comisai 1.0.44 → 1.0.46

package/node_modules/@comis/skills/dist/tools/media/ssrf-fetcher.js

@@ -23,9 +23,9 @@
  * @module
  */
 import { validateUrl, validateLocalServerUrl } from "@comis/core";
-import { fromPromise, suppressError } from "@comis/shared";
+import { fromPromise, suppressError, tryCatch } from "@comis/shared";
 import { fetch } from "undici";
-import { createPinnedAgent } from "../integrations/pinned-fetch.js";
+import { createPinnedAgent, fetchPinned } from "../integrations/pinned-fetch.js";
 /**
  * Classify a fetch error into an actionable errorKind + hint for structured logging.
  */
@@ -69,9 +69,156 @@ function classifyFetchError(error) {
 }
 // ---------------------------------------------------------------------------
 // Agent-based DNS pinning — `createPinnedAgent` is the shared primitive in
-// ../integrations/pinned-fetch.ts (CR-01, Phase 197); this fetcher reuses it
+// ../integrations/pinned-fetch.ts; this fetcher reuses it
 // rather than hand-rolling its own copy.
 // ---------------------------------------------------------------------------
+/**
+ * Case-insensitive host match against an allowlist. An entry beginning with `.`
+ * matches that domain and any subdomain of it — anchored on the leading dot, so a
+ * look-alike host (e.g. `evilexample.com`) never matches `.example.com`; any other
+ * entry is an exact host match. Mirrors the host-suffix allowlist semantics used
+ * for service-host checks elsewhere.
+ */
+function matchesSuffix(host, list) {
+    const h = host.toLowerCase();
+    return list.some((entry) => {
+        const e = entry.toLowerCase();
+        return e.startsWith(".") ? h === e.slice(1) || h.endsWith(e) : h === e;
+    });
+}
+/**
+ * Read a response body into a Buffer, enforcing `maxBytes` against BOTH the
+ * declared Content-Length (pre-stream) and the actual streamed size (a server
+ * may under-declare). Shared by the single-shot and redirect-following paths.
+ */
+async function collectCappedBody(response, maxBytes) {
+    // Content-Length pre-check — abort before streaming if declared size exceeds limit
+    const contentLength = response.headers.get("content-length");
+    if (contentLength) {
+        const declared = parseInt(contentLength, 10);
+        if (!isNaN(declared) && declared > maxBytes) {
+            // Consume and discard body to avoid socket leak
+            await response.body?.cancel();
+            throw new Error(`Content-Length ${declared} exceeds limit of ${maxBytes} bytes`);
+        }
+    }
+    // Stream body with size enforcement (server may lie about Content-Length)
+    const chunks = [];
+    let totalBytes = 0;
+    const reader = response.body?.getReader();
+    if (!reader)
+        throw new Error("No response body");
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            totalBytes += value.byteLength;
+            if (totalBytes > maxBytes) {
+                await reader.cancel();
+                throw new Error(`Response body exceeded limit of ${maxBytes} bytes (read ${totalBytes})`);
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    return Buffer.concat(chunks);
+}
+// ---------------------------------------------------------------------------
+// Opt-in authenticated + redirect-revalidating fetch path
+// ---------------------------------------------------------------------------
+/**
+ * The authenticated, redirect-following fetch used when `opts` is supplied.
+ *
+ * Every hop (the initial URL and each redirect target) is re-validated through
+ * `validateUrl` — a DNS-resolve + IP-range/cloud-metadata classification — and the
+ * socket is pinned to the validated IP, so a DNS-rebind or a redirect to an
+ * internal/metadata address is rejected before a connection is opened. The auth
+ * header is recomputed per hop and attached ONLY when the validated host is on
+ * `authAllowHosts`, so it is dropped the moment a redirect crosses to an
+ * off-allowlist host. The chain is bounded by `maxHops`. The auth header and the
+ * raw URL/Location are never written to a log field.
+ */
+async function runAuthenticatedFetch(config, logger, url, opts) {
+    const maxHops = opts.maxHops ?? 5;
+    const allowHosts = opts.authAllowHosts ?? [];
+    return fromPromise((async () => {
+        let current = url;
+        for (let hop = 0; hop <= maxHops; hop++) {
+            // Per-hop SSRF firewall: DNS-resolve + IP-range/metadata classification.
+            const validated = await validateUrl(current);
+            if (!validated.ok) {
+                logger.error({
+                    hop,
+                    err: validated.error,
+                    errorKind: "validation",
+                    hint: "A fetch hop resolved to a blocked or internal address and was stopped before connecting — the redirect target failed SSRF validation",
+                }, "SSRF-guarded auth fetch failed — hop rejected by SSRF validation");
+                throw validated.error;
+            }
+            const { hostname, ip } = validated.value;
+            const authAttached = opts.authHeader !== undefined && matchesSuffix(hostname, allowHosts);
+            const headers = authAttached
+                ? { authorization: opts.authHeader }
+                : {};
+            logger.debug({ hop, resolvedIp: ip, authAttached, step: "ssrf-auth-hop" }, "SSRF-guarded auth fetch — hop validated");
+            // Socket pinned to the validated IP (rebinding TOCTOU closed); redirects
+            // returned to us so the NEXT hop re-enters the firewall above.
+            let response;
+            try {
+                response = await fetchPinned(current, ip, {
+                    headers,
+                    redirect: "manual",
+                    signal: AbortSignal.timeout(30_000),
+                });
+            }
+            catch (error) {
+                const classified = classifyFetchError(error);
+                logger.warn({ hop, err: error, errorKind: classified.errorKind, hint: classified.hint }, "SSRF-guarded auth fetch failed — network error");
+                throw error;
+            }
+            // A 3xx is followed manually; the bearer is recomputed (and dropped) on the next hop.
+            if (response.status >= 300 && response.status < 400) {
+                const location = response.headers.get("location");
+                await response.body?.cancel();
+                if (!location) {
+                    throw new Error("Redirect response missing a Location header");
+                }
+                // Parse the redirect target under the per-hop failure contract: a
+                // malformed Location must carry the same classified hint+errorKind as
+                // every other failure branch (§2.7), not a bare TypeError that reaches
+                // the caller stripped of which hop failed and why.
+                const next = tryCatch(() => new URL(location, current).toString());
+                if (!next.ok) {
+                    logger.warn({
+                        hop,
+                        errorKind: "validation",
+                        hint: "Redirect Location was not a parseable URL — the hop was stopped before re-validation",
+                    }, "SSRF-guarded auth fetch failed — malformed redirect target");
+                    throw next.error;
+                }
+                current = next.value;
+                continue;
+            }
+            if (!response.ok) {
+                logger.error({
+                    hop,
+                    status: response.status,
+                    errorKind: "network",
+                    hint: "The remote host returned an HTTP error — check that the media URL is reachable and the auth header is accepted",
+                }, "SSRF-guarded auth fetch failed — HTTP error response");
+                throw new Error(`HTTP ${response.status}`);
+            }
+            const buffer = await collectCappedBody(response, config.maxBytes);
+            const mimeType = response.headers.get("content-type") ?? "application/octet-stream";
+            logger.debug({ hop, resolvedIp: ip, sizeBytes: buffer.length, step: "ssrf-auth-complete" }, "SSRF-guarded auth fetch complete");
+            return { buffer, mimeType, sizeBytes: buffer.length, resolvedIp: ip };
+        }
+        throw new Error(`Redirect hop limit (${maxHops}) exceeded`);
+    })());
+}
 /**
  * Create an SSRF-guarded HTTP fetch utility.
  *
@@ -86,13 +233,19 @@ function classifyFetchError(error) {
  */
 export function createSsrfGuardedFetcher(config, logger) {
     return {
-        async fetch(url) {
+        async fetch(url, opts) {
+            // Opt-in authenticated + redirect-revalidating path. When no opts are
+            // supplied the single-shot path below runs unchanged (redirect blocked,
+            // no auth header) so existing callers are byte-for-byte unaffected.
+            if (opts !== undefined) {
+                return runAuthenticatedFetch(config, logger, url, opts);
+            }
             return fromPromise((async () => {
                 // 1. Validate URL via SSRF guard (DNS resolution + IP range check + DNS pinning).
-                //    MEDIA-INPUT-SSRF: a URL whose ORIGIN exactly matches a configured trusted apiRoot
+                //    A URL whose ORIGIN exactly matches a configured trusted apiRoot
                 //    (a self-hosted local Bot API server / the emulator) is validated leniently
                 //    (loopback/private permitted via validateLocalServerUrl); everything else — incl. any
-                //    other loopback URL — goes through strict validateUrl (the SSRF firewall, UC-10).
+                //    other loopback URL — goes through strict validateUrl (the SSRF firewall).
                 let urlOrigin;
                 try {
                     urlOrigin = new URL(url).origin;
@@ -135,39 +288,8 @@ export function createSsrfGuardedFetcher(config, logger) {
                         }, "SSRF-guarded fetch failed — HTTP error response");
                         throw new Error(`HTTP ${response.status} fetching ${url}`);
                     }
-                    // 3. Content-Length pre-check — abort before streaming if declared size exceeds limit
-                    const contentLength = response.headers.get("content-length");
-                    if (contentLength) {
-                        const declared = parseInt(contentLength, 10);
-                        if (!isNaN(declared) && declared > config.maxBytes) {
-                            // Consume and discard body to avoid socket leak
-                            await response.body?.cancel();
-                            throw new Error(`Content-Length ${declared} exceeds limit of ${config.maxBytes} bytes`);
-                        }
-                    }
-                    // 4. Stream body with size enforcement (server may lie about Content-Length)
-                    const chunks = [];
-                    let totalBytes = 0;
-                    const reader = response.body?.getReader();
-                    if (!reader)
-                        throw new Error("No response body");
-                    try {
-                        while (true) {
-                            const { done, value } = await reader.read();
-                            if (done)
-                                break;
-                            totalBytes += value.byteLength;
-                            if (totalBytes > config.maxBytes) {
-                                await reader.cancel();
-                                throw new Error(`Response body exceeded limit of ${config.maxBytes} bytes (read ${totalBytes})`);
-                            }
-                            chunks.push(value);
-                        }
-                    }
-                    finally {
-                        reader.releaseLock();
-                    }
-                    const buffer = Buffer.concat(chunks);
+                    // 3. Content-Length pre-check + streamed-byte cap (shared with the auth path).
+                    const buffer = await collectCappedBody(response, config.maxBytes);
                     const mimeType = response.headers.get("content-type") ?? "application/octet-stream";
                     logger.debug({ url, resolvedIp: ip, sizeBytes: buffer.length, mimeType }, "SSRF-guarded fetch complete");
                     return { buffer, mimeType, sizeBytes: buffer.length, resolvedIp: ip };

package/node_modules/@comis/skills/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/skills",
   "private": true,
-  "version": "1.0.44",
+  "version": "1.0.46",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Skill system, MCP integration, and tool sandbox for Comis agents",

package/node_modules/@comis/web/dist/assets/{agent-detail-DTS1F-Ms.js → agent-detail-DyWC3FcQ.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,d as n,g as r,h as i,l as a,m as o,n as s,o as c,p as l,r as u,t as d,y as f}from"./decorate-C2wzL86z.js";import{a as p,i as m}from"./index-dqPriKJN.js";import"./ic-breadcrumb-CamOsLdw.js";import"./ic-tag-C5SwX7RT.js";import"./ic-confirm-dialog-JnoEg4kp.js";import"./ic-relative-time-DCCDywYC.js";function h(e){return e.toLocaleString(`en-US`)}var g=class extends r{constructor(...e){super(...e),this.label=``,this.used=0,this.total=0,this.warnThreshold=70,this.dangerThreshold=90}static{this.styles=[u,e`
+import{S as e,_ as t,d as n,g as r,h as i,l as a,m as o,n as s,o as c,p as l,r as u,t as d,y as f}from"./decorate-C2wzL86z.js";import{a as p,i as m}from"./index-CZJxmgnn.js";import"./ic-breadcrumb-CamOsLdw.js";import"./ic-tag-C5SwX7RT.js";import"./ic-confirm-dialog-JnoEg4kp.js";import"./ic-relative-time-DCCDywYC.js";function h(e){return e.toLocaleString(`en-US`)}var g=class extends r{constructor(...e){super(...e),this.label=``,this.used=0,this.total=0,this.warnThreshold=70,this.dangerThreshold=90}static{this.styles=[u,e`
       :host {
         display: block;
       }

package/node_modules/@comis/web/dist/assets/{agent-editor-Ciyu1WDy.js → agent-editor-BEysejQV.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,d as n,g as r,h as i,m as a,n as o,p as s,r as c,t as l,y as u}from"./decorate-C2wzL86z.js";import{a as d}from"./index-dqPriKJN.js";import"./ic-breadcrumb-CamOsLdw.js";import"./ic-tag-C5SwX7RT.js";import"./ic-array-editor-Ba7psX7q.js";function f(e,t=0){let n=[],r=`  `.repeat(t);for(let[i,a]of Object.entries(e))if(!(a==null||a===``))if(Array.isArray(a)){if(a.length===0)continue;n.push(`${r}${i}:`);for(let e of a)if(typeof e==`object`&&e&&!Array.isArray(e)){let i=f(e,t+2).split(`
+import{S as e,_ as t,d as n,g as r,h as i,m as a,n as o,p as s,r as c,t as l,y as u}from"./decorate-C2wzL86z.js";import{a as d}from"./index-CZJxmgnn.js";import"./ic-breadcrumb-CamOsLdw.js";import"./ic-tag-C5SwX7RT.js";import"./ic-array-editor-Ba7psX7q.js";function f(e,t=0){let n=[],r=`  `.repeat(t);for(let[i,a]of Object.entries(e))if(!(a==null||a===``))if(Array.isArray(a)){if(a.length===0)continue;n.push(`${r}${i}:`);for(let e of a)if(typeof e==`object`&&e&&!Array.isArray(e)){let i=f(e,t+2).split(`
 `).filter(Boolean);if(i.length>0){n.push(`${r}  - ${i[0].trimStart()}`);for(let e=1;e<i.length;e++)n.push(`${r}    ${i[e].trimStart()}`)}}else n.push(`${r}  - ${p(e)}`)}else if(typeof a==`object`){let e=f(a,t+1);e.trim()&&(n.push(`${r}${i}:`),n.push(e))}else n.push(`${r}${i}: ${p(a)}`);return n.join(`
 `)}function p(e){return typeof e==`string`?/[:#{}[\],&*?|>!%@`'"]/.test(e)||e.includes(`
 `)?`"${e.replace(/\\/g,`\\\\`).replace(/"/g,`\\"`)}"`:e:typeof e==`boolean`?e?`true`:`false`:String(e)}function m(){let e=new Set,t=t=>{e.size>0&&t.preventDefault()};return{get isDirty(){return e.size>0},markDirty(t=`_default`){e.add(t)},markClean(){e.clear()},confirmNavigation(){return e.size===0?!0:window.confirm(`You have unsaved changes. Discard and leave?`)},attach(){window.addEventListener(`beforeunload`,t)},detach(){window.removeEventListener(`beforeunload`,t)},dirtyFields(){return[...e]}}}function h(e,t,n){return e[t]??n}function g(e,t,n,r,i){let a=h(e,t,void 0),o=i?.step??`1`,s=o.includes(`.`)?o.split(`.`)[1].length:0,c=a===void 0?``:(s>0?Number(Number(a).toFixed(s)):a).toString(),l=i?.id??`field-${t.replace(/\./g,`-`)}`;return u`

package/node_modules/@comis/web/dist/assets/{agent-list-A1K8cnDs.js → agent-list-C3o2qKcC.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,d as n,g as r,h as i,m as a,n as o,o as s,p as c,r as l,t as u,y as d}from"./decorate-C2wzL86z.js";import{a as f,i as p}from"./index-dqPriKJN.js";import"./ic-tag-C5SwX7RT.js";import"./ic-confirm-dialog-JnoEg4kp.js";import"./ic-data-table-c9pQCH_h.js";import"./ic-search-input-zfYWKjl4.js";import"./ic-empty-state-f_kVNpuc.js";var m={active:`success`,idle:`info`,suspended:`warning`,error:`error`},h={active:`Active`,idle:`Idle`,suspended:`Suspended`,error:`Error`},g=[{value:`active`,label:`Active`,color:`var(--ic-success)`},{value:`idle`,label:`Idle`,color:`var(--ic-info)`},{value:`suspended`,label:`Suspended`,color:`var(--ic-warning)`},{value:`error`,label:`Error`,color:`var(--ic-error)`}],_=new Intl.NumberFormat(`en-US`,{style:`currency`,currency:`USD`}),v={minimal:`Read and write only. Safest option for restricted environments.`,coding:`Common tools including web, memory, and file operations.`,messaging:`Optimized for chat and messaging workflows.`,supervisor:`Extended tools for agent orchestration and oversight.`,full:`All available tools. Best for autonomous agents with broad capabilities.`},y=class extends r{constructor(...e){super(...e),this.apiClient=null,this.rpcClient=null,this.eventDispatcher=null,this._sse=null,this._reloadDebounce=null,this._agents=[],this._loadState=`loading`,this._error=``,this._deleteTarget=null,this._actionPending=``,this._searchQuery=``,this._statusFilters=new Set,this._wizardOpen=!1,this._wizardStep=1,this._wizardError=``,this._wizardCreating=!1,this._wizardAgentId=``,this._wizardAgentName=``,this._wizardProvider=`anthropic`,this._wizardModel=``,this._wizardToolProfile=`full`,this._catalogProviders=[]}static{this.styles=[l,o,e`
+import{S as e,_ as t,d as n,g as r,h as i,m as a,n as o,o as s,p as c,r as l,t as u,y as d}from"./decorate-C2wzL86z.js";import{a as f,i as p}from"./index-CZJxmgnn.js";import"./ic-tag-C5SwX7RT.js";import"./ic-confirm-dialog-JnoEg4kp.js";import"./ic-data-table-c9pQCH_h.js";import"./ic-search-input-zfYWKjl4.js";import"./ic-empty-state-CqbUDzjw.js";var m={active:`success`,idle:`info`,suspended:`warning`,error:`error`},h={active:`Active`,idle:`Idle`,suspended:`Suspended`,error:`Error`},g=[{value:`active`,label:`Active`,color:`var(--ic-success)`},{value:`idle`,label:`Idle`,color:`var(--ic-info)`},{value:`suspended`,label:`Suspended`,color:`var(--ic-warning)`},{value:`error`,label:`Error`,color:`var(--ic-error)`}],_=new Intl.NumberFormat(`en-US`,{style:`currency`,currency:`USD`}),v={minimal:`Read and write only. Safest option for restricted environments.`,coding:`Common tools including web, memory, and file operations.`,messaging:`Optimized for chat and messaging workflows.`,supervisor:`Extended tools for agent orchestration and oversight.`,full:`All available tools. Best for autonomous agents with broad capabilities.`},y=class extends r{constructor(...e){super(...e),this.apiClient=null,this.rpcClient=null,this.eventDispatcher=null,this._sse=null,this._reloadDebounce=null,this._agents=[],this._loadState=`loading`,this._error=``,this._deleteTarget=null,this._actionPending=``,this._searchQuery=``,this._statusFilters=new Set,this._wizardOpen=!1,this._wizardStep=1,this._wizardError=``,this._wizardCreating=!1,this._wizardAgentId=``,this._wizardAgentName=``,this._wizardProvider=`anthropic`,this._wizardModel=``,this._wizardToolProfile=`full`,this._catalogProviders=[]}static{this.styles=[l,o,e`
       :host {
         display: block;
       }

package/node_modules/@comis/web/dist/assets/{billing-view-DeTSrDbU.js → billing-view-DicgbA0L.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,a as n,c as r,d as i,g as a,h as o,m as s,n as c,o as l,p as u,r as d,t as f,u as p,y as m}from"./decorate-C2wzL86z.js";import{i as h}from"./index-dqPriKJN.js";import"./ic-empty-state-f_kVNpuc.js";import"./ic-time-range-picker-uBAk6VB8.js";var g=[{header:`agentId`,get:e=>e.agentId},{header:`totalTokens`,get:e=>String(e.totalTokens)},{header:`percentOfTotal`,get:e=>String(e.percentOfTotal)},{header:`cost`,get:e=>String(e.cost)}];function _(e){let t=e=>/[",\r\n]/.test(e)?`"${e.replace(/"/g,`""`)}"`:e;return[g.map(e=>t(e.header)).join(`,`),...e.map(e=>g.map(n=>t(n.get(e))).join(`,`))].join(`\r
+import{S as e,_ as t,a as n,c as r,d as i,g as a,h as o,m as s,n as c,o as l,p as u,r as d,t as f,u as p,y as m}from"./decorate-C2wzL86z.js";import{i as h}from"./index-CZJxmgnn.js";import"./ic-empty-state-CqbUDzjw.js";import"./ic-time-range-picker-uBAk6VB8.js";var g=[{header:`agentId`,get:e=>e.agentId},{header:`totalTokens`,get:e=>String(e.totalTokens)},{header:`percentOfTotal`,get:e=>String(e.percentOfTotal)},{header:`cost`,get:e=>String(e.cost)}];function _(e){let t=e=>/[",\r\n]/.test(e)?`"${e.replace(/"/g,`""`)}"`:e;return[g.map(e=>t(e.header)).join(`,`),...e.map(e=>g.map(n=>t(n.get(e))).join(`,`))].join(`\r
 `)}function v(e){let t=e.map(e=>{let t={};for(let n of g)t[n.header]=n.get(e);return t});return JSON.stringify(t,null,2)}function y(e){return{totalCost:Number(e.totalCost??0),totalTokens:Number(e.totalTokens??0),callCount:Number(e.callCount??0)}}function b(e){if(Array.isArray(e))return e;let t=e;return Array.isArray(t.providers)?t.providers:[]}function x(e){if(Array.isArray(e))return e;let t=e;return Array.isArray(t.sessions)?t.sessions:[]}function S(e){let t=e?.tools;return Array.isArray(t)?t.map(e=>{let t=e,n=typeof t.tool==`string`?t.tool:void 0;return n===void 0?null:{tool:n,cost:Number(t.cost??0),tokens:Number(t.tokens??0),calls:Number(t.calls??0)}}).filter(e=>e!==null):[]}function C(e){let t=new Map;for(let n of e){let e=t.get(n.tool);e?(e.cost+=n.cost,e.tokens+=n.tokens,e.calls+=n.calls):t.set(n.tool,{tool:n.tool,cost:n.cost,tokens:n.tokens,calls:n.calls})}return[...t.values()].sort((e,t)=>t.cost-e.cost)}function w(e){let t=e?.subagents;return Array.isArray(t)?t.map(e=>{let t=e,n=typeof t.nodeId==`string`?t.nodeId:void 0;return n===void 0?null:{nodeId:n,cost:Number(t.cost??0),subtreeCost:Number(t.subtreeCost??t.cost??0)}}).filter(e=>e!==null):[]}function T(e){return{async loadTotalLevel(t,n){let r=y(await e.call(`obs.billing.total`,{sinceMs:t}));return Promise.allSettled([e.call(`obs.billing.total`,{sinceMs:t*2}),e.call(`obs.billing.byProvider`,{sinceMs:t})]).then(([e,t])=>{let i={};if(e.status===`fulfilled`){let t=y(e.value);i.previousTotal={totalCost:t.totalCost-r.totalCost,totalTokens:t.totalTokens-r.totalTokens,callCount:t.callCount-r.callCount}}t.status===`fulfilled`&&(i.providers=b(t.value)),(i.previousTotal!==void 0||i.providers!==void 0)&&n(i)}),r},async loadProviderLevel(t){return b(await e.call(`obs.billing.byProvider`,{sinceMs:t}))},async loadAgentLevel(t){let n=await e.call(`agents.list`),r=(Array.isArray(n)?n:Array.isArray(n.agents)?n.agents:[]).map(e=>typeof e==`string`?e:e.id);if(r.length===0)return{agents:[],toolCosts:[],subagentCosts:[]};let i=await Promise.allSettled(r.map(n=>e.call(`obs.billing.byAgent`,{agentId:n,sinceMs:t})));return{agents:i.map((e,t)=>{if(e.status!==`fulfilled`)return null;let n=e.value;return{agentId:r[t],totalTokens:Number(n.tokensToday??n.totalTokens??0),percentOfTotal:Number(n.percentOfTotal??0),cost:Number(n.costToday??n.cost??0)}}).filter(e=>e!==null).sort((e,t)=>t.cost-e.cost),toolCosts:C(i.flatMap(e=>e.status===`fulfilled`?S(e.value):[])),subagentCosts:i.flatMap(e=>e.status===`fulfilled`?w(e.value):[])}},async loadSessionLevel(t,n){if(!n)return[];try{return x(await e.call(`obs.billing.bySession`,{sessionKey:`all`,agentId:n,sinceMs:t}))}catch{return[]}}}}var E=new Set([`agent`,`provider`,`model`,`tool`]),D=new Set([`minTokens`,`maxCost`]);function O(e){let t={};if(typeof e!=`string`)return t;for(let n of e.trim().split(/\s+/)){if(n.length===0)continue;let e=n.indexOf(`:`);if(e<=0)continue;let r=n.slice(0,e),i=n.slice(e+1);if(i.length!==0)if(E.has(r))switch(r){case`agent`:t.agent=i;break;case`provider`:t.provider=i;break;case`model`:t.model=i;break;case`tool`:t.tool=i;break}else if(D.has(r)){let e=Number(i);if(!Number.isFinite(e))continue;r===`minTokens`?t.minTokens=e:t.maxCost=e}else r===`has`&&i===`errors`&&(t.hasErrors=!0)}return t}function k(e,t){return e.filter(e=>!(t.agent!==void 0&&e.agent!==t.agent||t.provider!==void 0&&e.provider!==t.provider||t.model!==void 0&&e.model!==t.model||t.tool!==void 0&&e.tool!==t.tool||t.minTokens!==void 0&&(e.tokens??0)<t.minTokens||t.maxCost!==void 0&&(e.cost??0)>t.maxCost||t.hasErrors!==void 0&&(e.hasErrors??!1)!==t.hasErrors))}function A(e){return Object.keys(e).length>0}var j=new Set([...E,...D,`has`]);function M(e){let t=typeof e==`string`?e.trim():``;if(t.length===0)return``;let n=t.split(/\s+/).map(e=>e.includes(`:`)?e.slice(0,e.indexOf(`:`)):``).filter(e=>e.length>0&&!j.has(e));return n.length>0?`Unknown filter key(s) ignored: ${[...new Set(n)].join(`, `)}`:``}function N(e,t,n){let r=new Blob([e],{type:n}),i=URL.createObjectURL(r),a=document.createElement(`a`);a.href=i,a.download=t,a.click(),URL.revokeObjectURL(i)}function P(e,n){return e.length===0?t:m`
     <div class="section">
       <div class="section-title">Per-tool cost <span class="caveat">(best-effort)</span></div>

package/node_modules/@comis/web/dist/assets/{cache-health-BCWNSCJc.js → cache-health-CtKWyIsn.js}

@@ -1,4 +1,4 @@
-import{S as e,a as t,g as n,h as r,l as i,m as a,n as o,p as s,r as c,t as l,u,y as d}from"./decorate-C2wzL86z.js";import"./index-dqPriKJN.js";import"./ic-tag-C5SwX7RT.js";import"./ic-data-table-c9pQCH_h.js";import"./ic-empty-state-f_kVNpuc.js";var f=3e4,p=864e5,m=class extends n{constructor(...e){super(...e),this.rpcClient=null,this._loadState=`loading`,this._rows=[],this._sinceMs=p,this._hitWriteRatio=null,this._refreshInterval=null,this._rpcStatusUnsub=null}static{this.styles=[c,o,e`
+import{S as e,a as t,g as n,h as r,l as i,m as a,n as o,p as s,r as c,t as l,u,y as d}from"./decorate-C2wzL86z.js";import"./index-CZJxmgnn.js";import"./ic-tag-C5SwX7RT.js";import"./ic-data-table-c9pQCH_h.js";import"./ic-empty-state-CqbUDzjw.js";var f=3e4,p=864e5,m=class extends n{constructor(...e){super(...e),this.rpcClient=null,this._loadState=`loading`,this._rows=[],this._sinceMs=p,this._hitWriteRatio=null,this._refreshInterval=null,this._rpcStatusUnsub=null}static{this.styles=[c,o,e`
       :host {
         display: block;
       }

package/node_modules/@comis/web/dist/assets/{channel-detail-Dc9p_ikD.js → channel-detail-3L1l9zMD.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,d as n,g as r,h as i,l as a,m as o,n as s,o as c,p as l,r as u,s as d,t as f,y as p}from"./decorate-C2wzL86z.js";import{a as m,i as h}from"./index-dqPriKJN.js";import"./ic-breadcrumb-CamOsLdw.js";import"./ic-tag-C5SwX7RT.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-empty-state-f_kVNpuc.js";import"./ic-tabs-BsjznKoe.js";import"./ic-connection-dot-mggqNsPH.js";var g=[{key:`transcribeAudio`,label:`Voice Transcription`,description:`Transcribe inbound audio/voice attachments to text (STT)`},{key:`analyzeImages`,label:`Image Analysis`,description:`Analyze inbound images using vision AI`},{key:`describeVideos`,label:`Video Description`,description:`Generate text descriptions of inbound video attachments`},{key:`extractDocuments`,label:`Document Extraction`,description:`Extract text from PDF, CSV, and other document attachments`},{key:`understandLinks`,label:`Link Understanding`,description:`Fetch and inject content from URLs in message text`}],_={telegram:[{key:`botToken`,label:`Bot Token`,type:`secret`},{key:`webhookUrl`,label:`Webhook URL`,type:`text`,placeholder:`https://...`},{key:`ackReaction.enabled`,label:`Ack Reaction`,type:`toggle`},{key:`ackReaction.emoji`,label:`Ack Emoji`,type:`text`,placeholder:`👀`}],discord:[{key:`botToken`,label:`Bot Token`,type:`secret`},{key:`guildId`,label:`Guild ID`,type:`text`}],slack:[{key:`botToken`,label:`Bot Token`,type:`secret`},{key:`appToken`,label:`App Token`,type:`secret`},{key:`signingSecret`,label:`Signing Secret`,type:`secret`},{key:`mode`,label:`Mode`,type:`select`,options:[`socket`,`http`]}],whatsapp:[{key:`authDir`,label:`Auth Directory`,type:`text`},{key:`printQR`,label:`Print QR Code`,type:`toggle`}],line:[{key:`channelSecret`,label:`Channel Secret`,type:`secret`},{key:`webhookPath`,label:`Webhook Path`,type:`text`,placeholder:`/webhooks/line`}],signal:[{key:`baseUrl`,label:`Base URL`,type:`text`,placeholder:`http://127.0.0.1:8080`},{key:`account`,label:`Account`,type:`text`},{key:`cliPath`,label:`CLI Path`,type:`text`}],irc:[{key:`host`,label:`Host`,type:`text`},{key:`port`,label:`Port`,type:`text`},{key:`nick`,label:`Nick`,type:`text`},{key:`tls`,label:`TLS`,type:`toggle`},{key:`nickservPassword`,label:`NickServ Password`,type:`secret`},{key:`channels`,label:`Channels`,type:`list`}],imessage:[{key:`binaryPath`,label:`Binary Path`,type:`text`},{key:`account`,label:`Account`,type:`text`}]};function v(e){return e?e.charAt(0).toUpperCase()+e.slice(1):``}function y(e,t){return t.split(`.`).reduce((e,t)=>typeof e==`object`&&e?e[t]:void 0,e)}var b=class extends r{constructor(...e){super(...e),this.apiClient=null,this.rpcClient=null,this.eventDispatcher=null,this.channelType=``,this._loadState=`loading`,this._error=``,this._config={},this._enabled=!1,this._status=`disconnected`,this._deliveryTrace=[],this._activityData=[],this._channelLastActiveAt=0,this._channelMessagesSent=0,this._channelMessagesReceived=0,this._connectionMode=``,this._lastError=``,this._actionPending=!1,this._queueStatus=null,this._capabilities=null,this._mediaProcessing={transcribeAudio:!0,analyzeImages:!0,describeVideos:!0,extractDocuments:!0,understandLinks:!0},this._sse=null,this._reloadDebounce=null,this._hasLoaded=!1,this._previousChannelType=``}static{this.styles=[u,s,e`
+import{S as e,_ as t,d as n,g as r,h as i,l as a,m as o,n as s,o as c,p as l,r as u,s as d,t as f,y as p}from"./decorate-C2wzL86z.js";import{a as m,i as h}from"./index-CZJxmgnn.js";import"./ic-breadcrumb-CamOsLdw.js";import"./ic-tag-C5SwX7RT.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-empty-state-CqbUDzjw.js";import"./ic-tabs-BsjznKoe.js";import"./ic-connection-dot-DHLyVo60.js";var g=[{key:`transcribeAudio`,label:`Voice Transcription`,description:`Transcribe inbound audio/voice attachments to text (STT)`},{key:`analyzeImages`,label:`Image Analysis`,description:`Analyze inbound images using vision AI`},{key:`describeVideos`,label:`Video Description`,description:`Generate text descriptions of inbound video attachments`},{key:`extractDocuments`,label:`Document Extraction`,description:`Extract text from PDF, CSV, and other document attachments`},{key:`understandLinks`,label:`Link Understanding`,description:`Fetch and inject content from URLs in message text`}],_={telegram:[{key:`botToken`,label:`Bot Token`,type:`secret`},{key:`webhookUrl`,label:`Webhook URL`,type:`text`,placeholder:`https://...`},{key:`ackReaction.enabled`,label:`Ack Reaction`,type:`toggle`},{key:`ackReaction.emoji`,label:`Ack Emoji`,type:`text`,placeholder:`👀`}],discord:[{key:`botToken`,label:`Bot Token`,type:`secret`},{key:`guildId`,label:`Guild ID`,type:`text`}],slack:[{key:`botToken`,label:`Bot Token`,type:`secret`},{key:`appToken`,label:`App Token`,type:`secret`},{key:`signingSecret`,label:`Signing Secret`,type:`secret`},{key:`mode`,label:`Mode`,type:`select`,options:[`socket`,`http`]}],whatsapp:[{key:`authDir`,label:`Auth Directory`,type:`text`},{key:`printQR`,label:`Print QR Code`,type:`toggle`}],line:[{key:`channelSecret`,label:`Channel Secret`,type:`secret`},{key:`webhookPath`,label:`Webhook Path`,type:`text`,placeholder:`/webhooks/line`}],signal:[{key:`baseUrl`,label:`Base URL`,type:`text`,placeholder:`http://127.0.0.1:8080`},{key:`account`,label:`Account`,type:`text`},{key:`cliPath`,label:`CLI Path`,type:`text`}],irc:[{key:`host`,label:`Host`,type:`text`},{key:`port`,label:`Port`,type:`text`},{key:`nick`,label:`Nick`,type:`text`},{key:`tls`,label:`TLS`,type:`toggle`},{key:`nickservPassword`,label:`NickServ Password`,type:`secret`},{key:`channels`,label:`Channels`,type:`list`}],imessage:[{key:`binaryPath`,label:`Binary Path`,type:`text`},{key:`account`,label:`Account`,type:`text`}]};function v(e){return e?e.charAt(0).toUpperCase()+e.slice(1):``}function y(e,t){return t.split(`.`).reduce((e,t)=>typeof e==`object`&&e?e[t]:void 0,e)}var b=class extends r{constructor(...e){super(...e),this.apiClient=null,this.rpcClient=null,this.eventDispatcher=null,this.channelType=``,this._loadState=`loading`,this._error=``,this._config={},this._enabled=!1,this._status=`disconnected`,this._deliveryTrace=[],this._activityData=[],this._channelLastActiveAt=0,this._channelMessagesSent=0,this._channelMessagesReceived=0,this._connectionMode=``,this._lastError=``,this._actionPending=!1,this._queueStatus=null,this._capabilities=null,this._mediaProcessing={transcribeAudio:!0,analyzeImages:!0,describeVideos:!0,extractDocuments:!0,understandLinks:!0},this._sse=null,this._reloadDebounce=null,this._hasLoaded=!1,this._previousChannelType=``}static{this.styles=[u,s,e`
       :host {
         display: block;
       }

package/node_modules/@comis/web/dist/assets/{channel-list-Ky4JkuxX.js → channel-list-trLI3xWS.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,d as n,g as r,h as i,l as a,m as o,n as s,o as c,p as l,r as u,t as d,y as f}from"./decorate-C2wzL86z.js";import{a as p,i as m,n as h,r as g,t as _}from"./index-dqPriKJN.js";import"./ic-confirm-dialog-JnoEg4kp.js";import"./ic-empty-state-f_kVNpuc.js";var v=class extends r{constructor(...e){super(...e),this.channelType=``,this.name=``,this.status=`disconnected`,this.enabled=!1,this.isStale=!1,this.messageCount=0,this.uptime=0,this.lastActivity=0}static{this.styles=[u,s,e`
+import{S as e,_ as t,d as n,g as r,h as i,l as a,m as o,n as s,o as c,p as l,r as u,t as d,y as f}from"./decorate-C2wzL86z.js";import{a as p,i as m,n as h,r as g,t as _}from"./index-CZJxmgnn.js";import"./ic-confirm-dialog-JnoEg4kp.js";import"./ic-empty-state-CqbUDzjw.js";var v=class extends r{constructor(...e){super(...e),this.channelType=``,this.name=``,this.status=`disconnected`,this.enabled=!1,this.isStale=!1,this.messageCount=0,this.uptime=0,this.lastActivity=0}static{this.styles=[u,s,e`
       :host {
         display: block;
         min-width: 280px;

package/node_modules/@comis/web/dist/assets/{chat-console-Dz_CizN8.js → chat-console-DsLKVxLB.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,a as n,d as r,f as i,g as a,h as o,l as s,m as c,n as l,p as u,r as d,t as f,u as p,y as m}from"./decorate-C2wzL86z.js";import{a as h}from"./index-dqPriKJN.js";import"./ic-tag-C5SwX7RT.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-search-input-zfYWKjl4.js";import"./ic-empty-state-f_kVNpuc.js";import{n as g,r as _}from"./session-key-parser-CzslOQQP.js";import{n as v,r as y}from"./ic-tool-call-D1ykqLeH.js";import"./ic-chat-message-CkDdrYHc.js";import"./ic-budget-segment-bar-Dw6vzCTO.js";var b=class extends a{constructor(...e){super(...e),this.sessions=[],this.selectedKey=``,this.filter=``,this.open=!1}static{this.styles=[d,l,e`
+import{S as e,_ as t,a as n,d as r,f as i,g as a,h as o,l as s,m as c,n as l,p as u,r as d,t as f,u as p,y as m}from"./decorate-C2wzL86z.js";import{a as h}from"./index-CZJxmgnn.js";import"./ic-tag-C5SwX7RT.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-search-input-zfYWKjl4.js";import"./ic-empty-state-CqbUDzjw.js";import{n as g,r as _}from"./session-key-parser-CzslOQQP.js";import{n as v,r as y}from"./ic-tool-call-BPInA28o.js";import"./ic-chat-message-BpTf2pkH.js";import"./ic-budget-segment-bar-Dw6vzCTO.js";var b=class extends a{constructor(...e){super(...e),this.sessions=[],this.selectedKey=``,this.filter=``,this.open=!1}static{this.styles=[d,l,e`
       :host {
         display: block;
       }

package/node_modules/@comis/web/dist/assets/{config-editor-CMnaLKV1.js → config-editor-DJTsg_PF.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,d as n,g as r,h as i,m as a,n as o,o as s,p as c,r as l,s as u,t as d,y as f}from"./decorate-C2wzL86z.js";import{a as p}from"./index-dqPriKJN.js";import"./ic-tag-C5SwX7RT.js";import"./ic-confirm-dialog-JnoEg4kp.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-array-editor-Ba7psX7q.js";import"./ic-empty-state-f_kVNpuc.js";import"./ic-tabs-BsjznKoe.js";import"./ic-select-DY2apnK_.js";function m(e,t){let n=e.split(`
+import{S as e,_ as t,d as n,g as r,h as i,m as a,n as o,o as s,p as c,r as l,s as u,t as d,y as f}from"./decorate-C2wzL86z.js";import{a as p}from"./index-CZJxmgnn.js";import"./ic-tag-C5SwX7RT.js";import"./ic-confirm-dialog-JnoEg4kp.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-array-editor-Ba7psX7q.js";import"./ic-empty-state-CqbUDzjw.js";import"./ic-tabs-BsjznKoe.js";import"./ic-select-DY2apnK_.js";function m(e,t){let n=e.split(`
 `),r=t.split(`
 `),i=n.length,a=r.length,o=Array.from({length:i+1},()=>Array(a+1).fill(0));for(let e=1;e<=i;e++)for(let t=1;t<=a;t++)n[e-1]===r[t-1]?o[e][t]=o[e-1][t-1]+1:o[e][t]=Math.max(o[e-1][t],o[e][t-1]);let s=i,c=a,l=[],u=[];for(;s>0||c>0;)s>0&&c>0&&n[s-1]===r[c-1]?(l.push({text:n[s-1],status:`unchanged`}),u.push({text:r[c-1],status:`unchanged`}),s--,c--):c>0&&(s===0||o[s][c-1]>=o[s-1][c])?(u.push({text:r[c-1],status:`added`}),l.push({text:``,status:`unchanged`}),c--):(l.push({text:n[s-1],status:`removed`}),u.push({text:``,status:`unchanged`}),s--);return l.reverse(),u.reverse(),{oldLines:l,newLines:u}}var h=class extends r{constructor(...e){super(...e),this.oldText=``,this.newText=``,this.oldLabel=`Current`,this.newLabel=`Pending`,this._syncing=!1}static{this.styles=[l,o,e`
       :host {
@@ -311,7 +311,7 @@ import{S as e,_ as t,d as n,g as r,h as i,m as a,n as o,o as s,p as c,r as l,s a
         outline: none;
         border-color: var(--ic-accent);
       }
-    `]}updated(e){e.has(`config`)&&(this._formState=structuredClone(this.config),this._formErrors={})}_onFormFieldChange(e,t){this._formState=y(this._formState,e,t);let n={...this._formErrors};delete n[e],this._formErrors=n,this.dispatchEvent(new CustomEvent(`field-change`,{detail:{path:e,value:t,formState:this._formState},bubbles:!0,composed:!0}))}_validateField(e,t,n){let r={...this._formErrors};if(n.type===`string`&&typeof t==`string`)if(n.minLength!==void 0&&t.length<n.minLength)r[e]=`Minimum length is ${n.minLength}`;else if(n.maxLength!==void 0&&t.length>n.maxLength)r[e]=`Maximum length is ${n.maxLength}`;else if(n.pattern)try{new RegExp(n.pattern).test(t)||(r[e]=`Must match pattern: ${n.pattern}`)}catch{}else delete r[e];else (n.type===`number`||n.type===`integer`)&&typeof t==`number`?n.minimum!==void 0&&t<n.minimum?r[e]=`Minimum value is ${n.minimum}`:n.maximum!==void 0&&t>n.maximum?r[e]=`Maximum value is ${n.maximum}`:delete r[e]:delete r[e];this._formErrors=r}_toggleFormFieldset(e){let t=new Set(this._expandedFormPaths);t.has(e)?t.delete(e):t.add(e),this._expandedFormPaths=t}_onArrayItemFieldChange(e,t,n,r){let i=(v(this._formState,e)??[]).map((e,i)=>i===t?{...e,[n]:r}:e);this._onFormFieldChange(e,i)}_renderStringField(e,n,r,i){let a=i.maxLength!==void 0&&i.maxLength>200||e.includes(`prompt`)||e.includes(`template`);return f`
+    `]}updated(e){e.has(`config`)&&(this._formState=structuredClone(this.config),this._formErrors={})}_onFormFieldChange(e,t){this._formState=y(this._formState,e,t);let n={...this._formErrors};delete n[e],this._formErrors=n,this.dispatchEvent(new CustomEvent(`field-change`,{detail:{path:e,value:t,formState:this._formState},bubbles:!0,composed:!0}))}_validateField(e,t,n){let r={...this._formErrors};if(n.type===`string`&&typeof t==`string`)if(n.minLength!==void 0&&t.length<n.minLength)r[e]=`Minimum length is ${n.minLength}`;else if(n.maxLength!==void 0&&t.length>n.maxLength)r[e]=`Maximum length is ${n.maxLength}`;else if(n.pattern)try{new RegExp(n.pattern).test(t)||(r[e]=`Must match pattern: ${n.pattern}`)}catch{}else delete r[e];else(n.type===`number`||n.type===`integer`)&&typeof t==`number`?n.minimum!==void 0&&t<n.minimum?r[e]=`Minimum value is ${n.minimum}`:n.maximum!==void 0&&t>n.maximum?r[e]=`Maximum value is ${n.maximum}`:delete r[e]:delete r[e];this._formErrors=r}_toggleFormFieldset(e){let t=new Set(this._expandedFormPaths);t.has(e)?t.delete(e):t.add(e),this._expandedFormPaths=t}_onArrayItemFieldChange(e,t,n,r){let i=(v(this._formState,e)??[]).map((e,i)=>i===t?{...e,[n]:r}:e);this._onFormFieldChange(e,i)}_renderStringField(e,n,r,i){let a=i.maxLength!==void 0&&i.maxLength>200||e.includes(`prompt`)||e.includes(`template`);return f`
       <div class="form-field">
         <label class="form-label">${n}</label>
         ${i.description?f`<span class="form-description">${i.description}</span>`:t}

package/node_modules/@comis/web/dist/assets/{context-dag-browser-B4SfvEGD.js → context-dag-browser-CrwJ3vlZ.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,d as n,g as r,h as i,m as a,n as o,o as s,p as c,r as l,s as u,t as d,y as f}from"./decorate-C2wzL86z.js";import"./index-dqPriKJN.js";import"./ic-tag-C5SwX7RT.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-search-input-zfYWKjl4.js";import"./ic-empty-state-f_kVNpuc.js";import"./ic-detail-panel-ZsLNS21P.js";var p=class extends r{constructor(...e){super(...e),this.rpcClient=null,this._loadState=`loading`,this._conversations=[],this._selectedConvId=null,this._treeNodes=[],this._treeMessageCount=0,this._expanded=new Set,this._searchQuery=``,this._searchResults=[],this._inspectedNode=null,this._detailOpen=!1,this._treeLoading=!1,this._searchLoading=!1,this._errorMsg=``,this._searchTimeout=null,this._rpcClientInitialized=!1}static{this.styles=[l,o,e`
+import{S as e,_ as t,d as n,g as r,h as i,m as a,n as o,o as s,p as c,r as l,s as u,t as d,y as f}from"./decorate-C2wzL86z.js";import"./index-CZJxmgnn.js";import"./ic-tag-C5SwX7RT.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-search-input-zfYWKjl4.js";import"./ic-empty-state-CqbUDzjw.js";import"./ic-detail-panel-ZsLNS21P.js";var p=class extends r{constructor(...e){super(...e),this.rpcClient=null,this._loadState=`loading`,this._conversations=[],this._selectedConvId=null,this._treeNodes=[],this._treeMessageCount=0,this._expanded=new Set,this._searchQuery=``,this._searchResults=[],this._inspectedNode=null,this._detailOpen=!1,this._treeLoading=!1,this._searchLoading=!1,this._errorMsg=``,this._searchTimeout=null,this._rpcClientInitialized=!1}static{this.styles=[l,o,e`
       :host {
         display: block;
       }

package/node_modules/@comis/web/dist/assets/{context-engine-D56GG59R.js → context-engine-BFkq8-KO.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,a as n,d as r,g as i,h as a,m as o,n as s,o as c,p as l,r as u,s as d,t as f,u as p,y as m}from"./decorate-C2wzL86z.js";import{i as h}from"./index-dqPriKJN.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-empty-state-f_kVNpuc.js";import"./ic-budget-segment-bar-Dw6vzCTO.js";import"./ic-layer-waterfall-3qBGZLwA.js";var g={file_read:`var(--ic-accent)`,exec:`var(--ic-success)`,web:`var(--ic-info, #3b82f6)`,image:`var(--ic-warning)`,error:`var(--ic-error)`},_=`var(--ic-text-dim)`,v=class extends i{constructor(...e){super(...e),this.categories={},this.showLegend=!0}static{this.styles=[u,e`
+import{S as e,_ as t,a as n,d as r,g as i,h as a,m as o,n as s,o as c,p as l,r as u,s as d,t as f,u as p,y as m}from"./decorate-C2wzL86z.js";import{i as h}from"./index-CZJxmgnn.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-empty-state-CqbUDzjw.js";import"./ic-budget-segment-bar-Dw6vzCTO.js";import"./ic-layer-waterfall-3qBGZLwA.js";var g={file_read:`var(--ic-accent)`,exec:`var(--ic-success)`,web:`var(--ic-info, #3b82f6)`,image:`var(--ic-warning)`,error:`var(--ic-error)`},_=`var(--ic-text-dim)`,v=class extends i{constructor(...e){super(...e),this.categories={},this.showLegend=!0}static{this.styles=[u,e`
       :host {
         display: block;
       }

package/node_modules/@comis/web/dist/assets/{delivery-view-G4cBmG5M.js → delivery-view-Dwv3P_p-.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,a as n,g as r,h as i,l as a,m as o,n as s,p as c,r as l,s as u,t as d,u as f,y as p}from"./decorate-C2wzL86z.js";import"./index-dqPriKJN.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-empty-state-f_kVNpuc.js";import"./ic-time-range-picker-uBAk6VB8.js";import"./ic-detail-panel-ZsLNS21P.js";import"./ic-delivery-row-BlEML37J.js";function m(e){return e>=1e3?`${(e/1e3).toFixed(1)}s`:`${e}ms`}var h=class extends r{constructor(...e){super(...e),this.steps=[],this.totalDurationMs=0}static{this.styles=[l,e`
+import{S as e,_ as t,a as n,g as r,h as i,l as a,m as o,n as s,p as c,r as l,s as u,t as d,u as f,y as p}from"./decorate-C2wzL86z.js";import"./index-CZJxmgnn.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-empty-state-CqbUDzjw.js";import"./ic-time-range-picker-uBAk6VB8.js";import"./ic-detail-panel-ZsLNS21P.js";import"./ic-delivery-row-BlEML37J.js";function m(e){return e>=1e3?`${(e/1e3).toFixed(1)}s`:`${e}ms`}var h=class extends r{constructor(...e){super(...e),this.steps=[],this.totalDurationMs=0}static{this.styles=[l,e`
       :host {
         display: block;
       }

package/node_modules/@comis/web/dist/assets/{diagnostics-view-Bf57kGOT.js → diagnostics-view-GknYBim7.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,a as n,c as r,d as i,g as a,h as o,m as s,n as c,o as l,p as u,r as d,t as f,u as p,y as m}from"./decorate-C2wzL86z.js";import{n as h,t as g}from"./observability-types-BvcvLSWK.js";import{i as _}from"./index-dqPriKJN.js";import"./ic-tag-C5SwX7RT.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-empty-state-f_kVNpuc.js";import"./ic-time-range-picker-uBAk6VB8.js";var v=3e4,y=6048e5,b={info:`var(--ic-text-dim)`,warn:`var(--ic-warning)`,error:`var(--ic-error)`},x=class extends a{constructor(...e){super(...e),this.rpcClient=null,this.eventDispatcher=null,this._sse=null,this._reloadDebounce=null,this._loadState=`loading`,this._sinceMs=y,this._selectedRange=`7d`,this._events=[],this._selectedCategories=new Set,this._selectedSeverities=new Set,this._eventCounts={},this._refreshInterval=null,this._rpcStatusUnsub=null}static{this.styles=[d,c,e`
+import{S as e,_ as t,a as n,c as r,d as i,g as a,h as o,m as s,n as c,o as l,p as u,r as d,t as f,u as p,y as m}from"./decorate-C2wzL86z.js";import{n as h,t as g}from"./observability-types-BvcvLSWK.js";import{i as _}from"./index-CZJxmgnn.js";import"./ic-tag-C5SwX7RT.js";import"./ic-relative-time-DCCDywYC.js";import"./ic-empty-state-CqbUDzjw.js";import"./ic-time-range-picker-uBAk6VB8.js";var v=3e4,y=6048e5,b={info:`var(--ic-text-dim)`,warn:`var(--ic-warning)`,error:`var(--ic-error)`},x=class extends a{constructor(...e){super(...e),this.rpcClient=null,this.eventDispatcher=null,this._sse=null,this._reloadDebounce=null,this._loadState=`loading`,this._sinceMs=y,this._selectedRange=`7d`,this._events=[],this._selectedCategories=new Set,this._selectedSeverities=new Set,this._eventCounts={},this._refreshInterval=null,this._rpcStatusUnsub=null}static{this.styles=[d,c,e`
       :host { display: block; }
 
       .diagnostics-view { padding: 0; }

package/node_modules/@comis/web/dist/assets/{ic-chat-message-CkDdrYHc.js → ic-chat-message-BpTf2pkH.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,d as n,g as r,h as i,m as a,n as o,o as s,p as c,r as l,s as u,t as d,v as f,y as p}from"./decorate-C2wzL86z.js";import{a as m}from"./index-dqPriKJN.js";import{n as h,r as g,t as _}from"./directive-BSZPiF1A.js";var v=class extends h{constructor(e){if(super(e),this.it=t,e.type!==g.CHILD)throw Error(this.constructor.directiveName+`() can only be used in child bindings`)}render(e){if(e===t||e==null)return this._t=void 0,this.it=e;if(e===f)return e;if(typeof e!=`string`)throw Error(this.constructor.directiveName+`() called with a non-string value`);if(e===this.it)return this._t;this.it=e;let n=[e];return n.raw=n,this._t={_$litType$:this.constructor.resultType,strings:n,values:[]}}};v.directiveName=`unsafeHTML`,v.resultType=1;var y=_(v),b=new Set(`const.let.var.function.return.if.else.for.while.import.export.from.true.false.null.undefined.class.new.this.async.await.throw.try.catch.switch.case.break.continue.default.typeof.instanceof.void.delete.in.of.yield.static.extends.implements.interface.type.enum.abstract.readonly`.split(`.`));function x(e){return e.replace(/&/g,`&amp;`).replace(/</g,`&lt;`).replace(/>/g,`&gt;`).replace(/"/g,`&quot;`)}function S(e,t){if(!t)return x(e);let n=t.toLowerCase(),r=x(e);return r=r.replace(/\/\*[\s\S]*?\*\//g,e=>`<span class="hl-comment">${e}</span>`),r=r.replace(/\/\/[^\n]*/g,e=>e.includes(`hl-comment`)?e:`<span class="hl-comment">${e}</span>`),(n===`yaml`||n===`yml`||n===`bash`||n===`sh`||n===`python`||n===`py`)&&(r=r.replace(/(?:^|(?<=\n))(\s*#[^\n]*)/g,e=>`<span class="hl-comment">${e}</span>`)),r=r.replace(/(?<!<span class=")(&quot;(?:[^&]|&(?!quot;))*?&quot;)/g,e=>e.includes(`hl-`)?e:`<span class="hl-string">${e}</span>`),r=r.replace(/(?<![=\w])('[^'\\]*(?:\\.[^'\\]*)*')/g,e=>e.includes(`hl-`)?e:`<span class="hl-string">${e}</span>`),r=r.replace(/\b(\d+(?:\.\d+)?)\b/g,e=>e.includes(`hl-`)?e:`<span class="hl-number">${e}</span>`),(n===`json`||n===`yaml`||n===`yml`)&&(r=r.replace(/(?:^|(?<=\n))(\s*)(&quot;[\w.-]+&quot;)(\s*:)/gm,(e,t,n,r)=>`${t}<span class="hl-property">${n}</span>${r}`),(n===`yaml`||n===`yml`)&&(r=r.replace(/(?:^|(?<=\n))(\s*)([\w.-]+)(\s*:)/gm,(e,t,n,r)=>n.includes(`hl-`)?e:`${t}<span class="hl-property">${n}</span>${r}`))),(n===`javascript`||n===`js`||n===`typescript`||n===`ts`||n===`jsx`||n===`tsx`)&&(r=r.replace(/\b([a-z]+)\b/g,e=>b.has(e)?`<span class="hl-keyword">${e}</span>`:e)),r}var C=class extends r{constructor(...e){super(...e),this.code=``,this.language=``,this.copyable=!0,this._copied=!1,this._copyTimer=null}static{this.styles=[l,o,e`
+import{S as e,_ as t,d as n,g as r,h as i,m as a,n as o,o as s,p as c,r as l,s as u,t as d,v as f,y as p}from"./decorate-C2wzL86z.js";import{a as m}from"./index-CZJxmgnn.js";import{n as h,r as g,t as _}from"./directive-BSZPiF1A.js";var v=class extends h{constructor(e){if(super(e),this.it=t,e.type!==g.CHILD)throw Error(this.constructor.directiveName+`() can only be used in child bindings`)}render(e){if(e===t||e==null)return this._t=void 0,this.it=e;if(e===f)return e;if(typeof e!=`string`)throw Error(this.constructor.directiveName+`() called with a non-string value`);if(e===this.it)return this._t;this.it=e;let n=[e];return n.raw=n,this._t={_$litType$:this.constructor.resultType,strings:n,values:[]}}};v.directiveName=`unsafeHTML`,v.resultType=1;var y=_(v),b=new Set(`const.let.var.function.return.if.else.for.while.import.export.from.true.false.null.undefined.class.new.this.async.await.throw.try.catch.switch.case.break.continue.default.typeof.instanceof.void.delete.in.of.yield.static.extends.implements.interface.type.enum.abstract.readonly`.split(`.`));function x(e){return e.replace(/&/g,`&amp;`).replace(/</g,`&lt;`).replace(/>/g,`&gt;`).replace(/"/g,`&quot;`)}function S(e,t){if(!t)return x(e);let n=t.toLowerCase(),r=x(e);return r=r.replace(/\/\*[\s\S]*?\*\//g,e=>`<span class="hl-comment">${e}</span>`),r=r.replace(/\/\/[^\n]*/g,e=>e.includes(`hl-comment`)?e:`<span class="hl-comment">${e}</span>`),(n===`yaml`||n===`yml`||n===`bash`||n===`sh`||n===`python`||n===`py`)&&(r=r.replace(/(?:^|(?<=\n))(\s*#[^\n]*)/g,e=>`<span class="hl-comment">${e}</span>`)),r=r.replace(/(?<!<span class=")(&quot;(?:[^&]|&(?!quot;))*?&quot;)/g,e=>e.includes(`hl-`)?e:`<span class="hl-string">${e}</span>`),r=r.replace(/(?<![=\w])('[^'\\]*(?:\\.[^'\\]*)*')/g,e=>e.includes(`hl-`)?e:`<span class="hl-string">${e}</span>`),r=r.replace(/\b(\d+(?:\.\d+)?)\b/g,e=>e.includes(`hl-`)?e:`<span class="hl-number">${e}</span>`),(n===`json`||n===`yaml`||n===`yml`)&&(r=r.replace(/(?:^|(?<=\n))(\s*)(&quot;[\w.-]+&quot;)(\s*:)/gm,(e,t,n,r)=>`${t}<span class="hl-property">${n}</span>${r}`),(n===`yaml`||n===`yml`)&&(r=r.replace(/(?:^|(?<=\n))(\s*)([\w.-]+)(\s*:)/gm,(e,t,n,r)=>n.includes(`hl-`)?e:`${t}<span class="hl-property">${n}</span>${r}`))),(n===`javascript`||n===`js`||n===`typescript`||n===`ts`||n===`jsx`||n===`tsx`)&&(r=r.replace(/\b([a-z]+)\b/g,e=>b.has(e)?`<span class="hl-keyword">${e}</span>`:e)),r}var C=class extends r{constructor(...e){super(...e),this.code=``,this.language=``,this.copyable=!0,this._copied=!1,this._copyTimer=null}static{this.styles=[l,o,e`
       :host {
         display: block;
       }

package/node_modules/@comis/web/dist/assets/{ic-connection-dot-mggqNsPH.js → ic-connection-dot-DHLyVo60.js}

@@ -1,4 +1,4 @@
-import{S as e,g as t,h as n,m as r,r as i,t as a,y as o}from"./decorate-C2wzL86z.js";import{t as s}from"./index-dqPriKJN.js";var c=class extends t{constructor(...e){super(...e),this.status=`disconnected`,this.size=`8px`,this.showLabel=!0}static{this.styles=[i,e`
+import{S as e,g as t,h as n,m as r,r as i,t as a,y as o}from"./decorate-C2wzL86z.js";import{t as s}from"./index-CZJxmgnn.js";var c=class extends t{constructor(...e){super(...e),this.status=`disconnected`,this.size=`8px`,this.showLabel=!0}static{this.styles=[i,e`
       :host {
         display: inline-flex;
         align-items: center;

package/node_modules/@comis/web/dist/assets/{ic-empty-state-f_kVNpuc.js → ic-empty-state-CqbUDzjw.js}

@@ -1,4 +1,4 @@
-import{S as e,_ as t,g as n,h as r,m as i,n as a,r as o,t as s,y as c}from"./decorate-C2wzL86z.js";import"./index-dqPriKJN.js";var l=class extends n{constructor(...e){super(...e),this.message=`No items to display`,this.description=``,this.icon=``}static{this.styles=[o,a,e`
+import{S as e,_ as t,g as n,h as r,m as i,n as a,r as o,t as s,y as c}from"./decorate-C2wzL86z.js";import"./index-CZJxmgnn.js";var l=class extends n{constructor(...e){super(...e),this.message=`No items to display`,this.description=``,this.icon=``}static{this.styles=[o,a,e`
       :host {
         display: block;
       }