drizzle-cube 0.6.3 → 0.6.5

package/dist/adapters/mcp-transport.d.ts

@@ -82,12 +82,16 @@ export declare const MCP_PROTOCOL_VERSION_HEADER = "mcp-protocol-version";
 export declare function validateAcceptHeader(accept: string | null | undefined): boolean;
 export interface OriginValidationOptions {
     /**
-     * List of allowed origins (e.g., ['http://localhost:3000', 'https://myapp.com'])
-     * If not provided, defaults to localhost origins only
+     * List of allowed origins (e.g., ['http://localhost:3000', 'https://myapp.com']).
+     * If not provided, the default policy admits loopback origins (localhost / 127.x /
+     * [::1]) plus non-browser clients that send no Origin header; any other browser
+     * Origin is rejected. Include the wildcard `'*'` to allow ALL origins (permissive
+     * mode — discouraged; prefer listing exact origins or enabling auth).
      */
     allowedOrigins?: string[];
     /**
-     * If true, allows requests without an Origin header (non-browser clients)
+     * If true, allows requests without an Origin header (non-browser / server-to-server
+     * clients such as the Claude MCP connector, curl, Postman).
      * @default true
      */
     allowMissingOrigin?: boolean;
@@ -97,6 +101,11 @@ export interface OriginValidationOptions {
  * Servers MUST validate Origin to prevent DNS rebinding attacks.
  * If Origin is present and invalid, MUST respond with 403 Forbidden.
  *
+ * Default policy (no `allowedOrigins`): admit loopback origins and requests with no
+ * Origin header (non-browser / server-to-server clients); reject every other browser
+ * Origin. Configure `allowedOrigins` to expose a browser front-end, or include `'*'`
+ * to restore fully-permissive behavior.
+ *
  * @returns { valid: true } if allowed, or { valid: false, reason: string } if blocked
  */
 export declare function validateOriginHeader(origin: string | null | undefined, options?: OriginValidationOptions): {
@@ -105,6 +114,15 @@ export declare function validateOriginHeader(origin: string | null | undefined,
     valid: false;
     reason: string;
 };
+/**
+ * Build {@link OriginValidationOptions} from an MCP config, forwarding the
+ * configured allowlist (if any) so `validateOriginHeader` applies the same policy
+ * for POST, GET, and DELETE `/mcp` across every adapter. When `allowedOrigins` is
+ * absent, the loopback-only default policy applies.
+ */
+export declare function originOptionsFromMcp(mcp: {
+    allowedOrigins?: string[];
+}): OriginValidationOptions;
 /**
  * Extract a Bearer token from an Authorization header.
  * Returns the token string if present and well-formed, or null otherwise.

package/dist/adapters/nextjs/index.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../utils-_whV4fXL.cjs"),t=require("../compiler-ChGO4ZLU.cjs"),n=require("../mcp-transport-CNIPoe1i.cjs"),r=require("../core-F1pCQPde.cjs");let i=require("next/server");function a(e,t){let r=new TextEncoder,a=n._(),o=new ReadableStream({start(e){e.enqueue(r.encode(n.b({jsonrpc:`2.0`,method:`mcp/ready`,params:{protocol:`streamable-http`}},a,15e3)))}}),s=new Headers({"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`});return t(e,s),new i.NextResponse(o,{status:200,headers:s})}function o(e){let{cubes:n,drizzle:r,schema:i,engineType:a,cache:o,rlsSetup:s}=e;if(!n||n.length===0)throw Error(`At least one cube must be provided in the cubes array`);let c=new t.t({drizzle:r,schema:i,engineType:a,cache:o,rlsSetup:s});return n.forEach(e=>{c.registerCube(e)}),c}function s(e){return{extractSecurityContext:async(t,n)=>r.o(await e.extractSecurityContext(t,n),r.a(e=>t.headers.get(e))),cors:e.cors?{...e.cors,allowedHeaders:r.i(e.cors.allowedHeaders)}:void 0}}function c(e,t){let n=e.headers.get(`origin`),r={};return t.origin&&(typeof t.origin==`string`?r[`Access-Control-Allow-Origin`]=t.origin:Array.isArray(t.origin)?n&&t.origin.includes(n)&&(r[`Access-Control-Allow-Origin`]=n):typeof t.origin==`function`&&n&&t.origin(n)&&(r[`Access-Control-Allow-Origin`]=n)),t.methods&&(r[`Access-Control-Allow-Methods`]=t.methods.join(`, `)),t.allowedHeaders&&(r[`Access-Control-Allow-Headers`]=t.allowedHeaders.join(`, `)),t.credentials&&(r[`Access-Control-Allow-Credentials`]=`true`),r}function l(e){let t=r.t({semanticLayer:o(e),onError:e=>{process.env.NODE_ENV!==`test`&&console.error(`Next.js handler error:`,e)},mcp:e.mcp}),n=e.cors?{...e.cors,allowedHeaders:r.i(e.cors.allowedHeaders)}:void 0;return{httpHandler:t,corsHeaders:e=>n?c(e,n):{},baseContext:(t,n)=>()=>e.extractSecurityContext(t,n)}}function u(e,t){let n={};return{getHeader:t=>e.headers.get(t)??void 0,getBody:async()=>{try{return await e.json()}catch{return null}},getQueryParam:t=>e.nextUrl.searchParams.get(t)??void 0,send:(e,r)=>i.NextResponse.json(r,{status:e,headers:{...t,...n}}),setHeader:(e,t)=>{n[e]=t},sendEmpty:e=>new i.NextResponse(null,{status:e,headers:{...t,...n}}),sendSse:(e,r)=>new i.NextResponse(r,{status:e,headers:{"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`,...t,...n}})}}function d(e){return async function(t){let n=c(t,{...e,allowedHeaders:r.i(e.allowedHeaders)});return new Response(null,{status:200,headers:n})}}function f(t){let{httpHandler:n,corsHeaders:r,baseContext:a}=l(t);return async function(t,o){let s=u(t,r(t));return t.method===`POST`?n.handleLoadPost(s,a(t,o)):t.method===`GET`?n.handleLoadGet(s,a(t,o)):i.NextResponse.json(e.i(`Method not allowed`,405),{status:405})}}function p(e){let{httpHandler:t,corsHeaders:n}=l(e);return async function(e,r){return t.handleMetaGet(u(e,n(e)))}}function m(t){let{httpHandler:n,corsHeaders:r,baseContext:a}=l(t);return async function(t,o){let s=u(t,r(t));return t.method===`POST`?n.handleSqlPost(s,a(t,o)):t.method===`GET`?n.handleSqlGet(s,a(t,o)):i.NextResponse.json(e.i(`Method not allowed`,405),{status:405})}}function h(e){let{httpHandler:t,corsHeaders:n,baseContext:r}=l(e);return async function(e,a){let o=u(e,n(e));return e.method===`POST`?t.handleDryRunPost(o,r(e,a)):e.method===`GET`?t.handleDryRunGet(o,r(e,a)):i.NextResponse.json({error:`Method not allowed`,valid:!1},{status:405})}}function g(t){let{httpHandler:n,corsHeaders:r,baseContext:a}=l(t);return async function(t,o){return t.method===`POST`?n.handleBatchPost(u(t,r(t)),a(t,o)):i.NextResponse.json(e.i(`Method not allowed - use POST`,405),{status:405})}}function _(e){let{httpHandler:t,corsHeaders:n,baseContext:r}=l(e);return async function(e,a){return e.method===`POST`?t.handleExplainPost(u(e,n(e)),r(e,a)):i.NextResponse.json({error:`Method not allowed`},{status:405})}}function v(t){let{cors:n}=s(t),r=o(t);return async function(t,a){try{if(t.method!==`POST`)return i.NextResponse.json(e.i(`Method not allowed - use POST`,405),{status:405});let a=await e.p(r,await t.json());return i.NextResponse.json(a,{headers:n?c(t,n):{}})}catch(t){return process.env.NODE_ENV!==`test`&&console.error(`Next.js discover handler error:`,t),i.NextResponse.json(e.i(t instanceof Error?t.message:`Discovery failed`,500),{status:500})}}}function y(t){let{cors:n}=s(t),r=o(t);return async function(t,a){try{if(t.method!==`POST`)return i.NextResponse.json(e.i(`Method not allowed - use POST`,405),{status:405});let a=await t.json();if(!a.naturalLanguage)return i.NextResponse.json(e.i(`naturalLanguage field is required`,400),{status:400});let o=await e.d(r,a);return i.NextResponse.json(o,{headers:n?c(t,n):{}})}catch(t){return process.env.NODE_ENV!==`test`&&console.error(`Next.js suggest handler error:`,t),i.NextResponse.json(e.i(t instanceof Error?t.message:`Query suggestion failed`,500),{status:500})}}}function b(t){let{cors:n}=s(t),r=o(t);return async function(t,a){try{if(t.method!==`POST`)return i.NextResponse.json(e.i(`Method not allowed - use POST`,405),{status:405});let a=await t.json();if(!a.query)return i.NextResponse.json(e.i(`query field is required`,400),{status:400});let o=await e.f(r,a);return i.NextResponse.json(o,{headers:n?c(t,n):{}})}catch(t){return process.env.NODE_ENV!==`test`&&console.error(`Next.js validate handler error:`,t),i.NextResponse.json(e.i(t instanceof Error?t.message:`Query validation failed`,500),{status:500})}}}function x(t){let{extractSecurityContext:n,cors:r}=s(t),a=o(t);return async function(t,o){try{if(t.method!==`POST`)return i.NextResponse.json(e.i(`Method not allowed - use POST`,405),{status:405});let s=await t.json();if(!s.query)return i.NextResponse.json(e.i(`query field is required`,400),{status:400});let l=await e.m(a,await n(t,o),s);return i.NextResponse.json(l,{headers:r?c(t,r):{}})}catch(t){return process.env.NODE_ENV!==`test`&&console.error(`Next.js MCP load handler error:`,t),i.NextResponse.json(e.i(t instanceof Error?t.message:`Query execution failed`,500),{status:500})}}}function S(t){let{httpHandler:r,corsHeaders:o,baseContext:s}=l(t),{mcp:c={enabled:!0}}=t,d=(e,t)=>{Object.entries(o(e)).forEach(([e,n])=>t.set(e,n))};return async function(t,l){return c.resourceMetadataUrl&&!n.u(t.headers.get(`authorization`))?i.NextResponse.json({error:`Bearer token required`},{status:401,headers:{"WWW-Authenticate":n.c(c.resourceMetadataUrl)}}):t.method===`DELETE`?i.NextResponse.json({error:`Session termination not supported`},{status:405}):t.method===`GET`?a(t,d):t.method===`POST`?r.handleMcpPost(u(t,o(t)),s(t,l)):i.NextResponse.json(e.i(`Method not allowed - use POST`,405),{status:405})}}function C(e){let{cors:t}=s(e),{agent:n}=e;if(!n)throw Error(`agent config is required for createAgentChatHandler`);let a=o(e);return async function(o,s){try{if(o.method!==`POST`)return i.NextResponse.json({error:`Method not allowed - use POST`},{status:405});let{handleAgentChat:l}=await Promise.resolve().then(()=>require("../handler-DRZb2ip6.cjs")),{message:u,sessionId:d,history:f}=await o.json();if(!u||typeof u!=`string`)return i.NextResponse.json({error:`message is required and must be a string`},{status:400});let p=(n.apiKey||``).trim();if(n.allowClientApiKey){let e=o.headers.get(`x-agent-api-key`);e&&(p=e.trim())}if(!p)return i.NextResponse.json({error:`No API key configured. Set agent.apiKey in server config or send X-Agent-Api-Key header.`},{status:401});let m=n.allowClientApiKey&&o.headers.get(`x-agent-provider`)||void 0,h=n.allowClientApiKey&&o.headers.get(`x-agent-model`)||void 0,g=n.allowClientApiKey&&o.headers.get(`x-agent-provider-endpoint`)||void 0,_=r.r(await e.extractSecurityContext(o,s),e=>o.headers.get(e)??void 0),v=n.buildSystemContext?.(_),y=new TextEncoder,b=new ReadableStream({async start(e){try{let t=l({message:u,sessionId:d,history:f,semanticLayer:a,securityContext:_,agentConfig:n,apiKey:p,systemContext:v,providerOverride:m,modelOverride:h,baseURLOverride:g});for await(let n of t){let t=`data: ${JSON.stringify(n)}\n\n`;e.enqueue(y.encode(t))}}catch(t){let n={type:`error`,data:{message:t instanceof Error?t.message:`Stream failed`}};e.enqueue(y.encode(`data: ${JSON.stringify(n)}\n\n`))}finally{e.close()}}}),x=new Headers({"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`});if(t){let e=c(o,t);Object.entries(e).forEach(([e,t])=>x.set(e,t))}return new Response(b,{status:200,headers:x})}catch(e){return process.env.NODE_ENV!==`test`&&console.error(`Next.js agent chat handler error:`,e),i.NextResponse.json({error:e instanceof Error?e.message:`Agent chat failed`},{status:500})}}}function w(e){let{mcp:t={enabled:!0}}=e,n={load:f(e),meta:p(e),sql:m(e),dryRun:h(e),batch:g(e),explain:_(e)};return t.enabled!==!1&&(n.mcpRpc=S(e)),e.agent&&(n.agentChat=C(e)),n}exports.createAgentChatHandler=C,exports.createBatchHandler=g,exports.createCubeHandlers=w,exports.createDiscoverHandler=v,exports.createDryRunHandler=h,exports.createExplainHandler=_,exports.createLoadHandler=f,exports.createMcpLoadHandler=x,exports.createMcpRpcHandler=S,exports.createMetaHandler=p,exports.createOptionsHandler=d,exports.createSqlHandler=m,exports.createSuggestHandler=y,exports.createValidateHandler=b;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../utils-CBR-9AMD.cjs"),t=require("../compiler-D0v5KJhv.cjs"),n=require("../mcp-transport-BuU5CrKL.cjs"),r=require("../core-CVqTwOR3.cjs");let i=require("next/server");function a(e,t){let r=new TextEncoder,a=n.v(),o=new ReadableStream({start(e){e.enqueue(r.encode(n.x({jsonrpc:`2.0`,method:`mcp/ready`,params:{protocol:`streamable-http`}},a,15e3)))}}),s=new Headers({"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`});return t(e,s),new i.NextResponse(o,{status:200,headers:s})}function o(e){if(e.semanticLayer)return e.semanticLayer;let{cubes:n,drizzle:r,schema:i,engineType:a,cache:o,rlsSetup:s}=e;if(!n||n.length===0)throw Error(`At least one cube must be provided in the cubes array`);let c=new t.t({drizzle:r,schema:i,engineType:a,cache:o,rlsSetup:s});return n.forEach(e=>{c.registerCube(e)}),c}function s(e){return{extractSecurityContext:async(t,n)=>r.o(await e.extractSecurityContext(t,n),r.a(e=>t.headers.get(e))),cors:e.cors?{...e.cors,allowedHeaders:r.i(e.cors.allowedHeaders)}:void 0}}function c(e,t){let n=e.headers.get(`origin`),r={};return t.origin&&(typeof t.origin==`string`?r[`Access-Control-Allow-Origin`]=t.origin:Array.isArray(t.origin)?n&&t.origin.includes(n)&&(r[`Access-Control-Allow-Origin`]=n):typeof t.origin==`function`&&n&&t.origin(n)&&(r[`Access-Control-Allow-Origin`]=n)),t.methods&&(r[`Access-Control-Allow-Methods`]=t.methods.join(`, `)),t.allowedHeaders&&(r[`Access-Control-Allow-Headers`]=t.allowedHeaders.join(`, `)),t.credentials&&(r[`Access-Control-Allow-Credentials`]=`true`),r}function l(e){let t=r.t({semanticLayer:o(e),onError:e=>{process.env.NODE_ENV!==`test`&&console.error(`Next.js handler error:`,e)},mcp:e.mcp}),n=e.cors?{...e.cors,allowedHeaders:r.i(e.cors.allowedHeaders)}:void 0;return{httpHandler:t,corsHeaders:e=>n?c(e,n):{},baseContext:(t,n)=>()=>e.extractSecurityContext(t,n)}}function u(e,t){let n={};return{getHeader:t=>e.headers.get(t)??void 0,getBody:async()=>{try{return await e.json()}catch{return null}},getQueryParam:t=>e.nextUrl.searchParams.get(t)??void 0,send:(e,r)=>i.NextResponse.json(r,{status:e,headers:{...t,...n}}),setHeader:(e,t)=>{n[e]=t},sendEmpty:e=>new i.NextResponse(null,{status:e,headers:{...t,...n}}),sendSse:(e,r)=>new i.NextResponse(r,{status:e,headers:{"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`,...t,...n}})}}function d(e){return async function(t){let n=c(t,{...e,allowedHeaders:r.i(e.allowedHeaders)});return new Response(null,{status:200,headers:n})}}function f(t){let{httpHandler:n,corsHeaders:r,baseContext:a}=l(t);return async function(t,o){let s=u(t,r(t));return t.method===`POST`?n.handleLoadPost(s,a(t,o)):t.method===`GET`?n.handleLoadGet(s,a(t,o)):i.NextResponse.json(e.i(`Method not allowed`,405),{status:405})}}function p(e){let{httpHandler:t,corsHeaders:n}=l(e);return async function(e,r){return t.handleMetaGet(u(e,n(e)))}}function m(t){let{httpHandler:n,corsHeaders:r,baseContext:a}=l(t);return async function(t,o){let s=u(t,r(t));return t.method===`POST`?n.handleSqlPost(s,a(t,o)):t.method===`GET`?n.handleSqlGet(s,a(t,o)):i.NextResponse.json(e.i(`Method not allowed`,405),{status:405})}}function h(e){let{httpHandler:t,corsHeaders:n,baseContext:r}=l(e);return async function(e,a){let o=u(e,n(e));return e.method===`POST`?t.handleDryRunPost(o,r(e,a)):e.method===`GET`?t.handleDryRunGet(o,r(e,a)):i.NextResponse.json({error:`Method not allowed`,valid:!1},{status:405})}}function g(t){let{httpHandler:n,corsHeaders:r,baseContext:a}=l(t);return async function(t,o){return t.method===`POST`?n.handleBatchPost(u(t,r(t)),a(t,o)):i.NextResponse.json(e.i(`Method not allowed - use POST`,405),{status:405})}}function _(e){let{httpHandler:t,corsHeaders:n,baseContext:r}=l(e);return async function(e,a){return e.method===`POST`?t.handleExplainPost(u(e,n(e)),r(e,a)):i.NextResponse.json({error:`Method not allowed`},{status:405})}}function v(t){let{cors:n}=s(t),r=o(t);return async function(t,a){try{if(t.method!==`POST`)return i.NextResponse.json(e.i(`Method not allowed - use POST`,405),{status:405});let a=await t.json(),o=await e.p(r,a);return i.NextResponse.json(o,{headers:n?c(t,n):{}})}catch(t){return process.env.NODE_ENV!==`test`&&console.error(`Next.js discover handler error:`,t),i.NextResponse.json(e.i(t instanceof Error?t.message:`Discovery failed`,500),{status:500})}}}function y(t){let{cors:n}=s(t),r=o(t);return async function(t,a){try{if(t.method!==`POST`)return i.NextResponse.json(e.i(`Method not allowed - use POST`,405),{status:405});let a=await t.json();if(!a.naturalLanguage)return i.NextResponse.json(e.i(`naturalLanguage field is required`,400),{status:400});let o=await e.d(r,a);return i.NextResponse.json(o,{headers:n?c(t,n):{}})}catch(t){return process.env.NODE_ENV!==`test`&&console.error(`Next.js suggest handler error:`,t),i.NextResponse.json(e.i(t instanceof Error?t.message:`Query suggestion failed`,500),{status:500})}}}function b(t){let{cors:n}=s(t),r=o(t);return async function(t,a){try{if(t.method!==`POST`)return i.NextResponse.json(e.i(`Method not allowed - use POST`,405),{status:405});let a=await t.json();if(!a.query)return i.NextResponse.json(e.i(`query field is required`,400),{status:400});let o=await e.f(r,a);return i.NextResponse.json(o,{headers:n?c(t,n):{}})}catch(t){return process.env.NODE_ENV!==`test`&&console.error(`Next.js validate handler error:`,t),i.NextResponse.json(e.i(t instanceof Error?t.message:`Query validation failed`,500),{status:500})}}}function x(t){let{extractSecurityContext:n,cors:r}=s(t),a=o(t);return async function(t,o){try{if(t.method!==`POST`)return i.NextResponse.json(e.i(`Method not allowed - use POST`,405),{status:405});let s=await t.json();if(!s.query)return i.NextResponse.json(e.i(`query field is required`,400),{status:400});let l=await n(t,o),u=await e.m(a,l,s);return i.NextResponse.json(u,{headers:r?c(t,r):{}})}catch(t){return process.env.NODE_ENV!==`test`&&console.error(`Next.js MCP load handler error:`,t),i.NextResponse.json(e.i(t instanceof Error?t.message:`Query execution failed`,500),{status:500})}}}function S(t){let{httpHandler:r,corsHeaders:o,baseContext:s}=l(t),{mcp:c={enabled:!0}}=t,d=(e,t)=>{Object.entries(o(e)).forEach(([e,n])=>t.set(e,n))};return async function(t,l){if(c.resourceMetadataUrl&&!n.u(t.headers.get(`authorization`)))return i.NextResponse.json({error:`Bearer token required`},{status:401,headers:{"WWW-Authenticate":n.c(c.resourceMetadataUrl)}});if(t.method===`DELETE`||t.method===`GET`){let e=n.C(t.headers.get(`origin`),n.g(c));if(!e.valid)return i.NextResponse.json({error:e.reason},{status:403})}return t.method===`DELETE`?i.NextResponse.json({error:`Session termination not supported`},{status:405}):t.method===`GET`?a(t,d):t.method===`POST`?r.handleMcpPost(u(t,o(t)),s(t,l)):i.NextResponse.json(e.i(`Method not allowed - use POST`,405),{status:405})}}function C(e){let{cors:t}=s(e),{agent:n}=e;if(!n)throw Error(`agent config is required for createAgentChatHandler`);let a=o(e);return async function(o,s){try{if(o.method!==`POST`)return i.NextResponse.json({error:`Method not allowed - use POST`},{status:405});let{handleAgentChat:l}=await Promise.resolve().then(()=>require("../handler-DyIyrFFp.cjs")),{message:u,sessionId:d,history:f}=await o.json();if(!u||typeof u!=`string`)return i.NextResponse.json({error:`message is required and must be a string`},{status:400});let p=(n.apiKey||``).trim();if(n.allowClientApiKey){let e=o.headers.get(`x-agent-api-key`);e&&(p=e.trim())}if(!p)return i.NextResponse.json({error:`No API key configured. Set agent.apiKey in server config or send X-Agent-Api-Key header.`},{status:401});let m=n.allowClientApiKey&&o.headers.get(`x-agent-provider`)||void 0,h=n.allowClientApiKey&&o.headers.get(`x-agent-model`)||void 0,g=n.allowClientApiKey&&o.headers.get(`x-agent-provider-endpoint`)||void 0,_=r.r(await e.extractSecurityContext(o,s),e=>o.headers.get(e)??void 0),v=n.buildSystemContext?.(_),y=new TextEncoder,b=new ReadableStream({async start(e){try{let t=l({message:u,sessionId:d,history:f,semanticLayer:a,securityContext:_,agentConfig:n,apiKey:p,systemContext:v,providerOverride:m,modelOverride:h,baseURLOverride:g});for await(let n of t){let t=`data: ${JSON.stringify(n)}\n\n`;e.enqueue(y.encode(t))}}catch(t){let n={type:`error`,data:{message:t instanceof Error?t.message:`Stream failed`}};e.enqueue(y.encode(`data: ${JSON.stringify(n)}\n\n`))}finally{e.close()}}}),x=new Headers({"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`});if(t){let e=c(o,t);Object.entries(e).forEach(([e,t])=>x.set(e,t))}return new Response(b,{status:200,headers:x})}catch(e){return process.env.NODE_ENV!==`test`&&console.error(`Next.js agent chat handler error:`,e),i.NextResponse.json({error:e instanceof Error?e.message:`Agent chat failed`},{status:500})}}}function w(e){let{mcp:t={enabled:!0}}=e,n=o(e),r={...e,semanticLayer:n},i={load:f(r),meta:p(r),sql:m(r),dryRun:h(r),batch:g(r),explain:_(r)};return t.enabled!==!1&&(i.mcpRpc=S(r)),e.agent&&(i.agentChat=C(r)),i}exports.createAgentChatHandler=C,exports.createBatchHandler=g,exports.createCubeHandlers=w,exports.createDiscoverHandler=v,exports.createDryRunHandler=h,exports.createExplainHandler=_,exports.createLoadHandler=f,exports.createMcpLoadHandler=x,exports.createMcpRpcHandler=S,exports.createMetaHandler=p,exports.createOptionsHandler=d,exports.createSqlHandler=m,exports.createSuggestHandler=y,exports.createValidateHandler=b;

package/dist/adapters/nextjs/index.d.ts

@@ -1,6 +1,7 @@
 import { NextRequest } from 'next/server';
 import { SemanticQuery, SecurityContext, DatabaseExecutor, DrizzleDatabase, Cube, CacheConfig, RLSSetupFn } from '../../server/index.js';
 import { AgentConfig } from '../../server/agent/types.js';
+import { SemanticLayerCompiler } from '../../server/compiler.js';
 import { PostgresJsDatabase } from 'drizzle-orm/postgres-js';
 import { MySql2Database } from 'drizzle-orm/mysql2';
 import { BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';
@@ -100,6 +101,15 @@ export interface NextAdapterOptions {
      * to configure RLS (e.g., set JWT claims and switch Postgres roles), then runs the query.
      */
     rlsSetup?: RLSSetupFn;
+    /**
+     * Pre-built semantic layer to reuse across handlers.
+     * When provided, the adapter reuses this compiler instead of constructing a
+     * new one (and skips cube registration — register cubes on it yourself).
+     * `createCubeHandlers` sets this internally so every handler it returns shares
+     * one compiler, keeping metadata/result caches consistent. Mirrors the Hono
+     * adapter's `semanticLayer` option.
+     */
+    semanticLayer?: SemanticLayerCompiler;
 }
 export interface RouteContext {
     params?: Record<string, string | string[]>;

package/dist/adapters/nextjs/index.js

@@ -1,12 +1,12 @@
-import { d as e, f as t, i as n, m as r, p as i } from "../utils-BPWZsX7k.js";
-import { t as a } from "../compiler-LKTN9PTt.js";
-import { _ as o, b as s, c, u as l } from "../mcp-transport-Bw_zqky2.js";
-import { a as u, i as d, o as f, r as p, t as m } from "../core-Bbchr0ui.js";
-import { NextResponse as h } from "next/server";
+import { d as e, f as t, i as n, m as r, p as i } from "../utils-U7gV5wQL.js";
+import { t as a } from "../compiler-ZruQ85ff.js";
+import { C as o, c as s, g as c, u as l, v as u, x as d } from "../mcp-transport-l8DhKzR5.js";
+import { a as f, i as p, o as m, r as h, t as g } from "../core-DoSUiMmv.js";
+import { NextResponse as _ } from "next/server";
 //#region src/adapters/nextjs/mcp-handler.ts
-function g(e, t) {
-	let n = new TextEncoder(), r = o(), i = new ReadableStream({ start(e) {
-		e.enqueue(n.encode(s({
+function v(e, t) {
+	let n = new TextEncoder(), r = u(), i = new ReadableStream({ start(e) {
+		e.enqueue(n.encode(d({
 			jsonrpc: "2.0",
 			method: "mcp/ready",
 			params: { protocol: "streamable-http" }
@@ -16,14 +16,15 @@ function g(e, t) {
 		"Cache-Control": "no-cache",
 		Connection: "keep-alive"
 	});
-	return t(e, a), new h(i, {
+	return t(e, a), new _(i, {
 		status: 200,
 		headers: a
 	});
 }
 //#endregion
 //#region src/adapters/nextjs/index.ts
-function _(e) {
+function y(e) {
+	if (e.semanticLayer) return e.semanticLayer;
 	let { cubes: t, drizzle: n, schema: r, engineType: i, cache: o, rlsSetup: s } = e;
 	if (!t || t.length === 0) throw Error("At least one cube must be provided in the cubes array");
 	let c = new a({
@@ -37,37 +38,37 @@ function _(e) {
 		c.registerCube(e);
 	}), c;
 }
-function v(e) {
+function b(e) {
 	return {
-		extractSecurityContext: async (t, n) => f(await e.extractSecurityContext(t, n), u((e) => t.headers.get(e))),
+		extractSecurityContext: async (t, n) => m(await e.extractSecurityContext(t, n), f((e) => t.headers.get(e))),
 		cors: e.cors ? {
 			...e.cors,
-			allowedHeaders: d(e.cors.allowedHeaders)
+			allowedHeaders: p(e.cors.allowedHeaders)
 		} : void 0
 	};
 }
-function y(e, t) {
+function x(e, t) {
 	let n = e.headers.get("origin"), r = {};
 	return t.origin && (typeof t.origin == "string" ? r["Access-Control-Allow-Origin"] = t.origin : Array.isArray(t.origin) ? n && t.origin.includes(n) && (r["Access-Control-Allow-Origin"] = n) : typeof t.origin == "function" && n && t.origin(n) && (r["Access-Control-Allow-Origin"] = n)), t.methods && (r["Access-Control-Allow-Methods"] = t.methods.join(", ")), t.allowedHeaders && (r["Access-Control-Allow-Headers"] = t.allowedHeaders.join(", ")), t.credentials && (r["Access-Control-Allow-Credentials"] = "true"), r;
 }
-function b(e) {
-	let t = m({
-		semanticLayer: _(e),
+function S(e) {
+	let t = g({
+		semanticLayer: y(e),
 		onError: (e) => {
 			process.env.NODE_ENV !== "test" && console.error("Next.js handler error:", e);
 		},
 		mcp: e.mcp
 	}), n = e.cors ? {
 		...e.cors,
-		allowedHeaders: d(e.cors.allowedHeaders)
+		allowedHeaders: p(e.cors.allowedHeaders)
 	} : void 0;
 	return {
 		httpHandler: t,
-		corsHeaders: (e) => n ? y(e, n) : {},
+		corsHeaders: (e) => n ? x(e, n) : {},
 		baseContext: (t, n) => () => e.extractSecurityContext(t, n)
 	};
 }
-function x(e, t) {
+function C(e, t) {
 	let n = {};
 	return {
 		getHeader: (t) => e.headers.get(t) ?? void 0,
@@ -79,7 +80,7 @@ function x(e, t) {
 			}
 		},
 		getQueryParam: (t) => e.nextUrl.searchParams.get(t) ?? void 0,
-		send: (e, r) => h.json(r, {
+		send: (e, r) => _.json(r, {
 			status: e,
 			headers: {
 				...t,
@@ -89,14 +90,14 @@ function x(e, t) {
 		setHeader: (e, t) => {
 			n[e] = t;
 		},
-		sendEmpty: (e) => new h(null, {
+		sendEmpty: (e) => new _(null, {
 			status: e,
 			headers: {
 				...t,
 				...n
 			}
 		}),
-		sendSse: (e, r) => new h(r, {
+		sendSse: (e, r) => new _(r, {
 			status: e,
 			headers: {
 				"Content-Type": "text/event-stream",
@@ -108,11 +109,11 @@ function x(e, t) {
 		})
 	};
 }
-function S(e) {
+function w(e) {
 	return async function(t) {
-		let n = y(t, {
+		let n = x(t, {
 			...e,
-			allowedHeaders: d(e.allowedHeaders)
+			allowedHeaders: p(e.allowedHeaders)
 		});
 		return new Response(null, {
 			status: 200,
@@ -120,142 +121,147 @@ function S(e) {
 		});
 	};
 }
-function C(e) {
-	let { httpHandler: t, corsHeaders: r, baseContext: i } = b(e);
+function T(e) {
+	let { httpHandler: t, corsHeaders: r, baseContext: i } = S(e);
 	return async function(e, a) {
-		let o = x(e, r(e));
-		return e.method === "POST" ? t.handleLoadPost(o, i(e, a)) : e.method === "GET" ? t.handleLoadGet(o, i(e, a)) : h.json(n("Method not allowed", 405), { status: 405 });
+		let o = C(e, r(e));
+		return e.method === "POST" ? t.handleLoadPost(o, i(e, a)) : e.method === "GET" ? t.handleLoadGet(o, i(e, a)) : _.json(n("Method not allowed", 405), { status: 405 });
 	};
 }
-function w(e) {
-	let { httpHandler: t, corsHeaders: n } = b(e);
+function E(e) {
+	let { httpHandler: t, corsHeaders: n } = S(e);
 	return async function(e, r) {
-		return t.handleMetaGet(x(e, n(e)));
+		return t.handleMetaGet(C(e, n(e)));
 	};
 }
-function T(e) {
-	let { httpHandler: t, corsHeaders: r, baseContext: i } = b(e);
+function D(e) {
+	let { httpHandler: t, corsHeaders: r, baseContext: i } = S(e);
 	return async function(e, a) {
-		let o = x(e, r(e));
-		return e.method === "POST" ? t.handleSqlPost(o, i(e, a)) : e.method === "GET" ? t.handleSqlGet(o, i(e, a)) : h.json(n("Method not allowed", 405), { status: 405 });
+		let o = C(e, r(e));
+		return e.method === "POST" ? t.handleSqlPost(o, i(e, a)) : e.method === "GET" ? t.handleSqlGet(o, i(e, a)) : _.json(n("Method not allowed", 405), { status: 405 });
 	};
 }
-function E(e) {
-	let { httpHandler: t, corsHeaders: n, baseContext: r } = b(e);
+function O(e) {
+	let { httpHandler: t, corsHeaders: n, baseContext: r } = S(e);
 	return async function(e, i) {
-		let a = x(e, n(e));
-		return e.method === "POST" ? t.handleDryRunPost(a, r(e, i)) : e.method === "GET" ? t.handleDryRunGet(a, r(e, i)) : h.json({
+		let a = C(e, n(e));
+		return e.method === "POST" ? t.handleDryRunPost(a, r(e, i)) : e.method === "GET" ? t.handleDryRunGet(a, r(e, i)) : _.json({
 			error: "Method not allowed",
 			valid: !1
 		}, { status: 405 });
 	};
 }
-function D(e) {
-	let { httpHandler: t, corsHeaders: r, baseContext: i } = b(e);
+function k(e) {
+	let { httpHandler: t, corsHeaders: r, baseContext: i } = S(e);
 	return async function(e, a) {
-		return e.method === "POST" ? t.handleBatchPost(x(e, r(e)), i(e, a)) : h.json(n("Method not allowed - use POST", 405), { status: 405 });
+		return e.method === "POST" ? t.handleBatchPost(C(e, r(e)), i(e, a)) : _.json(n("Method not allowed - use POST", 405), { status: 405 });
 	};
 }
-function O(e) {
-	let { httpHandler: t, corsHeaders: n, baseContext: r } = b(e);
+function A(e) {
+	let { httpHandler: t, corsHeaders: n, baseContext: r } = S(e);
 	return async function(e, i) {
-		return e.method === "POST" ? t.handleExplainPost(x(e, n(e)), r(e, i)) : h.json({ error: "Method not allowed" }, { status: 405 });
+		return e.method === "POST" ? t.handleExplainPost(C(e, n(e)), r(e, i)) : _.json({ error: "Method not allowed" }, { status: 405 });
 	};
 }
-function k(e) {
-	let { cors: t } = v(e), r = _(e);
+function j(e) {
+	let { cors: t } = b(e), r = y(e);
 	return async function(e, a) {
 		try {
-			if (e.method !== "POST") return h.json(n("Method not allowed - use POST", 405), { status: 405 });
-			let a = await i(r, await e.json());
-			return h.json(a, { headers: t ? y(e, t) : {} });
+			if (e.method !== "POST") return _.json(n("Method not allowed - use POST", 405), { status: 405 });
+			let a = await e.json(), o = await i(r, a);
+			return _.json(o, { headers: t ? x(e, t) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js discover handler error:", e), h.json(n(e instanceof Error ? e.message : "Discovery failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js discover handler error:", e), _.json(n(e instanceof Error ? e.message : "Discovery failed", 500), { status: 500 });
 		}
 	};
 }
-function A(t) {
-	let { cors: r } = v(t), i = _(t);
+function M(t) {
+	let { cors: r } = b(t), i = y(t);
 	return async function(t, a) {
 		try {
-			if (t.method !== "POST") return h.json(n("Method not allowed - use POST", 405), { status: 405 });
+			if (t.method !== "POST") return _.json(n("Method not allowed - use POST", 405), { status: 405 });
 			let a = await t.json();
-			if (!a.naturalLanguage) return h.json(n("naturalLanguage field is required", 400), { status: 400 });
+			if (!a.naturalLanguage) return _.json(n("naturalLanguage field is required", 400), { status: 400 });
 			let o = await e(i, a);
-			return h.json(o, { headers: r ? y(t, r) : {} });
+			return _.json(o, { headers: r ? x(t, r) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js suggest handler error:", e), h.json(n(e instanceof Error ? e.message : "Query suggestion failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js suggest handler error:", e), _.json(n(e instanceof Error ? e.message : "Query suggestion failed", 500), { status: 500 });
 		}
 	};
 }
-function j(e) {
-	let { cors: r } = v(e), i = _(e);
+function N(e) {
+	let { cors: r } = b(e), i = y(e);
 	return async function(e, a) {
 		try {
-			if (e.method !== "POST") return h.json(n("Method not allowed - use POST", 405), { status: 405 });
+			if (e.method !== "POST") return _.json(n("Method not allowed - use POST", 405), { status: 405 });
 			let a = await e.json();
-			if (!a.query) return h.json(n("query field is required", 400), { status: 400 });
+			if (!a.query) return _.json(n("query field is required", 400), { status: 400 });
 			let o = await t(i, a);
-			return h.json(o, { headers: r ? y(e, r) : {} });
+			return _.json(o, { headers: r ? x(e, r) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js validate handler error:", e), h.json(n(e instanceof Error ? e.message : "Query validation failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js validate handler error:", e), _.json(n(e instanceof Error ? e.message : "Query validation failed", 500), { status: 500 });
 		}
 	};
 }
-function M(e) {
-	let { extractSecurityContext: t, cors: i } = v(e), a = _(e);
+function P(e) {
+	let { extractSecurityContext: t, cors: i } = b(e), a = y(e);
 	return async function(e, o) {
 		try {
-			if (e.method !== "POST") return h.json(n("Method not allowed - use POST", 405), { status: 405 });
+			if (e.method !== "POST") return _.json(n("Method not allowed - use POST", 405), { status: 405 });
 			let s = await e.json();
-			if (!s.query) return h.json(n("query field is required", 400), { status: 400 });
-			let c = await r(a, await t(e, o), s);
-			return h.json(c, { headers: i ? y(e, i) : {} });
+			if (!s.query) return _.json(n("query field is required", 400), { status: 400 });
+			let c = await t(e, o), l = await r(a, c, s);
+			return _.json(l, { headers: i ? x(e, i) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js MCP load handler error:", e), h.json(n(e instanceof Error ? e.message : "Query execution failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js MCP load handler error:", e), _.json(n(e instanceof Error ? e.message : "Query execution failed", 500), { status: 500 });
 		}
 	};
 }
-function N(e) {
-	let { httpHandler: t, corsHeaders: r, baseContext: i } = b(e), { mcp: a = { enabled: !0 } } = e, o = (e, t) => {
+function F(e) {
+	let { httpHandler: t, corsHeaders: r, baseContext: i } = S(e), { mcp: a = { enabled: !0 } } = e, u = (e, t) => {
 		Object.entries(r(e)).forEach(([e, n]) => t.set(e, n));
 	};
-	return async function(e, s) {
-		return a.resourceMetadataUrl && !l(e.headers.get("authorization")) ? h.json({ error: "Bearer token required" }, {
+	return async function(e, d) {
+		if (a.resourceMetadataUrl && !l(e.headers.get("authorization"))) return _.json({ error: "Bearer token required" }, {
 			status: 401,
-			headers: { "WWW-Authenticate": c(a.resourceMetadataUrl) }
-		}) : e.method === "DELETE" ? h.json({ error: "Session termination not supported" }, { status: 405 }) : e.method === "GET" ? g(e, o) : e.method === "POST" ? t.handleMcpPost(x(e, r(e)), i(e, s)) : h.json(n("Method not allowed - use POST", 405), { status: 405 });
+			headers: { "WWW-Authenticate": s(a.resourceMetadataUrl) }
+		});
+		if (e.method === "DELETE" || e.method === "GET") {
+			let t = o(e.headers.get("origin"), c(a));
+			if (!t.valid) return _.json({ error: t.reason }, { status: 403 });
+		}
+		return e.method === "DELETE" ? _.json({ error: "Session termination not supported" }, { status: 405 }) : e.method === "GET" ? v(e, u) : e.method === "POST" ? t.handleMcpPost(C(e, r(e)), i(e, d)) : _.json(n("Method not allowed - use POST", 405), { status: 405 });
 	};
 }
-function P(e) {
-	let { cors: t } = v(e), { agent: n } = e;
+function I(e) {
+	let { cors: t } = b(e), { agent: n } = e;
 	if (!n) throw Error("agent config is required for createAgentChatHandler");
-	let r = _(e);
+	let r = y(e);
 	return async function(i, a) {
 		try {
-			if (i.method !== "POST") return h.json({ error: "Method not allowed - use POST" }, { status: 405 });
-			let { handleAgentChat: o } = await import("../handler-u8FyzPBT.js"), { message: s, sessionId: c, history: l } = await i.json();
-			if (!s || typeof s != "string") return h.json({ error: "message is required and must be a string" }, { status: 400 });
+			if (i.method !== "POST") return _.json({ error: "Method not allowed - use POST" }, { status: 405 });
+			let { handleAgentChat: o } = await import("../handler-j74EJDdo.js"), { message: s, sessionId: c, history: l } = await i.json();
+			if (!s || typeof s != "string") return _.json({ error: "message is required and must be a string" }, { status: 400 });
 			let u = (n.apiKey || "").trim();
 			if (n.allowClientApiKey) {
 				let e = i.headers.get("x-agent-api-key");
 				e && (u = e.trim());
 			}
-			if (!u) return h.json({ error: "No API key configured. Set agent.apiKey in server config or send X-Agent-Api-Key header." }, { status: 401 });
-			let d = n.allowClientApiKey && i.headers.get("x-agent-provider") || void 0, f = n.allowClientApiKey && i.headers.get("x-agent-model") || void 0, m = n.allowClientApiKey && i.headers.get("x-agent-provider-endpoint") || void 0, g = p(await e.extractSecurityContext(i, a), (e) => i.headers.get(e) ?? void 0), _ = n.buildSystemContext?.(g), v = new TextEncoder(), b = new ReadableStream({ async start(e) {
+			if (!u) return _.json({ error: "No API key configured. Set agent.apiKey in server config or send X-Agent-Api-Key header." }, { status: 401 });
+			let d = n.allowClientApiKey && i.headers.get("x-agent-provider") || void 0, f = n.allowClientApiKey && i.headers.get("x-agent-model") || void 0, p = n.allowClientApiKey && i.headers.get("x-agent-provider-endpoint") || void 0, m = h(await e.extractSecurityContext(i, a), (e) => i.headers.get(e) ?? void 0), g = n.buildSystemContext?.(m), v = new TextEncoder(), y = new ReadableStream({ async start(e) {
 				try {
 					let t = o({
 						message: s,
 						sessionId: c,
 						history: l,
 						semanticLayer: r,
-						securityContext: g,
+						securityContext: m,
 						agentConfig: n,
 						apiKey: u,
-						systemContext: _,
+						systemContext: g,
 						providerOverride: d,
 						modelOverride: f,
-						baseURLOverride: m
+						baseURLOverride: p
 					});
 					for await (let n of t) {
 						let t = `data: ${JSON.stringify(n)}\n\n`;
@@ -270,34 +276,37 @@ function P(e) {
 				} finally {
 					e.close();
 				}
-			} }), x = new Headers({
+			} }), b = new Headers({
 				"Content-Type": "text/event-stream",
 				"Cache-Control": "no-cache",
 				Connection: "keep-alive"
 			});
 			if (t) {
-				let e = y(i, t);
-				Object.entries(e).forEach(([e, t]) => x.set(e, t));
+				let e = x(i, t);
+				Object.entries(e).forEach(([e, t]) => b.set(e, t));
 			}
-			return new Response(b, {
+			return new Response(y, {
 				status: 200,
-				headers: x
+				headers: b
 			});
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js agent chat handler error:", e), h.json({ error: e instanceof Error ? e.message : "Agent chat failed" }, { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js agent chat handler error:", e), _.json({ error: e instanceof Error ? e.message : "Agent chat failed" }, { status: 500 });
 		}
 	};
 }
-function F(e) {
-	let { mcp: t = { enabled: !0 } } = e, n = {
-		load: C(e),
-		meta: w(e),
-		sql: T(e),
-		dryRun: E(e),
-		batch: D(e),
-		explain: O(e)
+function L(e) {
+	let { mcp: t = { enabled: !0 } } = e, n = y(e), r = {
+		...e,
+		semanticLayer: n
+	}, i = {
+		load: T(r),
+		meta: E(r),
+		sql: D(r),
+		dryRun: O(r),
+		batch: k(r),
+		explain: A(r)
 	};
-	return t.enabled !== !1 && (n.mcpRpc = N(e)), e.agent && (n.agentChat = P(e)), n;
+	return t.enabled !== !1 && (i.mcpRpc = F(r)), e.agent && (i.agentChat = I(r)), i;
 }
 //#endregion
-export { P as createAgentChatHandler, D as createBatchHandler, F as createCubeHandlers, k as createDiscoverHandler, E as createDryRunHandler, O as createExplainHandler, C as createLoadHandler, M as createMcpLoadHandler, N as createMcpRpcHandler, w as createMetaHandler, S as createOptionsHandler, T as createSqlHandler, A as createSuggestHandler, j as createValidateHandler };
+export { I as createAgentChatHandler, k as createBatchHandler, L as createCubeHandlers, j as createDiscoverHandler, O as createDryRunHandler, A as createExplainHandler, T as createLoadHandler, P as createMcpLoadHandler, F as createMcpRpcHandler, E as createMetaHandler, w as createOptionsHandler, D as createSqlHandler, M as createSuggestHandler, N as createValidateHandler };

package/dist/{server/openai-CmMzrs1Y.js → adapters/openai-BCSKRcbD.js}

@@ -15,7 +15,7 @@ function t(e, t, n, r) {
 var n = function() {
 	let { crypto: e } = globalThis;
 	if (e?.randomUUID) return n = e.randomUUID.bind(e), e.randomUUID();
-	let t = new Uint8Array(1), r = e ? () => e.getRandomValues(t)[0] : () => Math.random() * 255 & 255;
+	let t = /* @__PURE__ */ new Uint8Array(1), r = e ? () => e.getRandomValues(t)[0] : () => Math.random() * 255 & 255;
 	return "10000000-1000-4000-8000-100000000000".replace(/[018]/g, (e) => (e ^ r() & 15 >> e / 4).toString(16));
 };
 //#endregion
@@ -481,7 +481,7 @@ function qe(e) {
 //#region node_modules/openai/internal/decoders/line.mjs
 var T, E, Je = class {
 	constructor() {
-		T.set(this, void 0), E.set(this, void 0), e(this, T, new Uint8Array(), "f"), e(this, E, null, "f");
+		T.set(this, void 0), E.set(this, void 0), e(this, T, /* @__PURE__ */ new Uint8Array(), "f"), e(this, E, null, "f");
 	}
 	decode(n) {
 		if (n == null) return [];
@@ -506,7 +506,7 @@ var T, E, Je = class {
 		return t(this, T, "f").length ? this.decode("\n") : [];
 	}
 };
-T = /* @__PURE__ */ new WeakMap(), E = /* @__PURE__ */ new WeakMap(), Je.NEWLINE_CHARS = new Set(["\n", "\r"]), Je.NEWLINE_REGEXP = /\r\n|[\n\r]/g;
+T = /* @__PURE__ */ new WeakMap(), E = /* @__PURE__ */ new WeakMap(), Je.NEWLINE_CHARS = /* @__PURE__ */ new Set(["\n", "\r"]), Je.NEWLINE_REGEXP = /\r\n|[\n\r]/g;
 function Ye(e, t) {
 	for (let n = t ?? 0; n < e.length; n++) {
 		if (e[n] === 10) return {
@@ -689,7 +689,7 @@ async function* ot(e, t) {
 	}
 }
 async function* st(e) {
-	let t = new Uint8Array();
+	let t = /* @__PURE__ */ new Uint8Array();
 	for await (let n of e) {
 		if (n == null) continue;
 		let e = n instanceof ArrayBuffer ? new Uint8Array(n) : typeof n == "string" ? Ge(n) : n, r = new Uint8Array(t.length + e.length);
@@ -837,7 +837,7 @@ var mt, ht = class {
 		return this.data ?? [];
 	}
 	hasNextPage() {
-		return this.has_more === !1 ? !1 : super.hasNextPage();
+		return this.has_more !== !1 && super.hasNextPage();
 	}
 	nextPageRequestOptions() {
 		let e = this.getPaginatedItems(), t = e[e.length - 1]?.id;
@@ -857,7 +857,7 @@ var mt, ht = class {
 		return this.data ?? [];
 	}
 	hasNextPage() {
-		return this.has_more === !1 ? !1 : super.hasNextPage();
+		return this.has_more !== !1 && super.hasNextPage();
 	}
 	nextPageRequestOptions() {
 		let e = this.last_id;
@@ -877,7 +877,7 @@ var mt, ht = class {
 		return this.data ?? [];
 	}
 	hasNextPage() {
-		return this.has_more === !1 ? !1 : super.hasNextPage();
+		return this.has_more !== !1 && super.hasNextPage();
 	}
 	nextPageRequestOptions() {
 		let e = this.next;
@@ -1466,7 +1466,7 @@ var On = (e, t) => {
 		throw new En(`${e} at position ${r}`);
 	}, o = () => (d(), r >= n && i("Unexpected end of input"), e[r] === "\"" ? s() : e[r] === "{" ? c() : e[r] === "[" ? l() : e.substring(r, r + 4) === "null" || L.NULL & t && n - r < 4 && "null".startsWith(e.substring(r)) ? (r += 4, null) : e.substring(r, r + 4) === "true" || L.BOOL & t && n - r < 4 && "true".startsWith(e.substring(r)) ? (r += 4, !0) : e.substring(r, r + 5) === "false" || L.BOOL & t && n - r < 5 && "false".startsWith(e.substring(r)) ? (r += 5, !1) : e.substring(r, r + 8) === "Infinity" || L.INFINITY & t && n - r < 8 && "Infinity".startsWith(e.substring(r)) ? (r += 8, Infinity) : e.substring(r, r + 9) === "-Infinity" || L.MINUS_INFINITY & t && 1 < n - r && n - r < 9 && "-Infinity".startsWith(e.substring(r)) ? (r += 9, -Infinity) : e.substring(r, r + 3) === "NaN" || L.NAN & t && n - r < 3 && "NaN".startsWith(e.substring(r)) ? (r += 3, NaN) : u()), s = () => {
 		let o = r, s = !1;
-		for (r++; r < n && (e[r] !== "\"" || s && e[r - 1] === "\\");) s = e[r] === "\\" ? !s : !1, r++;
+		for (r++; r < n && (e[r] !== "\"" || s && e[r - 1] === "\\");) s = e[r] === "\\" && !s, r++;
 		if (e.charAt(r) == "\"") try {
 			return JSON.parse(e.substring(o, ++r - Number(s)));
 		} catch (e) {
@@ -3924,7 +3924,7 @@ var di = class extends N {
 		});
 	}
 	async waitForProcessing(e, { pollInterval: t = 5e3, maxWait: n = 1800 * 1e3 } = {}) {
-		let r = new Set([
+		let r = /* @__PURE__ */ new Set([
 			"processed",
 			"error",
 			"deleted"
@@ -5375,7 +5375,7 @@ var ga = class extends $ {
 		};
 		return n.bearerAuth && typeof this._options.apiKey == "string" ? U([{ "api-key": this.apiKey }]) : super.authHeaders(e, n);
 	}
-}, _a = new Set([
+}, _a = /* @__PURE__ */ new Set([
 	"/completions",
 	"/chat/completions",
 	"/embeddings",

package/dist/{server/openai-DhzGY9R4.js → adapters/openai-BjR3ohaS.js}

@@ -70,7 +70,7 @@ var r = class {
 		try {
 			let t = await import(
 				/* webpackIgnore: true */
-				"./openai-CmMzrs1Y.js"
+				"./openai-BCSKRcbD.js"
 );
 			e = t.default || t.OpenAI || t;
 		} catch {