0 && Number.isSafeInteger(item["raw_bytes"]) && item["raw_bytes"] >= 0 && typeof item["raw_sha256"] === "string" && SHA256_RE.test(item["raw_sha256"]) && isNullableEntryCount(item["declared_entry_count"]);
+}
+async function deliverQueuedObservation(clientEventId, options, deps = DEFAULT_DEPS$2) {
+	if (!UUID_RE$1.test(clientEventId)) throw new Error("client event id must be a UUID");
+	const envelope = parseQueuedEnvelope(await readFile(join(options.outboxDir, "events", `${clientEventId}.json`), "utf8"), clientEventId);
+	const controller = new AbortController();
+	const timeout = setTimeout(() => {
+		controller.abort();
+	}, 15e3);
+	let response;
+	try {
+		response = await deps.fetch(endpointUrl(options.endpoint, "/v1/observations"), {
+			method: "POST",
+			headers: {
+				authorization: `Bearer ${options.token}`,
+				"content-type": "application/json"
+			},
+			body: JSON.stringify(envelope),
+			signal: controller.signal,
+			redirect: "error"
+		});
+	} finally {
+		clearTimeout(timeout);
+	}
+	const body = await readJsonResponse(response);
+	if (response.status !== 202 || !isReceipt(body)) {
+		const bodyError = typeof body === "object" && body !== null ? body["error"] : void 0;
+		const message = typeof bodyError === "string" ? bodyError : `HTTP ${response.status}`;
+		throw new Error(`mistake inflow rejected ${clientEventId}: ${message}`);
+	}
+	if (!receiptMatchesEnvelope(body, envelope)) throw new Error(`mistake inflow receipt mismatch for ${clientEventId}`);
+	const receiptsDir = join(options.outboxDir, "receipts", clientEventId);
+	await ensureDurableMistakeDirectory(receiptsDir);
+	const receiptPath = join(receiptsDir, `${body.event_id}.json`);
+	try {
+		await durableExclusiveWrite(receiptPath, `${JSON.stringify(body)}\n`);
+	} catch (error) {
+		if (!isAlreadyExists$1(error)) throw error;
+		const existing = await readReceipt(receiptPath);
+		if (existing !== null && existing.event_id === body.event_id && receiptMatchesEnvelope(existing, envelope)) {
+			if (!receiptsEqual(existing, body)) throw new Error(`conflicting local receipt for ${clientEventId}`, { cause: error });
+		} else await durableExclusiveWrite(join(receiptsDir, `${body.event_id}.${randomUUID()}.json`), `${JSON.stringify(body)}\n`);
+	}
+	return body;
+}
+async function uploadMistakeObservation(input, options, deps = DEFAULT_DEPS$2) {
+	return deliverQueuedObservation((await queueMistakeObservation(input, options.outboxDir, deps)).client_event_id, options, deps);
+}
+async function drainMistakeOutbox(options, deps = DEFAULT_DEPS$2) {
+	const eventsDir = join(options.outboxDir, "events");
+	await ensureDurableMistakeDirectory(eventsDir);
+	const names = (await readdir(eventsDir)).filter((name) => UUID_RE$1.test(name.replace(/\.json$/, "")) && name.endsWith(".json")).toSorted();
+	const delivered = [];
+	const failed = [];
+	const pending = [];
+	for (const name of names) {
+		const clientEventId = name.slice(0, -5);
+		try {
+			const envelope = parseQueuedEnvelope(await readFile(join(eventsDir, name), "utf8"), clientEventId);
+			if (await findVerifiedLocalReceipt(envelope, options.outboxDir) !== null) continue;
+			pending.push(envelope);
+		} catch (error) {
+			failed.push({
+				clientEventId,
+				error: errorMessage$6(error)
+			});
+		}
+	}
+	pending.sort(compareObservationOrder);
+	for (const envelope of pending) try {
+		delivered.push(await deliverQueuedObservation(envelope.client_event_id, options, deps));
+	} catch (error) {
+		failed.push({
+			clientEventId: envelope.client_event_id,
+			error: errorMessage$6(error)
+		});
+	}
+	return {
+		delivered,
+		failed
+	};
+}
+async function getMistakeInflowStatus(endpoint, token, deps = DEFAULT_DEPS$2) {
+	const response = await deps.fetch(endpointUrl(endpoint, "/v1/status"), {
+		headers: { authorization: `Bearer ${token}` },
+		redirect: "error"
+	});
+	const body = await readJsonResponse(response);
+	if (response.status !== 200) throw new Error(`mistake inflow status failed: HTTP ${response.status}`);
+	if (!isMistakeInflowStatus(body)) throw new Error("mistake inflow status returned an invalid payload");
+	return body;
+}
+async function changeMistakeObservationState(action, eventId, reason, endpoint, token, deps = DEFAULT_DEPS$2) {
+	if (!UUID_RE$1.test(eventId)) throw new Error("event id must be a UUID");
+	const trimmedReason = reason.trim();
+	if (trimmedReason.length < 3 || trimmedReason.length > 500) throw new Error("reason must contain 3-500 characters");
+	const actionId = deps.randomUUID();
+	if (!UUID_RE$1.test(actionId)) throw new Error("generated action id must be a UUID");
+	const response = await deps.fetch(endpointUrl(endpoint, `/v1/observations/${eventId}:${action}`), {
+		method: "POST",
+		headers: {
+			authorization: `Bearer ${token}`,
+			"content-type": "application/json"
+		},
+		body: JSON.stringify({
+			action_id: actionId,
+			reason: trimmedReason
+		}),
+		redirect: "error"
+	});
+	const body = await readJsonResponse(response);
+	if (response.status !== 201) {
+		const bodyError = typeof body === "object" && body !== null ? body["error"] : void 0;
+		const detail = typeof bodyError === "string" ? bodyError : `HTTP ${response.status}`;
+		throw new Error(`mistake inflow ${action} failed: ${detail}`);
+	}
+	if (!isStateActionReceipt(body) || body.action_id !== actionId || body.action !== action || body.target_event_id !== eventId || body.reason !== trimmedReason) throw new Error(`mistake inflow ${action} returned a mismatched action receipt`);
+	return body;
+}
+function parseQueuedEnvelope(text, expectedClientEventId) {
+	let value;
+	try {
+		value = JSON.parse(text);
+	} catch {
+		throw new Error(`queued mistake event ${expectedClientEventId} is not valid JSON`);
+	}
+	if (typeof value !== "object" || value === null) throw new Error(`queued mistake event ${expectedClientEventId} is invalid`);
+	const item = value;
+	if (!hasOnlyKeys(item, ENVELOPE_KEYS) || item["version"] !== 1 || item["client_event_id"] !== expectedClientEventId || !UUID_RE$1.test(expectedClientEventId)) throw new Error(`queued mistake event ${expectedClientEventId} has an invalid identity`);
+	if (typeof item["source_id"] !== "string" || !isNormalizedSourceId(item["source_id"])) throw new Error(`queued mistake event ${expectedClientEventId} has an invalid source`);
+	if (typeof item["source_form"] !== "string" || !MISTAKE_SOURCE_FORMS.includes(item["source_form"])) throw new Error(`queued mistake event ${expectedClientEventId} has an invalid source form`);
+	const recordTypes = item["declared_record_types"];
+	if (!Array.isArray(recordTypes) || recordTypes.length === 0 || new Set(recordTypes).size !== recordTypes.length || recordTypes.some((type) => typeof type !== "string" || !MISTAKE_RECORD_TYPES.includes(type))) throw new Error(`queued mistake event ${expectedClientEventId} has invalid record types`);
+	if (typeof item["original_name"] !== "string" || item["original_name"] === "" || basename(item["original_name"]) !== item["original_name"]) throw new Error(`queued mistake event ${expectedClientEventId} has an invalid original name`);
+	if (typeof item["captured_at"] !== "string" || !isIsoTimestamp(item["captured_at"])) throw new Error(`queued mistake event ${expectedClientEventId} has an invalid capture time`);
+	const inventory = item["inventory"];
+	if (typeof inventory !== "object" || inventory === null) throw new Error(`queued mistake event ${expectedClientEventId} has invalid inventory metadata`);
+	const inventoryItem = inventory;
+	if (!hasOnlyKeys(inventoryItem, INVENTORY_KEYS) || inventoryItem["scope"] !== "lower_bound" || typeof inventoryItem["bestandsstatus"] !== "string" || !MISTAKE_INVENTORY_STATUSES.includes(inventoryItem["bestandsstatus"]) || typeof inventoryItem["aktualitaetsstatus"] !== "string" || !MISTAKE_ACTUALITY_STATUSES.includes(inventoryItem["aktualitaetsstatus"]) || !isNullableEntryCount(inventoryItem["declared_entry_count"]) || inventoryItem["last_raw_observed_at"] !== null && (typeof inventoryItem["last_raw_observed_at"] !== "string" || !isIsoTimestamp(inventoryItem["last_raw_observed_at"]))) throw new Error(`queued mistake event ${expectedClientEventId} has invalid inventory metadata`);
+	try {
+		assertInventoryInvariants(inventoryItem["bestandsstatus"], inventoryItem["aktualitaetsstatus"], inventoryItem["declared_entry_count"], inventoryItem["last_raw_observed_at"], item["captured_at"]);
+	} catch (error) {
+		throw new Error(`queued mistake event ${expectedClientEventId} has contradictory inventory metadata`, { cause: error });
+	}
+	if (!Number.isSafeInteger(item["declared_raw_bytes"]) || item["declared_raw_bytes"] < 0 || item["declared_raw_bytes"] > 20971520 || typeof item["declared_raw_sha256"] !== "string" || !SHA256_RE.test(item["declared_raw_sha256"]) || typeof item["payload_base64"] !== "string") throw new Error(`queued mistake event ${expectedClientEventId} has invalid payload metadata`);
+	const payload = Buffer.from(item["payload_base64"], "base64");
+	if (payload.toString("base64") !== item["payload_base64"] || payload.byteLength !== item["declared_raw_bytes"] || createHash("sha256").update(payload).digest("hex") !== item["declared_raw_sha256"]) throw new Error(`queued mistake event ${expectedClientEventId} failed payload integrity verification`);
+	if (item["declarations"] !== void 0) try {
+		parseMistakeRecordDeclarations(item["declarations"], item["source_id"], recordTypes);
+	} catch (error) {
+		throw new Error(`queued mistake event ${expectedClientEventId} has invalid record declarations`, { cause: error });
+	}
+	return value;
+}
+async function findVerifiedLocalReceipt(envelope, outboxDir) {
+	const receiptRoot = join(outboxDir, "receipts");
+	const paths = [join(receiptRoot, `${envelope.client_event_id}.json`)];
+	const eventReceiptDir = join(receiptRoot, envelope.client_event_id);
+	try {
+		const names = (await readdir(eventReceiptDir)).filter((name) => name.endsWith(".json")).toSorted();
+		paths.push(...names.map((name) => join(eventReceiptDir, name)));
+	} catch (error) {
+		if (!isNotFound$2(error)) throw error;
+	}
+	for (const path of paths) {
+		const candidate = await readReceipt(path);
+		if (candidate !== null && receiptMatchesEnvelope(candidate, envelope)) return candidate;
+	}
+	return null;
+}
+async function readReceipt(path) {
+	try {
+		const value = JSON.parse(await readFile(path, "utf8"));
+		return isReceipt(value) ? value : null;
+	} catch (error) {
+		if (isNotFound$2(error) || error instanceof SyntaxError) return null;
+		throw error;
+	}
+}
+function receiptMatchesEnvelope(receipt, envelope) {
+	return receipt.client_event_id === envelope.client_event_id && receipt.source_id === envelope.source_id && receipt.raw_bytes === envelope.declared_raw_bytes && receipt.raw_sha256 === envelope.declared_raw_sha256 && receipt.declared_entry_count === envelope.inventory.declared_entry_count;
+}
+function receiptsEqual(left, right) {
+	return left.version === right.version && left.accepted === right.accepted && left.event_id === right.event_id && left.client_event_id === right.client_event_id && left.source_id === right.source_id && left.canonical_agent_id === right.canonical_agent_id && left.received_at === right.received_at && left.raw_count === right.raw_count && left.accepted_count === right.accepted_count && left.rejected_count === right.rejected_count && left.raw_bytes === right.raw_bytes && left.raw_sha256 === right.raw_sha256 && left.declared_entry_count === right.declared_entry_count;
+}
+function isStateActionReceipt(value) {
+	if (!isRecord$12(value) || !hasOnlyKeys(value, STATE_ACTION_KEYS)) return false;
+	const reason = value["reason"];
+	return value["version"] === 1 && typeof value["action_id"] === "string" && UUID_RE$1.test(value["action_id"]) && (value["action"] === "remove" || value["action"] === "restore") && typeof value["target_event_id"] === "string" && UUID_RE$1.test(value["target_event_id"]) && typeof value["acted_at"] === "string" && isIsoTimestamp(value["acted_at"]) && Number.isSafeInteger(value["server_sequence"]) && value["server_sequence"] >= 1 && typeof value["principal_id"] === "string" && isNormalizedSourceId(value["principal_id"]) && typeof reason === "string" && reason.trim() === reason && reason.length >= 3 && reason.length <= 500;
+}
+function compareObservationOrder(left, right) {
+	const leftObservedAt = left.inventory.last_raw_observed_at ?? left.captured_at;
+	const rightObservedAt = right.inventory.last_raw_observed_at ?? right.captured_at;
+	return Date.parse(leftObservedAt) - Date.parse(rightObservedAt) || Date.parse(left.captured_at) - Date.parse(right.captured_at) || left.source_id.localeCompare(right.source_id) || left.client_event_id.localeCompare(right.client_event_id);
+}
+async function ensureDurableMistakeDirectory(path, deps) {
+	const io = deps ?? {
+		lstat,
+		mkdir,
+		syncDirectory
+	};
+	const missing = [];
+	let cursor = resolve(path);
+	while (true) try {
+		const existing = await io.lstat(cursor);
+		if (existing.isSymbolicLink() || !existing.isDirectory()) throw new Error(`mistake outbox path is not a real directory: ${cursor}`);
+		break;
+	} catch (error) {
+		if (!isNotFound$2(error)) throw error;
+		missing.push(cursor);
+		const parent = dirname(cursor);
+		if (parent === cursor) throw new Error(`mistake outbox has no existing parent: ${path}`, { cause: error });
+		cursor = parent;
+	}
+	for (const directory of missing.toReversed()) {
+		try {
+			await io.mkdir(directory, { mode: 448 });
+		} catch (error) {
+			if (!isAlreadyExists$1(error)) throw error;
+			const raced = await io.lstat(directory);
+			if (raced.isSymbolicLink() || !raced.isDirectory()) throw new Error(`mistake outbox path is not a real directory: ${directory}`, { cause: error });
+		}
+		await io.syncDirectory(dirname(directory));
+	}
+}
+async function durableExclusiveWrite(path, contents) {
+	const directory = dirname(path);
+	const temporaryPath = join(directory, `.${basename(path)}.${process.pid}.${randomUUID()}.tmp`);
+	let handle;
+	let failure;
+	try {
+		handle = await open(temporaryPath, "wx", 384);
+		await handle.writeFile(contents, "utf8");
+		await handle.sync();
+		await handle.close();
+		handle = void 0;
+		await link(temporaryPath, path);
+		await syncDirectory(directory);
+	} catch (error) {
+		failure = error;
+	}
+	if (handle !== void 0) try {
+		await handle.close();
+	} catch (error) {
+		failure ??= error;
+	}
+	try {
+		await unlink(temporaryPath);
+		await syncDirectory(directory);
+	} catch (error) {
+		if (!isNotFound$2(error)) failure ??= error;
+	}
+	if (failure !== void 0) throw failure;
+}
+async function syncDirectory(path) {
+	let handle;
+	try {
+		handle = await open(path, "r");
+		await handle.sync();
+	} catch (error) {
+		if (process.platform !== "win32" || !isUnsupportedDirectorySync(error)) throw error;
+	} finally {
+		await handle?.close().catch(() => void 0);
+	}
+}
+function isNormalizedSourceId(value) {
+	try {
+		return normalizeMistakeSourceId(value) === value;
+	} catch {
+		return false;
+	}
+}
+function isIsoTimestamp(value) {
+	try {
+		assertIsoTimestamp$2(value, "timestamp");
+		return true;
+	} catch {
+		return false;
+	}
+}
+function isNullableEntryCount(value) {
+	return value === null || Number.isSafeInteger(value) && value >= 0;
+}
+function assertInventoryInvariants(bestandsstatus, aktualitaetsstatus, declaredEntryCount, lastRawObservedAt, capturedAt) {
+	if (bestandsstatus === "counted" && declaredEntryCount === null) throw new Error("counted inventory requires a declared entry count");
+	if (bestandsstatus !== "counted" && declaredEntryCount !== null) throw new Error(`${bestandsstatus} inventory must not declare an entry count`);
+	if (aktualitaetsstatus === "fresh" && lastRawObservedAt === null) throw new Error("fresh inventory requires a last raw observed timestamp");
+	if (capturedAt !== void 0 && lastRawObservedAt !== null && Date.parse(lastRawObservedAt) > Date.parse(capturedAt)) throw new Error("last raw observed timestamp must not be later than captured at");
+}
+function isRecord$12(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function hasOnlyKeys(value, allowedKeys) {
+	return Object.keys(value).every((key) => allowedKeys.includes(key));
+}
+function isValidRecordId(value) {
+	const length = [...value].length;
+	return length >= 1 && length <= 200 && value.normalize("NFKC").trim() === value && !hasControlCharacter(value);
+}
+function isSafeRawLocator(value) {
+	const length = [...value].length;
+	return length >= 1 && length <= 1e3 && !hasControlCharacter(value);
+}
+function hasControlCharacter(value) {
+	return [...value].some((character) => {
+		const codePoint = character.codePointAt(0);
+		return codePoint !== void 0 && (codePoint < 32 || codePoint === 127);
+	});
+}
+function isMistakeInflowStatus(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const item = value;
+	if (item["version"] !== 1 || item["scope"] !== "lower_bound" || typeof item["generated_at"] !== "string" || !isIsoTimestamp(item["generated_at"]) || !isNonNegativeInteger(item["stale_after_seconds"]) || !Array.isArray(item["sources"])) return false;
+	const sourceIds = /* @__PURE__ */ new Set();
+	for (const source of item["sources"]) {
+		if (!isMistakeSourceStatus(source)) return false;
+		const sourceId = source["source_id"];
+		if (sourceIds.has(sourceId)) return false;
+		sourceIds.add(sourceId);
+	}
+	return true;
+}
+function isMistakeSourceStatus(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const item = value;
+	const recordTypes = item["record_types"];
+	const watchdogReasons = item["watchdog_reasons"];
+	if (!(typeof item["source_id"] === "string" && isNormalizedSourceId(item["source_id"]) && typeof item["raw_agent_id"] === "string" && item["raw_agent_id"].trim() !== "" && typeof item["canonical_agent_id"] === "string" && isNormalizedSourceId(item["canonical_agent_id"]) && typeof item["source_form"] === "string" && MISTAKE_SOURCE_FORMS.includes(item["source_form"]) && Array.isArray(recordTypes) && recordTypes.length > 0 && new Set(recordTypes).size === recordTypes.length && recordTypes.every((type) => typeof type === "string" && MISTAKE_RECORD_TYPES.includes(type)) && typeof item["bestandsstatus"] === "string" && MISTAKE_INVENTORY_STATUSES.includes(item["bestandsstatus"]) && typeof item["aktualitaetsstatus"] === "string" && MISTAKE_ACTUALITY_STATUSES.includes(item["aktualitaetsstatus"]) && isNullableEntryCount(item["declared_entry_count"]) && isNullableIsoTimestamp(item["last_raw_observed_at"]) && isNullableIsoTimestamp(item["last_attempt_at"]) && isNullableIsoTimestamp(item["last_success_at"]) && isNonNegativeInteger(item["successful_observations"]) && isNonNegativeInteger(item["active_observations"]) && isNonNegativeInteger(item["rejected_attempts"]) && isNonNegativeInteger(item["seconds_since_success_or_monitor_start"]) && typeof item["watchdog"] === "string" && MISTAKE_WATCHDOG_STATUSES.includes(item["watchdog"]) && Array.isArray(watchdogReasons) && watchdogReasons.every((reason) => typeof reason === "string" && reason.trim() !== ""))) return false;
+	try {
+		assertInventoryInvariants(item["bestandsstatus"], item["aktualitaetsstatus"], item["declared_entry_count"], item["last_raw_observed_at"]);
+		return true;
+	} catch {
+		return false;
+	}
+}
+function isNullableIsoTimestamp(value) {
+	return value === null || typeof value === "string" && isIsoTimestamp(value);
+}
+function isNonNegativeInteger(value) {
+	return Number.isSafeInteger(value) && value >= 0;
+}
+function isAlreadyExists$1(error) {
+	return typeof error === "object" && error !== null && error.code === "EEXIST";
+}
+function isNotFound$2(error) {
+	return typeof error === "object" && error !== null && error.code === "ENOENT";
+}
+function isUnsupportedDirectorySync(error) {
+	if (typeof error !== "object" || error === null) return false;
+	return [
+		"EACCES",
+		"EBADF",
+		"EINVAL",
+		"EPERM"
+	].includes(error.code ?? "");
+}
+function errorMessage$6(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+//#endregion
+//#region src/mistakes/source-sync.ts
+const DIRECTORY_SNAPSHOT_FORMAT = "blun.mistakes.directory-snapshot.v1";
+const TOKEN_ENV_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const UUID_RE = /^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/i;
+const TRANSPORT_STALE_AFTER_SECONDS = 1440 * 60;
+const DEFAULT_DEPS$1 = {
+	drain: (options) => drainMistakeOutbox(options),
+	upload: (input, options) => uploadMistakeObservation(input, options),
+	now: () => /* @__PURE__ */ new Date()
+};
+async function loadMistakeSourceSyncConfig(configPath) {
+	const absolutePath = resolve(configPath);
+	const fileStat = await lstat(absolutePath);
+	if (fileStat.isSymbolicLink() || !fileStat.isFile()) throw new Error("mistake source config must be a regular, non-symlink file");
+	let value;
+	try {
+		value = JSON.parse(await readFile(absolutePath, "utf8"));
+	} catch (error) {
+		if (error instanceof SyntaxError) throw new Error("mistake source config is not valid JSON", { cause: error });
+		throw error;
+	}
+	return parseConfig(value, dirname(absolutePath));
+}
+async function buildSourceSnapshot(adapter) {
+	return adapter.type === "file" ? buildFileSnapshot(adapter.path) : buildDirectorySnapshot(adapter.path, {
+		include: adapter.include,
+		recursive: adapter.recursive
+	});
+}
+async function buildDirectorySnapshot(path, options = {}) {
+	const root = resolve(path);
+	const rootStat = await lstat(root);
+	if (rootStat.isSymbolicLink() || !rootStat.isDirectory()) throw new Error(`directory source must be a regular, non-symlink directory: ${root}`);
+	const canonicalRoot = await realpath(root);
+	const include = options.include === void 0 ? void 0 : validateIncludePatterns(options.include, "directory include");
+	const recursive = options.recursive ?? true;
+	const files = await readDirectoryFiles(root, canonicalRoot, recursive, include === void 0 ? void 0 : compileIncludePatterns(include));
+	if (include !== void 0 && files.length === 0) throw new Error(`directory include matched no regular files: ${include.join(", ")}`);
+	const orderedFiles = files.toSorted((left, right) => Buffer.compare(Buffer.from(left.path), Buffer.from(right.path)));
+	const totalBytes = orderedFiles.reduce((sum, file) => sum + file.bytes, 0);
+	const latestMtimeMs = orderedFiles.reduce((latest, file) => latest === null || file.mtimeMs > latest ? file.mtimeMs : latest, null);
+	const document = {
+		format: DIRECTORY_SNAPSHOT_FORMAT,
+		version: 1,
+		file_count: orderedFiles.length,
+		total_bytes: totalBytes,
+		latest_mtime: latestMtimeMs === null ? null : new Date(Math.trunc(latestMtimeMs)).toISOString(),
+		selection: {
+			include: include === void 0 ? null : include.toSorted(compareUtf8),
+			recursive
+		},
+		files: orderedFiles.map(({ mtimeMs: _mtimeMs, ...file }) => file)
+	};
+	const payload = Buffer.from(`${JSON.stringify(document)}\n`, "utf8");
+	assertSnapshotSize(payload);
+	return snapshotResult("directory", "directory-snapshot.json", payload, orderedFiles.length, totalBytes, document.latest_mtime);
+}
+async function syncMistakeSources(options, deps = DEFAULT_DEPS$1) {
+	const configPath = resolve(options.configPath);
+	const config = await loadMistakeSourceSyncConfig(configPath);
+	const baseOutbox = resolve(options.outboxDir ?? config.outbox ?? join(dirname(configPath), ".mistake-inflow-outbox"));
+	const startedAt = deps.now().toISOString();
+	const results = [];
+	for (const source of config.sources.toSorted((left, right) => compareUtf8(left.sourceId, right.sourceId))) {
+		if (source.adapter.type === "unsupported") {
+			results.push({
+				source_id: source.sourceId,
+				agent_id: source.agentId,
+				adapter: "unsupported",
+				bestandsstatus: source.bestandsstatus,
+				aktualitaetsstatus: source.aktualitaetsstatus,
+				status: "blocked",
+				retry: null,
+				entry_count: entryCountResult(source),
+				snapshot: null,
+				reason: source.adapter.reason
+			});
+			continue;
+		}
+		const sourceOutbox = join(baseOutbox, "sources", source.sourceId);
+		let retry = null;
+		try {
+			await assertOutboxOutsideSource(source.adapter, sourceOutbox);
+			const endpoint = options.endpoint ?? source.endpoint ?? config.endpoint;
+			if (!endpoint) throw new Error("no endpoint configured");
+			const tokenEnv = source.tokenEnv;
+			if (!tokenEnv) throw new Error("supported source has no token_env");
+			const token = options.env[tokenEnv];
+			if (!token || token.trim() === "") throw new Error(`missing bearer token in ${tokenEnv}`);
+			const connection = {
+				endpoint,
+				token,
+				outboxDir: sourceOutbox
+			};
+			retry = await deps.drain(connection);
+			if (retry.failed.length > 0) throw new Error(`retry failed for ${retry.failed.length} queued observation(s)`);
+			const snapshot = await buildSourceSnapshot(source.adapter);
+			assertEntryCountBasis(source, snapshot);
+			const declarations = source.declarationsPath === void 0 ? void 0 : await readExplicitDeclarations(source.declarationsPath, source.sourceId, source.recordTypes);
+			const capturedAt = deps.now().toISOString();
+			const input = observationInput(source, snapshot, capturedAt, declarations);
+			const existing = await findVerifiedSnapshotReceipt(source, snapshot, input, sourceOutbox);
+			const heartbeatIntervalSeconds = source.heartbeatIntervalSeconds ?? config.heartbeatIntervalSeconds;
+			if (existing !== null && receiptIsWithinHeartbeat(existing, capturedAt, heartbeatIntervalSeconds)) {
+				results.push(resultForSnapshot(source, snapshot, "unchanged", retry, existing));
+				continue;
+			}
+			const materializedPath = await materializeSnapshot(snapshot, sourceOutbox);
+			const receipt = await deps.upload({
+				...input,
+				filePath: materializedPath
+			}, connection);
+			assertReceiptIdentity(receipt, source, snapshot, input.declaredEntryCount);
+			results.push(resultForSnapshot(source, snapshot, existing === null ? "uploaded" : "heartbeat", retry, receipt, existing ?? void 0));
+		} catch (error) {
+			results.push({
+				source_id: source.sourceId,
+				agent_id: source.agentId,
+				adapter: source.adapter.type,
+				bestandsstatus: source.bestandsstatus,
+				aktualitaetsstatus: source.aktualitaetsstatus,
+				status: "failed",
+				retry: retry === null ? null : {
+					delivered: retry.delivered.length,
+					failed: retry.failed.length
+				},
+				entry_count: entryCountResult(source, false),
+				snapshot: null,
+				reason: errorMessage$5(error)
+			});
+		}
+	}
+	return {
+		version: 1,
+		config_path: configPath,
+		started_at: startedAt,
+		finished_at: deps.now().toISOString(),
+		results
+	};
+}
+async function watchMistakeSources(options, deps = DEFAULT_DEPS$1) {
+	if (!Number.isSafeInteger(options.intervalMs) || options.intervalMs < 1e3) throw new Error("watch interval must be at least 1000 milliseconds");
+	while (!options.signal?.aborted) {
+		await options.onRun(await syncMistakeSources(options, deps));
+		await waitForInterval(options.intervalMs, options.signal);
+	}
+}
+function parseConfig(value, configDir) {
+	const root = objectValue(value, "config");
+	exactKeys(root, [
+		"version",
+		"endpoint",
+		"outbox",
+		"heartbeat_interval_seconds",
+		"sources"
+	], "config");
+	if (root["version"] !== 1) throw new Error("mistake source config version must be 1");
+	const endpoint = optionalNonEmptyString$1(root["endpoint"], "config.endpoint");
+	const outboxValue = optionalNonEmptyString$1(root["outbox"], "config.outbox");
+	const heartbeatIntervalSeconds = heartbeatInterval(root["heartbeat_interval_seconds"], "config.heartbeat_interval_seconds") ?? 43200;
+	const sourcesValue = root["sources"];
+	if (!Array.isArray(sourcesValue) || sourcesValue.length === 0) throw new Error("config.sources must be a non-empty array");
+	const sources = sourcesValue.map((source, index) => parseSource(source, index, configDir));
+	const sourceIds = sources.map((source) => source.sourceId);
+	if (new Set(sourceIds).size !== sourceIds.length) throw new Error("config contains duplicate normalized source ids");
+	const tokenEnvs = sources.flatMap((source) => source.tokenEnv === void 0 ? [] : [source.tokenEnv]);
+	if (new Set(tokenEnvs).size !== tokenEnvs.length) throw new Error("each supported source must use its own token_env");
+	return {
+		version: 1,
+		endpoint,
+		outbox: outboxValue === void 0 ? void 0 : configuredPath(outboxValue, configDir, "config.outbox"),
+		heartbeatIntervalSeconds,
+		sources
+	};
+}
+function parseSource(value, index, configDir) {
+	const label = `config.sources[${index}]`;
+	const source = objectValue(value, label);
+	exactKeys(source, [
+		"source_id",
+		"agent_id",
+		"endpoint",
+		"token_env",
+		"heartbeat_interval_seconds",
+		"source_form",
+		"record_types",
+		"bestandsstatus",
+		"aktualitaetsstatus",
+		"declared_entry_count",
+		"entry_count_basis",
+		"declarations_path",
+		"adapter"
+	], label);
+	const sourceId = normalizeMistakeSourceId(nonEmptyString(source["source_id"], `${label}.source_id`));
+	const agentId = normalizeMistakeSourceId(nonEmptyString(source["agent_id"], `${label}.agent_id`));
+	const sourceForm = enumValue(source["source_form"], MISTAKE_SOURCE_FORMS, `${label}.source_form`);
+	const recordTypes = enumArray(source["record_types"], MISTAKE_RECORD_TYPES, `${label}.record_types`);
+	const bestandsstatus = enumValue(source["bestandsstatus"], MISTAKE_INVENTORY_STATUSES, `${label}.bestandsstatus`);
+	const aktualitaetsstatus = enumValue(source["aktualitaetsstatus"], MISTAKE_ACTUALITY_STATUSES, `${label}.aktualitaetsstatus`);
+	const endpoint = optionalNonEmptyString$1(source["endpoint"], `${label}.endpoint`);
+	const tokenEnv = optionalNonEmptyString$1(source["token_env"], `${label}.token_env`);
+	const heartbeatIntervalSeconds = heartbeatInterval(source["heartbeat_interval_seconds"], `${label}.heartbeat_interval_seconds`);
+	const declaredEntryCount = optionalCount(source["declared_entry_count"], `${label}.declared_entry_count`);
+	const entryCountBasis = optionalEnumValue(source["entry_count_basis"], ["files", "declared"], `${label}.entry_count_basis`);
+	const declarationsValue = optionalNonEmptyString$1(source["declarations_path"], `${label}.declarations_path`);
+	const declarationsPath = declarationsValue === void 0 ? void 0 : configuredPath(declarationsValue, configDir, `${label}.declarations_path`);
+	const adapter = parseAdapter(source["adapter"], label, configDir);
+	if (bestandsstatus === "counted" && declaredEntryCount === void 0) throw new Error(`${label}.declared_entry_count is required when bestandsstatus is counted`);
+	if (bestandsstatus === "counted" && entryCountBasis === void 0) throw new Error(`${label}.entry_count_basis is required when bestandsstatus is counted`);
+	if (bestandsstatus !== "counted" && declaredEntryCount !== void 0) throw new Error(`${label}.declared_entry_count is forbidden unless bestandsstatus is counted`);
+	if (bestandsstatus !== "counted" && entryCountBasis !== void 0) throw new Error(`${label}.entry_count_basis is forbidden unless bestandsstatus is counted`);
+	if (adapter.type === "unsupported") {
+		if (bestandsstatus !== "unverified" || aktualitaetsstatus !== "unverified") throw new Error(`${label} unsupported adapters must use unverified inventory and actuality statuses`);
+		if (tokenEnv !== void 0 || endpoint !== void 0 || heartbeatIntervalSeconds !== void 0 || declarationsPath !== void 0) throw new Error(`${label} unsupported adapters must not declare endpoint, token_env, heartbeat_interval_seconds, or declarations_path`);
+	} else if (tokenEnv === void 0 || !TOKEN_ENV_RE.test(tokenEnv)) throw new Error(`${label}.token_env must name a dedicated environment variable`);
+	return {
+		sourceId,
+		agentId,
+		endpoint,
+		tokenEnv,
+		heartbeatIntervalSeconds,
+		sourceForm,
+		recordTypes,
+		bestandsstatus,
+		aktualitaetsstatus,
+		declaredEntryCount,
+		entryCountBasis,
+		declarationsPath,
+		adapter
+	};
+}
+function parseAdapter(value, sourceLabel, configDir) {
+	const label = `${sourceLabel}.adapter`;
+	const adapter = objectValue(value, label);
+	const type = adapter["type"];
+	if (type === "file" || type === "directory") {
+		if (type === "file") {
+			exactKeys(adapter, ["type", "path"], label);
+			return {
+				type,
+				path: configuredPath(nonEmptyString(adapter["path"], `${label}.path`), configDir, `${label}.path`)
+			};
+		}
+		exactKeys(adapter, [
+			"type",
+			"path",
+			"include",
+			"recursive"
+		], label);
+		const include = adapter["include"] === void 0 ? void 0 : validateIncludePatterns(adapter["include"], `${label}.include`);
+		const recursive = adapter["recursive"] === void 0 ? true : booleanValue(adapter["recursive"], `${label}.recursive`);
+		return {
+			type,
+			path: configuredPath(nonEmptyString(adapter["path"], `${label}.path`), configDir, `${label}.path`),
+			include,
+			recursive
+		};
+	}
+	if (type === "unsupported") {
+		exactKeys(adapter, [
+			"type",
+			"kind",
+			"reason"
+		], label);
+		return {
+			type,
+			kind: nonEmptyString(adapter["kind"], `${label}.kind`),
+			reason: nonEmptyString(adapter["reason"], `${label}.reason`)
+		};
+	}
+	throw new Error(`${label}.type must be file, directory, or unsupported`);
+}
+async function buildFileSnapshot(path) {
+	const absolutePath = resolve(path);
+	const before = await lstat(absolutePath);
+	if (before.isSymbolicLink() || !before.isFile()) throw new Error(`file source must be a regular, non-symlink file: ${absolutePath}`);
+	const handle = await openWithoutFollowing(absolutePath);
+	let payload;
+	try {
+		const opened = await handle.stat();
+		if (!opened.isFile()) throw new Error(`file source changed while reading: ${absolutePath}`);
+		if (before.size !== opened.size || before.mtimeMs !== opened.mtimeMs) throw new Error(`file source changed while opening: ${absolutePath}`);
+		payload = await handle.readFile();
+		const after = await handle.stat();
+		if (opened.size !== after.size || opened.mtimeMs !== after.mtimeMs) throw new Error(`file source changed while reading: ${absolutePath}`);
+	} finally {
+		await handle.close();
+	}
+	assertSnapshotSize(payload);
+	return snapshotResult("file", basename(absolutePath), payload, 1, payload.byteLength, new Date(Math.trunc(before.mtimeMs)).toISOString());
+}
+async function readDirectoryFiles(root, canonicalRoot, recursive, matches) {
+	const files = [];
+	async function visit(directory) {
+		const entries = (await readdir(directory, { withFileTypes: true })).toSorted((left, right) => Buffer.compare(Buffer.from(left.name), Buffer.from(right.name)));
+		for (const entry of entries) {
+			const absolutePath = join(directory, entry.name);
+			const entryStat = await lstat(absolutePath);
+			if (entry.isSymbolicLink() || entryStat.isSymbolicLink()) throw new Error(`directory source contains a symlink: ${absolutePath}`);
+			const relativePath = canonicalRelativePath(root, absolutePath);
+			assertContained(canonicalRoot, await realpath(absolutePath), absolutePath);
+			if (entryStat.isDirectory()) {
+				if (recursive) await visit(absolutePath);
+				continue;
+			}
+			if (!entryStat.isFile()) throw new Error(`directory source contains a non-regular entry: ${absolutePath}`);
+			if (matches !== void 0 && !matches(relativePath)) continue;
+			const handle = await openWithoutFollowing(absolutePath);
+			let content;
+			try {
+				const before = await handle.stat();
+				if (!before.isFile()) throw new Error(`directory source entry changed while reading: ${absolutePath}`);
+				if (entryStat.size !== before.size || entryStat.mtimeMs !== before.mtimeMs) throw new Error(`directory source entry changed while opening: ${absolutePath}`);
+				content = await handle.readFile();
+				const after = await handle.stat();
+				if (before.size !== after.size || before.mtimeMs !== after.mtimeMs) throw new Error(`directory source entry changed while reading: ${absolutePath}`);
+			} finally {
+				await handle.close();
+			}
+			files.push({
+				path: relativePath,
+				bytes: content.byteLength,
+				sha256: sha256$3(content),
+				mtime: new Date(Math.trunc(entryStat.mtimeMs)).toISOString(),
+				content_base64: content.toString("base64"),
+				mtimeMs: entryStat.mtimeMs
+			});
+		}
+	}
+	await visit(root);
+	const secondScan = await scanDirectoryMetadata(root, canonicalRoot, recursive, matches);
+	const firstScan = files.map((file) => ({
+		path: file.path,
+		bytes: file.bytes,
+		mtimeMs: file.mtimeMs
+	})).toSorted(compareMetadata);
+	if (JSON.stringify(firstScan) !== JSON.stringify(secondScan)) throw new Error("directory source changed while snapshotting");
+	return files;
+}
+async function scanDirectoryMetadata(root, canonicalRoot, recursive, matches) {
+	const files = [];
+	async function visit(directory) {
+		const entries = (await readdir(directory, { withFileTypes: true })).toSorted((left, right) => Buffer.compare(Buffer.from(left.name), Buffer.from(right.name)));
+		for (const entry of entries) {
+			const absolutePath = join(directory, entry.name);
+			const entryStat = await lstat(absolutePath);
+			if (entry.isSymbolicLink() || entryStat.isSymbolicLink()) throw new Error(`directory source contains a symlink: ${absolutePath}`);
+			const relativePath = canonicalRelativePath(root, absolutePath);
+			assertContained(canonicalRoot, await realpath(absolutePath), absolutePath);
+			if (entryStat.isDirectory()) {
+				if (recursive) await visit(absolutePath);
+				continue;
+			}
+			if (!entryStat.isFile()) throw new Error(`directory source contains a non-regular entry: ${absolutePath}`);
+			if (matches === void 0 || matches(relativePath)) files.push({
+				path: relativePath,
+				bytes: entryStat.size,
+				mtimeMs: entryStat.mtimeMs
+			});
+		}
+	}
+	await visit(root);
+	return files.toSorted(compareMetadata);
+}
+function compareMetadata(left, right) {
+	return compareUtf8(left.path, right.path) || left.bytes - right.bytes || left.mtimeMs - right.mtimeMs;
+}
+async function openWithoutFollowing(path) {
+	const noFollow = typeof constants.O_NOFOLLOW === "number" ? constants.O_NOFOLLOW : 0;
+	try {
+		return await open(path, constants.O_RDONLY | noFollow);
+	} catch (error) {
+		if (isSymlinkOpenError(error)) throw new Error(`refusing to follow source symlink: ${path}`, { cause: error });
+		throw error;
+	}
+}
+function canonicalRelativePath(root, path) {
+	const value = relative(root, path);
+	const segments = value.split(sep);
+	if (value === "" || isAbsolute(value) || segments.some((segment) => segment === "" || segment === "." || segment === "..")) throw new Error(`source entry escapes its configured directory: ${path}`);
+	const canonical = segments.join("/");
+	if (canonical.startsWith("/") || canonical.includes("/../") || canonical.includes("\\")) throw new Error(`source entry has an unsafe relative path: ${path}`);
+	return canonical;
+}
+function assertContained(root, candidate, originalPath) {
+	const value = relative(root, candidate);
+	if (value === ".." || value.startsWith(`..${sep}`) || isAbsolute(value)) throw new Error(`source entry resolves outside its configured directory: ${originalPath}`);
+}
+function snapshotResult(adapterType, originalName, payload, fileCount, totalBytes, latestMtime) {
+	return {
+		adapterType,
+		originalName,
+		payload,
+		rawBytes: payload.byteLength,
+		rawSha256: sha256$3(payload),
+		fileCount,
+		totalBytes,
+		latestMtime
+	};
+}
+function observationInput(source, snapshot, capturedAt, declarations) {
+	return {
+		sourceId: source.sourceId,
+		sourceForm: source.sourceForm,
+		recordTypes: source.recordTypes,
+		bestandsstatus: source.bestandsstatus,
+		aktualitaetsstatus: source.aktualitaetsstatus,
+		declaredEntryCount: source.declaredEntryCount,
+		lastRawObservedAt: snapshot.latestMtime ?? void 0,
+		capturedAt,
+		declarations
+	};
+}
+async function readExplicitDeclarations(path, sourceId, recordTypes) {
+	const fileStat = await lstat(path);
+	if (fileStat.isSymbolicLink() || !fileStat.isFile()) throw new Error(`declarations_path must be a regular, non-symlink file: ${path}`);
+	const handle = await openWithoutFollowing(path);
+	let text;
+	try {
+		const opened = await handle.stat();
+		if (fileStat.size !== opened.size || fileStat.mtimeMs !== opened.mtimeMs) throw new Error(`declarations_path changed while opening: ${path}`);
+		text = await handle.readFile("utf8");
+		const after = await handle.stat();
+		if (opened.size !== after.size || opened.mtimeMs !== after.mtimeMs) throw new Error(`declarations_path changed while reading: ${path}`);
+	} finally {
+		await handle.close();
+	}
+	let value;
+	try {
+		value = JSON.parse(text);
+	} catch (error) {
+		throw new Error(`declarations_path is not valid JSON: ${path}`, { cause: error });
+	}
+	return parseMistakeRecordDeclarations(value, sourceId, recordTypes);
+}
+async function materializeSnapshot(snapshot, outboxDir) {
+	const directory = join(outboxDir, "snapshots", snapshot.rawSha256);
+	await mkdir(directory, {
+		recursive: true,
+		mode: 448
+	});
+	const path = join(directory, snapshot.originalName);
+	try {
+		await writeFile(path, snapshot.payload, {
+			flag: "wx",
+			mode: 384
+		});
+	} catch (error) {
+		if (!isAlreadyExists(error)) throw error;
+		if (!(await readFile(path)).equals(snapshot.payload)) throw new Error(`snapshot cache conflict for ${snapshot.rawSha256}`, { cause: error });
+	}
+	return path;
+}
+async function findVerifiedSnapshotReceipt(source, snapshot, input, outboxDir) {
+	const eventsDir = join(outboxDir, "events");
+	let names;
+	try {
+		names = (await readdir(eventsDir)).filter((name) => name.endsWith(".json")).toSorted();
+	} catch (error) {
+		if (isNotFound$1(error)) return null;
+		throw error;
+	}
+	let newest = null;
+	for (const name of names) {
+		const event = await readJson(join(eventsDir, name));
+		if (!eventMatchesSnapshot(event, source, snapshot, input)) continue;
+		const clientEventId = event.client_event_id;
+		const paths = [join(outboxDir, "receipts", `${clientEventId}.json`)];
+		try {
+			const receiptNames = (await readdir(join(outboxDir, "receipts", clientEventId))).filter((receiptName) => receiptName.endsWith(".json")).toSorted();
+			paths.push(...receiptNames.map((receiptName) => join(outboxDir, "receipts", clientEventId, receiptName)));
+		} catch (error) {
+			if (!isNotFound$1(error)) throw error;
+		}
+		for (const path of paths) {
+			const receipt = await readJson(path);
+			if (receiptMatchesSnapshot(receipt, source, snapshot, event.inventory.declared_entry_count, event.client_event_id)) {
+				if (newest === null || compareReceiptsByReceivedAt(receipt, newest) > 0) newest = receipt;
+			}
+		}
+	}
+	return newest;
+}
+function compareReceiptsByReceivedAt(left, right) {
+	return Date.parse(left.received_at) - Date.parse(right.received_at) || compareUtf8(left.event_id, right.event_id);
+}
+function receiptIsWithinHeartbeat(receipt, nowIso, heartbeatIntervalSeconds) {
+	const ageMilliseconds = Date.parse(nowIso) - Date.parse(receipt.received_at);
+	return ageMilliseconds >= 0 && ageMilliseconds < heartbeatIntervalSeconds * 1e3;
+}
+function eventMatchesSnapshot(value, source, snapshot, input) {
+	if (!isObject$3(value)) return false;
+	const inventory = value["inventory"];
+	if (!isObject$3(inventory)) return false;
+	const payloadBase64 = value["payload_base64"];
+	if (typeof payloadBase64 !== "string") return false;
+	const payload = Buffer.from(payloadBase64, "base64");
+	return payload.toString("base64") === payloadBase64 && payload.equals(snapshot.payload) && value["version"] === 1 && value["source_id"] === source.sourceId && value["source_form"] === source.sourceForm && arraysEqual(value["declared_record_types"], source.recordTypes) && value["declared_raw_bytes"] === snapshot.rawBytes && value["declared_raw_sha256"] === snapshot.rawSha256 && sha256$3(payload) === snapshot.rawSha256 && inventory["scope"] === "lower_bound" && inventory["bestandsstatus"] === source.bestandsstatus && inventory["aktualitaetsstatus"] === source.aktualitaetsstatus && inventory["declared_entry_count"] === (input.declaredEntryCount ?? null) && inventory["last_raw_observed_at"] === (input.lastRawObservedAt ?? null) && declarationsEqual(value["declarations"], input.declarations) && typeof value["client_event_id"] === "string" && UUID_RE.test(value["client_event_id"]);
+}
+function receiptMatchesSnapshot(value, source, snapshot, declaredEntryCount, expectedClientEventId) {
+	if (!isObject$3(value)) return false;
+	return value["version"] === 1 && value["accepted"] === true && value["source_id"] === source.sourceId && value["canonical_agent_id"] === source.agentId && value["raw_count"] === 1 && value["accepted_count"] === 1 && value["rejected_count"] === 0 && value["raw_bytes"] === snapshot.rawBytes && value["raw_sha256"] === snapshot.rawSha256 && value["declared_entry_count"] === declaredEntryCount && typeof value["event_id"] === "string" && UUID_RE.test(value["event_id"]) && typeof value["client_event_id"] === "string" && UUID_RE.test(value["client_event_id"]) && (expectedClientEventId === void 0 || value["client_event_id"] === expectedClientEventId) && typeof value["received_at"] === "string" && Number.isFinite(Date.parse(value["received_at"]));
+}
+function assertReceiptIdentity(receipt, source, snapshot, declaredEntryCount) {
+	if (!receiptMatchesSnapshot(receipt, source, snapshot, declaredEntryCount ?? null, receipt.client_event_id)) throw new Error(`receipt identity mismatch for ${source.sourceId}`);
+}
+function resultForSnapshot(source, snapshot, status, retry, receipt, previousReceipt) {
+	return {
+		source_id: source.sourceId,
+		agent_id: source.agentId,
+		adapter: source.adapter.type,
+		bestandsstatus: source.bestandsstatus,
+		aktualitaetsstatus: source.aktualitaetsstatus,
+		status,
+		retry: {
+			delivered: retry.delivered.length,
+			failed: retry.failed.length
+		},
+		entry_count: entryCountResult(source),
+		snapshot: {
+			file_count: snapshot.fileCount,
+			total_bytes: snapshot.totalBytes,
+			raw_bytes: snapshot.rawBytes,
+			raw_sha256: snapshot.rawSha256,
+			latest_mtime: snapshot.latestMtime
+		},
+		receipt,
+		...previousReceipt === void 0 ? {} : { previous_receipt_received_at: previousReceipt.received_at }
+	};
+}
+function configuredPath(value, configDir, label) {
+	if (isAbsolute(value)) return resolve(value);
+	if (value.replaceAll("\\", "/").split("/").some((segment) => segment === "..")) throw new Error(`${label} must not traverse above the config directory; use an absolute path instead`);
+	return resolve(configDir, value);
+}
+async function assertOutboxOutsideSource(adapter, outboxDir) {
+	if (adapter.type !== "directory") return;
+	const sourceStat = await lstat(adapter.path);
+	if (sourceStat.isSymbolicLink() || !sourceStat.isDirectory()) throw new Error(`directory source must be a regular, non-symlink directory: ${adapter.path}`);
+	const position = relative(await realpath(adapter.path), await canonicalProspectivePath(outboxDir));
+	if (position === "" || !isAbsolute(position) && position !== ".." && !position.startsWith(`..${sep}`)) throw new Error(`outbox must not be the directory source or be contained by it: ${adapter.path}`);
+}
+async function canonicalProspectivePath(path) {
+	let cursor = resolve(path);
+	const tail = [];
+	while (true) try {
+		await lstat(cursor);
+		return resolve(await realpath(cursor), ...tail.toReversed());
+	} catch (error) {
+		if (!isNotFound$1(error)) throw error;
+		const parent = dirname(cursor);
+		if (parent === cursor) throw error;
+		tail.push(basename(cursor));
+		cursor = parent;
+	}
+}
+function objectValue(value, label) {
+	if (!isObject$3(value) || Array.isArray(value)) throw new Error(`${label} must be an object`);
+	return value;
+}
+function exactKeys(value, keys, label) {
+	const allowed = new Set(keys);
+	const unknown = Object.keys(value).filter((key) => !allowed.has(key));
+	if (unknown.length > 0) throw new Error(`${label} contains unknown fields: ${unknown.join(", ")}`);
+}
+function nonEmptyString(value, label) {
+	if (typeof value !== "string" || value.trim() === "") throw new Error(`${label} must be a non-empty string`);
+	return value.trim();
+}
+function optionalNonEmptyString$1(value, label) {
+	return value === void 0 ? void 0 : nonEmptyString(value, label);
+}
+function optionalCount(value, label) {
+	if (value === void 0) return void 0;
+	if (!Number.isSafeInteger(value) || value < 0) throw new Error(`${label} must be a non-negative integer`);
+	return value;
+}
+function heartbeatInterval(value, label) {
+	if (value === void 0) return void 0;
+	if (!Number.isSafeInteger(value) || value < 60 || value >= TRANSPORT_STALE_AFTER_SECONDS) throw new Error(`${label} must be an integer from 60 through 86399 seconds`);
+	return value;
+}
+function optionalEnumValue(value, allowed, label) {
+	return value === void 0 ? void 0 : enumValue(value, allowed, label);
+}
+function enumValue(value, allowed, label) {
+	if (typeof value !== "string" || !allowed.includes(value)) throw new Error(`${label} must be one of: ${allowed.join(", ")}`);
+	return value;
+}
+function enumArray(value, allowed, label) {
+	if (!Array.isArray(value) || value.length === 0 || value.some((item) => typeof item !== "string" || !allowed.includes(item))) throw new Error(`${label} must contain one or more of: ${allowed.join(", ")}`);
+	const unique = [...new Set(value)];
+	if (unique.length !== value.length) throw new Error(`${label} must not contain duplicates`);
+	return unique;
+}
+function arraysEqual(value, expected) {
+	return Array.isArray(value) && value.length === expected.length && value.every((item, index) => item === expected[index]);
+}
+function booleanValue(value, label) {
+	if (typeof value !== "boolean") throw new Error(`${label} must be a boolean`);
+	return value;
+}
+function validateIncludePatterns(value, label) {
+	if (!Array.isArray(value) || value.length === 0) throw new Error(`${label} must be a non-empty array`);
+	const patterns = value.map((candidate, index) => {
+		if (typeof candidate !== "string" || candidate === "" || candidate.startsWith("/") || candidate.includes("\\") || candidate.split("/").some((segment) => segment === "" || segment === "." || segment === "..")) throw new Error(`${label}[${index}] must be a safe relative glob using forward slashes`);
+		if ([...candidate].length > 300 || candidate.includes("\0")) throw new Error(`${label}[${index}] is too long or unsafe`);
+		return candidate;
+	});
+	if (new Set(patterns).size !== patterns.length) throw new Error(`${label} must not contain duplicates`);
+	return patterns;
+}
+function compileIncludePatterns(patterns) {
+	const expressions = patterns.map((pattern) => new RegExp(`^${globExpression(pattern)}$`, "u"));
+	return (path) => expressions.some((expression) => expression.test(path));
+}
+function globExpression(pattern) {
+	let expression = "";
+	for (let index = 0; index < pattern.length; index += 1) {
+		const character = pattern[index];
+		if (character === "*" && pattern[index + 1] === "*") if (pattern[index + 2] === "/") {
+			expression += "(?:.*/)?";
+			index += 2;
+		} else {
+			expression += ".*";
+			index += 1;
+		}
+		else if (character === "*") expression += "[^/]*";
+		else if (character === "?") expression += "[^/]";
+		else expression += escapeRegex$1(character);
+	}
+	return expression;
+}
+function escapeRegex$1(value) {
+	return /[\\^$.*+?()[\]{}|]/.test(value) ? `\\${value}` : value;
+}
+function compareUtf8(left, right) {
+	return Buffer.compare(Buffer.from(left), Buffer.from(right));
+}
+function assertEntryCountBasis(source, snapshot) {
+	if (source.entryCountBasis === "files" && source.declaredEntryCount !== snapshot.fileCount) throw new Error(`declared entry count ${source.declaredEntryCount} does not match snapshot file count ${snapshot.fileCount}`);
+}
+function entryCountResult(source, checked = true) {
+	return {
+		declared: source.declaredEntryCount ?? null,
+		basis: source.entryCountBasis ?? null,
+		verification: source.entryCountBasis === "files" ? checked ? "matched_file_count" : "not_checked" : source.entryCountBasis === "declared" ? "not_derivable_from_raw_files" : "not_declared"
+	};
+}
+function declarationsEqual(value, expected) {
+	return expected === void 0 ? value === void 0 : JSON.stringify(value) === JSON.stringify(expected);
+}
+async function readJson(path) {
+	try {
+		return JSON.parse(await readFile(path, "utf8"));
+	} catch (error) {
+		if (isNotFound$1(error) || error instanceof SyntaxError) return null;
+		throw error;
+	}
+}
+function assertSnapshotSize(payload) {
+	if (payload.byteLength > 20971520) throw new Error(`source snapshot exceeds ${MAX_MISTAKE_SOURCE_BYTES} bytes`);
+}
+function sha256$3(value) {
+	return createHash("sha256").update(value).digest("hex");
+}
+function isObject$3(value) {
+	return typeof value === "object" && value !== null;
+}
+function isAlreadyExists(error) {
+	return isObject$3(error) && error["code"] === "EEXIST";
+}
+function isNotFound$1(error) {
+	return isObject$3(error) && error["code"] === "ENOENT";
+}
+function isSymlinkOpenError(error) {
+	return isObject$3(error) && ["ELOOP", "EMLINK"].includes(String(error["code"]));
+}
+function errorMessage$5(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+function waitForInterval(milliseconds, signal) {
+	if (signal?.aborted) return Promise.resolve();
+	let timeout;
+	const delay = new Promise((resolveDelay) => {
+		timeout = setTimeout(resolveDelay, milliseconds);
+	});
+	if (signal === void 0) return delay;
+	let stop;
+	const aborted = new Promise((resolveAbort) => {
+		stop = resolveAbort;
+		signal.addEventListener("abort", stop, { once: true });
+	});
+	return Promise.race([delay, aborted]).finally(() => {
+		if (timeout !== void 0) clearTimeout(timeout);
+		if (stop !== void 0) signal.removeEventListener("abort", stop);
+	});
+}
+//#endregion
+//#region src/cli/sub/mistakes.ts
+const DEFAULT_TOKEN_ENV = "BLUN_MISTAKE_INFLOW_TOKEN";
+const DEFAULT_ENDPOINT_ENV = "BLUN_MISTAKE_INFLOW_URL";
+function registerMistakesCommand(parent, overrides = {}) {
+	const deps = resolveDeps(overrides);
+	const mistakes = parent.command("mistakes").description("Upload and inspect append-only mistake source snapshots.");
+	mistakes.command("upload").description("Queue a source snapshot locally, then upload it.").argument("<path>", "Source file to upload.").requiredOption("--source <id>", "Registered source id.").addOption(choiceOption("--form <form>", "Source form.", MISTAKE_SOURCE_FORMS, "unknown")).option("--record-types <types>", "Comma-separated declared record types.", "unknown").option("--entries <count>", "Declared logical entry count.", parseNonNegativeInteger).addOption(choiceOption("--bestandsstatus <status>", "Inventory status.", MISTAKE_INVENTORY_STATUSES, "unverified")).addOption(choiceOption("--aktualitaetsstatus <status>", "Actuality status.", MISTAKE_ACTUALITY_STATUSES, "unverified")).option("--last-entry-at <timestamp>", "Timestamp of the newest raw entry.").option("--endpoint <url>", `Inflow URL (or ${DEFAULT_ENDPOINT_ENV}).`).option("--token-env <name>", "Environment variable containing the bearer token.", DEFAULT_TOKEN_ENV).option("--outbox <path>", "Local durable outbox directory.").action(async (path, options) => {
+		await run$1(deps, async () => {
+			const connection = connectionOptions(deps, options);
+			const receipt = await uploadMistakeObservation({
+				filePath: resolve(path),
+				sourceId: options.source,
+				sourceForm: options.form,
+				recordTypes: parseRecordTypes(options.recordTypes),
+				bestandsstatus: options.bestandsstatus,
+				aktualitaetsstatus: options.aktualitaetsstatus,
+				declaredEntryCount: options.entries,
+				lastRawObservedAt: options.lastEntryAt,
+				capturedAt: deps.now().toISOString()
+			}, connection);
+			deps.stdout.write(`${JSON.stringify(receipt)}\n`);
+		});
+	});
+	mistakes.command("retry").description("Retry every queued snapshot that has no verified receipt.").option("--endpoint <url>", `Inflow URL (or ${DEFAULT_ENDPOINT_ENV}).`).option("--token-env <name>", "Environment variable containing the bearer token.", DEFAULT_TOKEN_ENV).option("--outbox <path>", "Local durable outbox directory.").action(async (options) => {
+		await run$1(deps, async () => {
+			const result = await drainMistakeOutbox(connectionOptions(deps, options));
+			deps.stdout.write(`${JSON.stringify(result)}\n`);
+			if (result.failed.length > 0) deps.exit(1);
+		});
+	});
+	mistakes.command("sync").description("Retry and upload every configured file or directory source once.").requiredOption("--config <path>", "Source registry JSON file.").option("--endpoint <url>", "Override the configured inflow URL for every supported source.").option("--outbox <path>", "Override the configured local outbox root.").action(async (options) => {
+		await run$1(deps, async () => {
+			const result = await syncMistakeSources({
+				configPath: resolve(options.config),
+				env: deps.env,
+				endpoint: options.endpoint,
+				outboxDir: options.outbox === void 0 ? void 0 : resolve(options.outbox)
+			});
+			deps.stdout.write(`${JSON.stringify(result)}\n`);
+			if (result.results.some((item) => item.status === "failed" || item.status === "blocked")) deps.exit(2);
+		});
+	});
+	mistakes.command("watch").description("Run source sync repeatedly in the foreground until interrupted.").requiredOption("--config <path>", "Source registry JSON file.").option("--endpoint <url>", "Override the configured inflow URL for every supported source.").option("--outbox <path>", "Override the configured local outbox root.").option("--interval <seconds>", "Foreground sync interval in seconds.", parseWatchInterval, 300).action(async (options) => {
+		await run$1(deps, async () => {
+			const controller = new AbortController();
+			const stop = () => controller.abort();
+			process.once("SIGINT", stop);
+			process.once("SIGTERM", stop);
+			try {
+				await watchMistakeSources({
+					configPath: resolve(options.config),
+					env: deps.env,
+					endpoint: options.endpoint,
+					outboxDir: options.outbox === void 0 ? void 0 : resolve(options.outbox),
+					intervalMs: options.interval * 1e3,
+					signal: controller.signal,
+					onRun: (result) => {
+						deps.stdout.write(`${JSON.stringify(result)}\n`);
+					}
+				});
+			} finally {
+				process.off("SIGINT", stop);
+				process.off("SIGTERM", stop);
+			}
+		});
+	});
+	mistakes.command("status").description("Show per-source inventory, actuality, and 24-hour watchdog state.").option("--endpoint <url>", `Inflow URL (or ${DEFAULT_ENDPOINT_ENV}).`).option("--token-env <name>", "Environment variable containing the bearer token.", DEFAULT_TOKEN_ENV).option("--no-fail-on-red", "Return success even when one or more sources are red.").action(async (options) => {
+		await run$1(deps, async () => {
+			const connection = connectionOptions(deps, options);
+			const status = await getMistakeInflowStatus(connection.endpoint, connection.token);
+			deps.stdout.write(`${JSON.stringify(status)}\n`);
+			if (options.failOnRed && hasRedSource(status)) deps.exit(2);
+		});
+	});
+	for (const action of ["remove", "restore"]) mistakes.command(action).description(action === "remove" ? "Append a manual removal marker without deleting raw data." : "Append a restore marker for a previously removed observation.").argument("<eventId>", "Observation event id.").requiredOption("--reason <text>", "Auditable reason for the state change.").option("--endpoint <url>", `Inflow URL (or ${DEFAULT_ENDPOINT_ENV}).`).option("--token-env <name>", "Environment variable containing the bearer token.", DEFAULT_TOKEN_ENV).action(async (eventId, options) => {
+		await run$1(deps, async () => {
+			const connection = connectionOptions(deps, options);
+			const result = await changeMistakeObservationState(action, eventId, options.reason, connection.endpoint, connection.token);
+			deps.stdout.write(`${JSON.stringify(result)}\n`);
+		});
+	});
+}
+async function run$1(deps, operation) {
+	try {
+		await operation();
+	} catch (error) {
+		deps.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+		deps.exit(1);
+	}
+}
+function connectionOptions(deps, options) {
+	const endpoint = options.endpoint ?? deps.env[DEFAULT_ENDPOINT_ENV];
+	if (!endpoint) throw new Error(`missing --endpoint or ${DEFAULT_ENDPOINT_ENV}`);
+	const token = deps.env[options.tokenEnv];
+	if (!token || token.trim() === "") throw new Error(`missing bearer token in ${options.tokenEnv}`);
+	return {
+		endpoint,
+		token,
+		outboxDir: resolve(options.outbox ?? join(resolveBlunHome$1(), "mistake", "inflow-outbox"))
+	};
+}
+function parseRecordTypes(value) {
+	const values = [...new Set(value.split(",").map((item) => item.trim()).filter(Boolean))];
+	if (values.length === 0 || values.some((value) => !MISTAKE_RECORD_TYPES.includes(value))) throw new Error(`record types must be one or more of: ${MISTAKE_RECORD_TYPES.join(", ")}`);
+	return values;
+}
+function parseNonNegativeInteger(value) {
+	if (!/^\d+$/.test(value)) throw new Error("entry count must be a non-negative integer");
+	const parsed = Number(value);
+	if (!Number.isSafeInteger(parsed)) throw new Error("entry count is too large");
+	return parsed;
+}
+function parseWatchInterval(value) {
+	if (!/^\d+$/.test(value)) throw new Error("watch interval must be a positive integer");
+	const parsed = Number(value);
+	if (!Number.isSafeInteger(parsed) || parsed < 1) throw new Error("watch interval must be at least one second");
+	return parsed;
+}
+function hasRedSource(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const sources = value["sources"];
+	return Array.isArray(sources) && sources.some((source) => typeof source === "object" && source !== null && source["watchdog"] === "red");
+}
+function choiceOption(flags, description, choices, defaultValue) {
+	return new Option(flags, description).choices([...choices]).default(defaultValue);
+}
+function resolveDeps(overrides) {
+	return {
+		env: overrides.env ?? process.env,
+		now: overrides.now ?? (() => /* @__PURE__ */ new Date()),
+		stdout: overrides.stdout ?? process.stdout,
+		stderr: overrides.stderr ?? process.stderr,
+		exit: overrides.exit ?? ((code) => process.exit(code))
+	};
+}
+//#endregion
 //#region src/personal-memory/phase1-contract.json
 var clientOperations = {
 	"settingsRead": {
@@ -338829,9 +340596,9 @@ function isErrno$1(error, code) {
 	return error.code === code;
 }
 function outputFailure(error, cleanupError) {
-	return new Error(`${errorMessage$3(error)} Output reservation cleanup failed: ${errorMessage$3(cleanupError)}`, { cause: new AggregateError([error, cleanupError], "Output reservation cleanup failed.") });
+	return new Error(`${errorMessage$4(error)} Output reservation cleanup failed: ${errorMessage$4(cleanupError)}`, { cause: new AggregateError([error, cleanupError], "Output reservation cleanup failed.") });
 }
-function errorMessage$3(error) {
+function errorMessage$4(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
@@ -339445,7 +341212,7 @@ async function handleProof(deps, options) {
 		await reservation.write(proof);
 	} catch (error) {
 		await reservation?.abort().catch(() => void 0);
-		deps.stderr.write(`${errorMessage$2(error)}\n`);
+		deps.stderr.write(`${errorMessage$3(error)}\n`);
 		deps.exit(1);
 	}
 	deps.stdout.write(`${outputPath}\n`);
@@ -339477,7 +341244,7 @@ function createDefaultProofDeps(overrides = {}) {
 function defaultProofFilename(now) {
 	return `proof-${now.toISOString().replaceAll(/[:.]/g, "-")}.json`;
 }
-function errorMessage$2(error) {
+function errorMessage$3(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 function samePath$2(left, right) {
@@ -395793,7 +397560,7 @@ async function abortAndFail(deps, reservation, error) {
 	if (reservation !== void 0) try {
 		await reservation.abort();
 	} catch (cleanupError) {
-		fail(deps, new Error(`${errorMessage$1(error)} Output reservation cleanup failed: ${errorMessage$1(cleanupError)}`, { cause: new AggregateError([error, cleanupError], "Output reservation cleanup failed.") }));
+		fail(deps, new Error(`${errorMessage$2(error)} Output reservation cleanup failed: ${errorMessage$2(cleanupError)}`, { cause: new AggregateError([error, cleanupError], "Output reservation cleanup failed.") }));
 	}
 	fail(deps, error);
 }
@@ -395804,10 +397571,10 @@ function stringArray(value) {
 	return Array.isArray(value) && value.every((item) => typeof item === "string") ? value : [];
 }
 function fail(deps, error) {
-	deps.stderr.write(`${errorMessage$1(error)}\n`);
+	deps.stderr.write(`${errorMessage$2(error)}\n`);
 	return deps.exit(1);
 }
-function errorMessage$1(error) {
+function errorMessage$2(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
@@ -396534,14 +398301,14 @@ async function run(deps, operation) {
 	try {
 		await operation();
 	} catch (error) {
-		deps.stderr.write(`${errorMessage(error)}\n`);
+		deps.stderr.write(`${errorMessage$1(error)}\n`);
 		deps.exit(1);
 	}
 }
 function writeJson(deps, value) {
 	deps.stdout.write(`${JSON.stringify(value, null, 2)}\n`);
 }
-function errorMessage(error) {
+function errorMessage$1(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
@@ -396574,6 +398341,7 @@ function createProgram(version, onMain, onPluginNodeRunner = () => {}, onUpgrade
 	registerAcpCommand(program);
 	registerServerCommand(program);
 	registerLoginCommand(program);
+	registerMistakesCommand(program);
 	registerPersonalMemoryCommand(program);
 	registerDoctorCommand(program);
 	registerVisCommand(program);
@@ -414339,7 +416107,7 @@ function appearanceSelectorCopy() {
 		surface: uiText("appearance.surface"),
 		preview: uiText("appearance.preview"),
 		colorHint: uiText("appearance.colorHint"),
-		contrastHint: uiText("appearance.contrastHint"),
+		contrastHint: uiText("appearance.contrastHint", { ratio: "{ratio}" }),
 		footer: uiText("appearance.footer")
 	};
 }
@@ -414491,7 +416259,6 @@ function showSettingsSelector(host) {
 	}));
 }
 function handleSettingsSelection(host, value) {
-	host.restoreEditor();
 	switch (value) {
 		case "effort":
 			handleEffortCommand(host, "");
@@ -414515,9 +416282,11 @@ function handleSettingsSelection(host, value) {
 			showExperimentsPanel(host);
 			return;
 		case "usage":
+			host.restoreEditor();
 			showUsage(host);
 			return;
 		case "inline-suggest":
+			host.restoreEditor();
 			showInlineSuggestStatus(host);
 			return;
 	}
@@ -509766,7 +511535,11 @@ var BlunTUI = class {
 			this.applyStartupPermissionAndPlanToAppState();
 		}
 		this.hideSessionPicker();
-		if (applyStartupModes) await this.promptStartupResumeGoalIfNeeded();
+		if (applyStartupModes) {
+			await this.refreshPersonalMemory(true);
+			await this.authFlow.refreshManagedQuotaWindows();
+			await this.promptStartupResumeGoalIfNeeded();
+		}
 	}
 	showApprovalPanel(payload) {
 		this.patchLivePane({ pendingApproval: { data: payload } });
@@ -511439,6 +513212,103 @@ function runNativeAssetSmokeIfRequested() {
 	return true;
 }
 //#endregion
+//#region src/mistakes/automatic-sync.ts
+const AUTOMATIC_MISTAKE_SYNC_CONFIG_ENV = "BLUN_MISTAKE_SYNC_CONFIG";
+const DEFAULT_DEPS = {
+	lstat,
+	lock: (path) => import_proper_lockfile.default.lock(path, {
+		realpath: false,
+		retries: 0,
+		stale: 3e4,
+		update: 1e4
+	}),
+	watch: (options) => watchMistakeSources(options),
+	logger: log
+};
+async function startAutomaticMistakeSync(options, deps = DEFAULT_DEPS) {
+	const env = options.env ?? process.env;
+	const configuredPath = env[AUTOMATIC_MISTAKE_SYNC_CONFIG_ENV]?.trim();
+	const configPath = resolve(configuredPath && configuredPath.length > 0 ? configuredPath : join(options.homeDir, "mistake", "source-sync.json"));
+	const inactive = () => ({
+		active: false,
+		configPath,
+		stop: async () => {}
+	});
+	try {
+		const stat = await deps.lstat(configPath);
+		if (stat.isSymbolicLink() || !stat.isFile()) {
+			deps.logger.warn("automatic mistake sync config is not a regular file", { configPath });
+			return inactive();
+		}
+	} catch (error) {
+		if (isErrorCode(error, "ENOENT")) return inactive();
+		deps.logger.warn("automatic mistake sync config is unavailable", {
+			configPath,
+			error: errorMessage(error)
+		});
+		return inactive();
+	}
+	let release;
+	try {
+		release = await deps.lock(configPath);
+	} catch (error) {
+		if (isErrorCode(error, "ELOCKED")) return inactive();
+		deps.logger.warn("automatic mistake sync lock failed", {
+			configPath,
+			error: errorMessage(error)
+		});
+		return inactive();
+	}
+	const controller = new AbortController();
+	let released = false;
+	const releaseOnce = async () => {
+		if (released) return;
+		released = true;
+		try {
+			await release();
+		} catch {}
+	};
+	const watchPromise = deps.watch({
+		configPath,
+		env,
+		intervalMs: options.intervalMs ?? 3e5,
+		signal: controller.signal,
+		onRun: (run) => logRun(deps.logger, run)
+	}).catch((error) => {
+		deps.logger.warn("automatic mistake sync stopped", {
+			configPath,
+			error: errorMessage(error)
+		});
+	}).finally(releaseOnce);
+	return {
+		active: true,
+		configPath,
+		stop: async () => {
+			controller.abort();
+			await watchPromise;
+		}
+	};
+}
+function logRun(logger, run) {
+	const counts = Object.fromEntries([
+		"uploaded",
+		"heartbeat",
+		"unchanged",
+		"blocked",
+		"failed"
+	].map((status) => [status, run.results.filter((result) => result.status === status).length]));
+	logger.info("automatic mistake sync completed", {
+		configPath: run.config_path,
+		...counts
+	});
+}
+function isErrorCode(error, code) {
+	return typeof error === "object" && error !== null && error.code === code;
+}
+function errorMessage(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+//#endregion
 //#region src/main.ts
 /**
 * BLUN King entry point.
@@ -511471,9 +513341,15 @@ async function handleMainCommand(opts, version) {
 	} : { track });
 	if (preflightResult === "exit") process.exit(0);
 	const updateStartupNotice = typeof preflightResult === "object" ? preflightResult.startupNotice : void 0;
-	if (validated.uiMode === "print") {
+	const mistakeSync = await startAutomaticMistakeSync({
+		homeDir: resolveBlunHome$1(),
+		env: process.env
+	});
+	if (validated.uiMode === "print") try {
 		await runPrompt(validated.options, version);
 		return { headlessCompleted: true };
+	} finally {
+		await mistakeSync.stop();
 	}
 	await runShell(validated.options, version, updateStartupNotice);
 	return { headlessCompleted: false };