eve 0.44.4 → 0.45.0

package/dist/src/public/definitions/agent.d.ts

@@ -1,7 +1,7 @@
 import type { AgentBuildDefinition, PublicAgentDefinition, PublicAgentStaticModelDefinition } from "#shared/agent-definition.js";
 import type { ExactDefinition } from "#public/definitions/exact.js";
 import type { RemoteAgentDefinition } from "#public/definitions/remote-agent.js";
-import type { DynamicEvents, DynamicSentinel } from "#shared/dynamic-tool-definition.js";
+import type { DynamicEvents, DynamicSentinel } from "#dynamic/definition.js";
 declare const DEFINED_AGENT: unique symbol;
 export type { AgentModelResolveContext, AgentModelOptionsDefinition, AgentModelResolver, AgentReasoningDefinition, AgentBuildDefinition, PublicAgentDynamicModelDefinition as AgentDynamicModelDefinition, PublicAgentDynamicModelResult as AgentDynamicModelResult, AgentExperimentalDefinition, AgentLimitsDefinition, PublicAgentModelSelectionDefinition as AgentModelSelectionDefinition, AgentWorkflowDefinition, AgentWorkflowWorldDefinition, PublicAgentModelDefinition as AgentModelDefinition, PublicAgentStaticModelDefinition as AgentStaticModelDefinition, PublicAgentCompactionDefinition as AgentCompactionDefinition, } from "#shared/agent-definition.js";
 /**

package/dist/src/public/definitions/agent.js

@@ -1 +1 @@
-import{defineDynamic as defineDynamic$1}from"#public/definitions/tool.js";const defineDynamic=(t=>{let n=defineDynamic$1({events:t.events});return t.build===void 0?n:{...n,build:t.build}});function defineAgent(e){return e}export{defineAgent,defineDynamic};
+import{defineDynamic as defineDynamic$1}from"#dynamic/definition.js";const defineDynamic=(t=>{let n=defineDynamic$1({events:t.events});return t.build===void 0?n:{...n,build:t.build}});function defineAgent(e){return e}export{defineAgent,defineDynamic};

package/dist/src/public/definitions/approval.d.ts

@@ -1,84 +1,2 @@
-import type { SessionAuthContext } from "#channel/types.js";
-import type { SessionParent, SessionTurn } from "#context/keys.js";
-import type { ToolAuthOptions, ToolAuthProvider } from "#public/definitions/tool.js";
-import type { SessionContext } from "#public/definitions/callback-context.js";
-import type { TokenResult } from "#runtime/connections/types.js";
-type ApprovalToolInput<TInput> = TInput extends object ? Readonly<TInput> : TInput;
-/**
- * Context passed to an {@link ApprovalPolicy} function.
- *
- * Extends {@link SessionContext} so approval policies can make decisions from
- * the active session, current caller, and turn.
- */
-export interface ApprovalContext<TInput = Record<string, unknown>> extends SessionContext {
-    readonly approvedTools: ReadonlySet<string>;
-    readonly callId: string;
-    readonly toolInput?: ApprovalToolInput<TInput>;
-    readonly toolName: string;
-}
-/** Request-time approval decision returned by an {@link ApprovalPolicy}. */
-export type ApprovalStatus = undefined | boolean | "not-applicable" | "approved" | "denied" | "user-approval" | {
-    readonly type: "not-applicable";
-    readonly reason?: never;
-} | {
-    readonly type: "approved";
-    readonly reason?: string;
-} | {
-    readonly type: "denied";
-    readonly reason?: string;
-} | {
-    readonly type: "user-approval";
-    readonly reason?: never;
-};
-/** Request-time approval policy shared by authored tools and connections. */
-export type ApprovalPolicy<TInput = Record<string, unknown>> = (ctx: ApprovalContext<TInput>) => ApprovalStatus | Promise<ApprovalStatus>;
-/** Stable tool request passed to a response authorizer. */
-export interface ApprovalRequest<TInput = Record<string, unknown>> {
-    readonly callId: string;
-    readonly requestId: string;
-    readonly toolInput?: ApprovalToolInput<TInput>;
-    readonly toolName: string;
-}
-/** Read-only session identity and lineage available to a response authorizer. */
-export interface ApprovalResponseSession {
-    readonly id: string;
-    readonly initiator: SessionAuthContext | null;
-    readonly parent?: SessionParent;
-    readonly turn: SessionTurn;
-}
-/** Narrow authorization capability available while validating a responder. */
-export interface ApprovalResponseAuth {
-    getToken(provider: ToolAuthProvider, options?: ToolAuthOptions): Promise<TokenResult>;
-    requireAuth(provider: ToolAuthProvider, options?: ToolAuthOptions): never;
-}
-/** Submitted decision passed to an approval response policy. */
-export interface ApprovalResponse {
-    readonly decision: "approve";
-}
-/** Context passed to an approval response policy. */
-export interface ApprovalResponseContext<TInput = Record<string, unknown>> {
-    readonly auth: ApprovalResponseAuth;
-    readonly request: ApprovalRequest<TInput>;
-    readonly response: ApprovalResponse;
-    readonly responder: SessionAuthContext;
-    readonly session: ApprovalResponseSession;
-}
-/** Response policy decision. Rejection keeps the shared request pending. */
-export type ApprovalResponseDecision = {
-    readonly status: "allowed";
-} | {
-    readonly reason: string;
-    readonly status: "rejected";
-};
-/** Decides whether an authenticated responder may approve one request. */
-export type ApprovalResponsePolicy<TInput = Record<string, unknown>> = (ctx: ApprovalResponseContext<TInput>) => ApprovalResponseDecision | Promise<ApprovalResponseDecision>;
-/** Approval definition with request- and response-time policy. */
-export interface ApprovalConfiguration<TInput = Record<string, unknown>> {
-    readonly request: ApprovalPolicy<TInput>;
-    readonly response?: ApprovalResponsePolicy<TInput>;
-}
-/** Shared approval definition used by authored tools and connections. */
-export type Approval<TInput = Record<string, unknown>> = ApprovalPolicy<TInput> | ApprovalConfiguration<TInput>;
-/** Returns the request-time policy from either approval authoring shape. */
-export declare function resolveApprovalPolicy<TInput>(approval: Approval<TInput>): ApprovalPolicy<TInput>;
-export {};
+export type { Approval, ApprovalConfiguration, ApprovalContext, ApprovalPolicy, ApprovalRequest, ApprovalResponse, ApprovalResponseAuth, ApprovalResponseContext, ApprovalResponseDecision, ApprovalResponsePolicy, ApprovalResponseSession, ApprovalStatus, } from "#approval/definition.js";
+export { resolveApprovalPolicy } from "#approval/definition.js";

package/dist/src/public/definitions/approval.js

@@ -1 +1 @@
-function resolveApprovalPolicy(e){return typeof e==`function`?e:e.request}export{resolveApprovalPolicy};
+import{resolveApprovalPolicy}from"#approval/definition.js";export{resolveApprovalPolicy};

package/dist/src/public/definitions/callback-context.d.ts

@@ -1,32 +1 @@
-import type { SkillHandle } from "#execution/skills/types.js";
-import type { RuntimeSandboxSession } from "#shared/sandbox-session.js";
-import type { SessionAuth, SessionParent, SessionTurn } from "#context/keys.js";
-export type { SessionAuth, SessionParent, SessionTurn };
-/**
- * Shared runtime context available to all authored callbacks that run
- * inside the ALS-scoped harness step (tools, hooks, channel events).
- *
- * Non-ALS callbacks (schedule `run`, sandbox `bootstrap`/`onSession`,
- * instrumentation `setup`) do not receive this context. They get
- * domain-specific arguments instead.
- */
-export interface SessionContext {
-    /**
-     * Active session metadata for the callback's exact durable session.
-     */
-    readonly session: {
-        readonly id: string;
-        readonly auth: SessionAuth;
-        readonly turn: SessionTurn;
-        readonly parent?: SessionParent;
-    };
-    /**
-     * Resolves the session's sandbox. Throws when no sandbox is available
-     * in the current authored runtime context.
-     */
-    getSandbox(): Promise<RuntimeSandboxSession>;
-    /**
-     * Returns a {@link SkillHandle} for the named authored skill.
-     */
-    getSkill(identifier: string): SkillHandle;
-}
+export type { SessionAuth, SessionContext, SessionParent, SessionTurn, } from "#context/session-context.js";

package/dist/src/public/definitions/connections/mcp.d.ts

@@ -1,4 +1,4 @@
-import type { ConnectionAuthDefinition, HeadersDefinition, ToolFilterDefinition } from "#runtime/connections/types.js";
+import type { ConnectionAuthDefinition, HeadersDefinition, ToolFilterDefinition } from "#shared/connection-types.js";
 import type { ConnectionToolCallDefinition } from "#public/definitions/connections/tool-call.js";
 import type { Approval } from "#public/definitions/approval.js";
 /**

package/dist/src/public/definitions/connections/mcp.js

@@ -1 +1 @@
-import{stampConnectionProtocol}from"#public/definitions/connections/protocol.js";import{normalizeAuthorizationSpec}from"#runtime/connections/validate-authorization.js";import{stampDefinitionKey}from"#public/tool-result-narrowing.js";function defineMcpClientConnection(e){return e.auth!==void 0&&typeof e.auth!=`function`&&(e.auth=normalizeAuthorizationSpec(e.auth,`defineMcpClientConnection:`)),stampDefinitionKey(e,`connection:${e.url}`),stampConnectionProtocol(e,`mcp`),e}export{defineMcpClientConnection};
+import{stampConnectionProtocol}from"#public/definitions/connections/protocol.js";import{stampDefinitionKey}from"#internal/authored-definition/source-identity.js";import{normalizeAuthorizationSpec}from"#shared/validate-authorization.js";function defineMcpClientConnection(e){return e.auth!==void 0&&typeof e.auth!=`function`&&(e.auth=normalizeAuthorizationSpec(e.auth,`defineMcpClientConnection:`)),stampDefinitionKey(e,`connection:${e.url}`),stampConnectionProtocol(e,`mcp`),e}export{defineMcpClientConnection};

package/dist/src/public/definitions/connections/openapi.d.ts

@@ -1,4 +1,4 @@
-import type { ConnectionAuthDefinition, HeadersDefinition, ToolFilterDefinition } from "#runtime/connections/types.js";
+import type { ConnectionAuthDefinition, HeadersDefinition, ToolFilterDefinition } from "#shared/connection-types.js";
 import type { Approval } from "#public/definitions/approval.js";
 import type { ConnectionToolCallDefinition } from "#public/definitions/connections/tool-call.js";
 /**

package/dist/src/public/definitions/connections/openapi.js

@@ -1 +1 @@
-import{stampConnectionProtocol}from"#public/definitions/connections/protocol.js";import{normalizeAuthorizationSpec}from"#runtime/connections/validate-authorization.js";import{stampDefinitionKey}from"#public/tool-result-narrowing.js";function defineOpenAPIConnection(e){return e.auth!==void 0&&typeof e.auth!=`function`&&(e.auth=normalizeAuthorizationSpec(e.auth,`defineOpenAPIConnection:`)),stampDefinitionKey(e,`connection:${e.baseUrl??(typeof e.spec==`string`?e.spec:e.description)}`),stampConnectionProtocol(e,`openapi`),e}export{defineOpenAPIConnection};
+import{stampConnectionProtocol}from"#public/definitions/connections/protocol.js";import{stampDefinitionKey}from"#internal/authored-definition/source-identity.js";import{normalizeAuthorizationSpec}from"#shared/validate-authorization.js";function defineOpenAPIConnection(e){return e.auth!==void 0&&typeof e.auth!=`function`&&(e.auth=normalizeAuthorizationSpec(e.auth,`defineOpenAPIConnection:`)),stampDefinitionKey(e,`connection:${e.baseUrl??(typeof e.spec==`string`?e.spec:e.description)}`),stampConnectionProtocol(e,`openapi`),e}export{defineOpenAPIConnection};

package/dist/src/public/definitions/connections/protocol.d.ts

@@ -1,4 +1,4 @@
-import type { ConnectionProtocol } from "#runtime/connections/types.js";
+import type { ConnectionProtocol } from "#shared/connection-types.js";
 /**
  * Stamps the wire protocol on a connection definition. Called by the
  * `define*` factory that produced it.

package/dist/src/public/definitions/instructions.d.ts

@@ -1,6 +1,6 @@
-import { type DynamicResolveContext, type DynamicSentinel } from "#shared/dynamic-tool-definition.js";
+import { type DynamicResolveContext, type DynamicSentinel } from "#dynamic/definition.js";
 import type { ExactDefinition } from "#public/definitions/exact.js";
-import type { PublicInstructionsDefinition } from "#shared/instructions-definition.js";
+import { type PublicInstructionsDefinition } from "#shared/instructions-definition.js";
 export type InstructionsDefinition = Readonly<PublicInstructionsDefinition>;
 /**
  * Defines instructions in TypeScript from a `{ content, role? }`

package/dist/src/public/definitions/instructions.js

@@ -1 +1 @@
-import{DYNAMIC_SENTINEL_KIND,INSTRUCTIONS_BRAND}from"#shared/dynamic-tool-definition.js";import{stampDefinitionKey}from"#public/tool-result-narrowing.js";function defineInstructions(e){return Object.assign(e,{[INSTRUCTIONS_BRAND]:!0}),e}function defineDynamic(t){let n={kind:DYNAMIC_SENTINEL_KIND,events:t.events};return stampDefinitionKey(n,`dynamic-instructions:${Object.keys(t.events).join(`,`)}`),n}export{defineDynamic,defineInstructions};
+import{DYNAMIC_SENTINEL_KIND}from"#dynamic/definition.js";import{INSTRUCTIONS_BRAND}from"#shared/instructions-definition.js";import{stampDefinitionKey}from"#internal/authored-definition/source-identity.js";function defineInstructions(e){return Object.assign(e,{[INSTRUCTIONS_BRAND]:!0}),e}function defineDynamic(t){let n={kind:DYNAMIC_SENTINEL_KIND,events:t.events};return stampDefinitionKey(n,`dynamic-instructions:${Object.keys(t.events).join(`,`)}`),n}export{defineDynamic,defineInstructions};

package/dist/src/public/definitions/skill.js

@@ -1 +1 @@
-import{SKILL_BRAND}from"#shared/dynamic-tool-definition.js";function defineSkill(e){return Object.defineProperty(e,SKILL_BRAND,{value:!0}),e}export{defineSkill};
+import{SKILL_BRAND}from"#shared/skill-definition.js";function defineSkill(e){return Object.defineProperty(e,SKILL_BRAND,{value:!0}),e}export{defineSkill};

package/dist/src/public/index.d.ts

@@ -2,5 +2,5 @@
  * Core agent authoring helpers for `agent/agent.ts`.
  */
 export { type AgentCompactionDefinition, type AgentDefinition, type AgentExperimentalDefinition, type AgentLimitsDefinition, type AgentModelDefinition, type AgentModelOptionsDefinition, type AgentReasoningDefinition, type AgentStaticModelDefinition, type AgentWorkflowDefinition, type AgentWorkflowWorldDefinition, type DefinedAgent, type DynamicSubagentDefinition, type DynamicLocalSubagentDefinition, defineAgent, defineDynamic, } from "#public/definitions/agent.js";
-export type { DynamicResolveContext, DynamicSentinel } from "#shared/dynamic-tool-definition.js";
+export type { DynamicResolveContext, DynamicSentinel } from "#dynamic/definition.js";
 export { type RemoteAgentDefinition, type RemoteAgentDefinitionInput, type RemoteAgentUrl, defineRemoteAgent, } from "#public/definitions/remote-agent.js";

package/dist/src/public/instructions/index.d.ts

@@ -3,4 +3,4 @@
  * and `agent/instructions/*.ts` files.
  */
 export { defineDynamic, defineInstructions, type DynamicInstructionsEvents, type DynamicInstructionsResult, type InstructionsDefinition, } from "#public/definitions/instructions.js";
-export type { DynamicResolveContext, DynamicSentinel } from "#shared/dynamic-tool-definition.js";
+export type { DynamicResolveContext, DynamicSentinel } from "#dynamic/definition.js";

package/dist/src/public/instrumentation/provider.d.ts

@@ -1,117 +1 @@
-/**
- * The provider contract authored under `agent/instrumentation/`.
- *
- * Reachable only with `experimental.instrumentationProviders` on. With the flag
- * off nothing discovers that directory, so these types compile but never run.
- */
-import type { InstrumentationCapture, InstrumentationEvent } from "#harness/instrumentation/lifecycle.js";
-import type { JsonValue } from "#public/types/json.js";
-export type { JsonValue } from "#public/types/json.js";
-export type { InstrumentationActionCompletedEvent, InstrumentationActionFailedEvent, InstrumentationActionKind, InstrumentationActionOutcome, InstrumentationActionOutput, InstrumentationActionStartedEvent, InstrumentationAttemptScope, InstrumentationCapture, InstrumentationChannelDeliveryInput, InstrumentationChannelDeliveryOutcome, InstrumentationChannelDeliveryRef, InstrumentationChannelDeliveryStartedEvent, InstrumentationChannelDeliveryTerminalEvent, InstrumentationContentPart, InstrumentationEvent, InstrumentationInputKind, InstrumentationInputOption, InstrumentationInputOutcome, InstrumentationInputRequest, InstrumentationInputRequestedEvent, InstrumentationInputResolvedEvent, InstrumentationInputResponse, InstrumentationModelCallCompletedEvent, InstrumentationModelCallFailedEvent, InstrumentationModelCallStartedEvent, InstrumentationModelRef, InstrumentationOperationRef, InstrumentationParentLineage, InstrumentationSessionFailedEvent, InstrumentationSessionSettledEvent, InstrumentationSessionStartedEvent, InstrumentationSessionTransitionEvent, InstrumentationStepAttemptMetadataEvent, InstrumentationStepAttemptCompletedEvent, InstrumentationStepAttemptFailedEvent, InstrumentationStepAttemptStartedEvent, InstrumentationStepAttemptTerminalEvent, InstrumentationToolCallCompletedEvent, InstrumentationToolCallFailedEvent, InstrumentationToolCallStartedEvent, InstrumentationToolOutput, InstrumentationTraceContext, InstrumentationTurnFailedEvent, InstrumentationTurnSettledEvent, InstrumentationTurnStartedEvent, InstrumentationTurnTerminalEvent, InstrumentationUsage, } from "#harness/instrumentation/lifecycle.js";
-/**
- * Marks a value as having come from `defineInstrumentation` or a built-in
- * factory.
- *
- * It does not say which layout the value belongs to: a provider and a legacy
- * config both carry `events` and `setup`, so no value-level check separates
- * them. The layout decides — `agent/instrumentation.ts` is read as a config and
- * `agent/instrumentation/*.ts` as providers, and the two are mutually exclusive
- * builds. The brand's job is only to catch a default export that never went
- * through eve at all.
- */
-export declare const PROVIDER: unique symbol;
-/** Marks a slot the author turned off rather than configured. */
-export declare const DISABLED: unique symbol;
-/** Where the agent is running when `setup` fires. */
-export type InstrumentationEnvironment = "development" | "preview" | "production";
-/** The local eval run this server was started to serve. */
-export interface EvaluationRef {
-    readonly runId: string;
-}
-/**
- * Passed to {@link InstrumentationProvider.setup} once at server startup,
- * before any event is published.
- */
-export interface ProviderSetupContext {
-    /** The agent name declared by `defineAgent`. */
-    readonly agentName: string;
-    /** Always supplied at runtime; optional for legacy setup-context compatibility. */
-    readonly environment?: InstrumentationEnvironment;
-    /** Present only when this server was started for a local `eve eval` run. */
-    readonly evaluation?: EvaluationRef;
-    /** The eve version running the agent. */
-    /** Always supplied at runtime; optional for legacy setup-context compatibility. */
-    readonly frameworkVersion?: string;
-}
-export interface ProviderState {
-    get(): JsonValue | undefined;
-    /** Stages a JSON value; `undefined` releases this operation's slot. */
-    set(value: JsonValue | undefined): void;
-}
-export interface ProviderContext {
-    readonly state: ProviderState;
-}
-/**
- * One event handler.
- *
- * A handler can carry durable JSON state from a start to its terminal through
- * `ctx.state`. eve scopes and releases that state by provider and operation.
- */
-export type Handler<TEvent> = (event: TEvent, ctx: ProviderContext) => void | PromiseLike<void>;
-type EventForType<TEvent, TType> = TEvent extends {
-    readonly type: infer TEventType;
-} ? TType extends TEventType ? TEvent & {
-    readonly type: TType;
-} : never : never;
-/**
- * The events a provider may handle, one optional handler per event type.
- *
- * Derived from the event union rather than written out, so a new event reaches
- * providers the moment the bus can publish it.
- */
-export type ProviderEvents = {
-    readonly [TType in InstrumentationEvent["type"]]?: Handler<EventForType<InstrumentationEvent, TType>>;
-};
-/**
- * What an author writes for one file under `agent/instrumentation/`.
- *
- * Setup runs in slot order, but event handlers across authored providers run
- * concurrently and are failure-isolated. Do not coordinate providers through
- * completion order.
- */
-export interface ProviderDefinition {
-    /**
-     * How much of each event this provider is handed. Defaults to `"metadata"`:
-     * structure, identity, usage, and timing, but not what was said.
-     *
-     * `"content"` adds the prompt, the response, tool arguments, and tool
-     * results. Asking is what makes eve build the projection at all, so a
-     * directory in which nobody asks never serializes a prompt.
-     */
-    readonly capture?: InstrumentationCapture;
-    readonly events?: ProviderEvents;
-    /** Runs once at server startup, before any event is published. */
-    readonly setup?: (context: ProviderSetupContext) => void | PromiseLike<void>;
-    /** Drains anything buffered. eve calls this before a session goes idle. */
-    readonly flush?: () => void | PromiseLike<void>;
-    /** Releases resources when the process is going away. */
-    readonly shutdown?: () => void | PromiseLike<void>;
-}
-/** A {@link ProviderDefinition} that has been through `defineInstrumentation`. */
-export type InstrumentationProvider = ProviderDefinition & {
-    readonly [PROVIDER]: true;
-};
-/** A slot the author turned off. eve registers nothing for it. */
-export interface InstrumentationDisabled {
-    readonly [DISABLED]: true;
-}
-/**
- * Turns off the slot the file it is exported from names.
- *
- * Export it as the default of `agent/instrumentation/local.ts` to stop eve
- * spooling local traces, for instance. Omitting the file entirely leaves eve's
- * default in place, which is why turning one off takes a value.
- */
-export declare function disableInstrumentation(): InstrumentationDisabled;
-export declare function isInstrumentationProvider(value: unknown): value is InstrumentationProvider;
-export declare function isInstrumentationDisabled(value: unknown): value is InstrumentationDisabled;
+export * from "#instrumentation/provider.js";

package/dist/src/public/instrumentation/provider.js

@@ -1 +1 @@
-const PROVIDER=Symbol.for(`eve.instrumentation.provider`),DISABLED=Symbol.for(`eve.instrumentation.disabled`);function disableInstrumentation(){return{[DISABLED]:!0}}function isInstrumentationProvider(t){return typeof t==`object`&&!!t&&t[PROVIDER]===!0}function isInstrumentationDisabled(e){return typeof e==`object`&&!!e&&e[DISABLED]===!0}export{DISABLED,PROVIDER,disableInstrumentation,isInstrumentationDisabled,isInstrumentationProvider};
+export*from"#instrumentation/provider.js";export{};

package/dist/src/public/models/openai/chatgpt/auth.js

@@ -1 +1 @@
-import{isObject}from"#shared/guards.js";import{decodeJwt}from"#compiled/jose/index.js";function readCodexJwtExpirationMs(e){let t=parseCodexJwtClaims(e);if(!(t===void 0||typeof t.exp!=`number`))return t.exp*1e3}function extractCodexAccountIdFromToken(t){let n=parseCodexJwtClaims(t);if(n===void 0)return;let r=n[`https://api.openai.com/auth`],i=n.organizations;return readNonEmptyString$1(n.chatgpt_account_id)??readNonEmptyString$1(isObject(r)?r.chatgpt_account_id:void 0)??readNonEmptyString$1(Array.isArray(i)&&isObject(i[0])?i[0].id:void 0)}function extractCodexAccountLabelFromToken(t){let n=parseCodexJwtClaims(t);if(n===void 0)return;let r=n[`https://api.openai.com/auth`],i=readEmail(n.email)??readEmail(isObject(r)?r.email:void 0);if(i!==void 0)return i;let a=readNonEmptyString$1(n.sub);return a===void 0?void 0:readEmail(a.split(`|`).at(-1))}function readEmail(e){let t=readNonEmptyString$1(e);return t!==void 0&&/^[^@\s]+@[^@\s]+\.[^@\s]+$/u.test(t)?t:void 0}function readNonEmptyString$1(e){return typeof e==`string`&&e.trim()!==``?e:void 0}function parseCodexJwtClaims(e){if(e!==void 0)try{return decodeJwt(e)}catch{return}}export{extractCodexAccountIdFromToken,extractCodexAccountLabelFromToken,readCodexJwtExpirationMs};
+import{decodeJwt}from"#compiled/jose/index.js";import{isObject}from"#shared/guards.js";function readCodexJwtExpirationMs(e){let t=parseCodexJwtClaims(e);if(!(t===void 0||typeof t.exp!=`number`))return t.exp*1e3}function extractCodexAccountIdFromToken(e){let n=parseCodexJwtClaims(e);if(n===void 0)return;let r=n[`https://api.openai.com/auth`],i=n.organizations;return readNonEmptyString$1(n.chatgpt_account_id)??readNonEmptyString$1(isObject(r)?r.chatgpt_account_id:void 0)??readNonEmptyString$1(Array.isArray(i)&&isObject(i[0])?i[0].id:void 0)}function extractCodexAccountLabelFromToken(e){let n=parseCodexJwtClaims(e);if(n===void 0)return;let r=n[`https://api.openai.com/auth`],i=readEmail(n.email)??readEmail(isObject(r)?r.email:void 0);if(i!==void 0)return i;let a=readNonEmptyString$1(n.sub);return a===void 0?void 0:readEmail(a.split(`|`).at(-1))}function readEmail(e){let t=readNonEmptyString$1(e);return t!==void 0&&/^[^@\s]+@[^@\s]+\.[^@\s]+$/u.test(t)?t:void 0}function readNonEmptyString$1(e){return typeof e==`string`&&e.trim()!==``?e:void 0}function parseCodexJwtClaims(t){if(t!==void 0)try{return decodeJwt(t)}catch{return}}export{extractCodexAccountIdFromToken,extractCodexAccountLabelFromToken,readCodexJwtExpirationMs};

package/dist/src/public/next/server.js

@@ -1,2 +1,2 @@
-import{mkdir,open,readFile,rm,stat,writeFile}from"node:fs/promises";import{EVE_ROUTE_PREFIX}from"#protocol/routes.js";import{join}from"node:path";import{resolvePackageRoot}from"#internal/application/package.js";import{existsSync}from"node:fs";import{spawn}from"node:child_process";const DEFAULT_SERVER_READY_TIMEOUT_MS=18e4,ANSI_ESCAPE_PATTERN=RegExp(`\x1B\\[[0-?]*[ -/]*[@-~]`,`g`),SERVER_URL_CANDIDATE_PATTERN=/https?:\/\/[^\s"'<>]+/g,globalStateSymbol=Symbol.for(`eve.next.state`);function getGlobalState(){let e=globalThis;return e[globalStateSymbol]??={servers:new Map},e[globalStateSymbol]}function joinRoutePrefix(e,t){return`${e.replace(/\/+$/,``)}/${t.replace(/^\/+/,``)}`}function normalizeOrigin(e){return new URL(e).origin}function readEveBaseUrlEnvironment(){let e=process.env.EVE_BASE_URL;if(!(e===void 0||e.trim().length===0))return normalizeOrigin(e)}function isNodeErrorWithCode(e,t){return e instanceof Error&&`code`in e&&e.code===t}function delay(e){return new Promise(t=>setTimeout(t,e))}function isRecord(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function resolveEveCacheDirectory(e){return join(e,`.eve`)}function resolveEveDevServerRegistryPath(e){return join(resolveEveCacheDirectory(e),`next-dev-server.json`)}function resolveEveDevServerLockPath(e){return join(resolveEveCacheDirectory(e),`next-dev-server.lock`)}function normalizeDevServerRegistry(e){if(isRecord(e)&&!(typeof e.appRoot!=`string`||typeof e.origin!=`string`||typeof e.updatedAt!=`string`)&&!(e.pid!==null&&typeof e.pid!=`number`))try{return{appRoot:e.appRoot,origin:normalizeOrigin(e.origin),pid:e.pid,updatedAt:e.updatedAt}}catch{return}}async function isEveServerHealthy(e){let t=new AbortController,n=setTimeout(()=>{t.abort()},1e3);try{return(await fetch(joinRoutePrefix(e,`${EVE_ROUTE_PREFIX}/health`),{signal:t.signal})).ok}catch{return!1}finally{clearTimeout(n)}}async function readUsableEveDevServerRegistry(e){try{let t=normalizeDevServerRegistry(JSON.parse(await readFile(resolveEveDevServerRegistryPath(e),`utf8`)));return t===void 0||t.appRoot!==e||!await isEveServerHealthy(t.origin)?void 0:t.origin}catch(e){if(isNodeErrorWithCode(e,`ENOENT`))return;throw e}}async function writeEveDevServerRegistry(t,n){await mkdir(resolveEveCacheDirectory(t),{recursive:!0}),await writeFile(resolveEveDevServerRegistryPath(t),`${JSON.stringify({appRoot:t,origin:n.origin,pid:n.process?.pid??null,updatedAt:new Date().toISOString()},null,2)}\n`)}async function removeStaleEveDevServerLock(e){try{let t=await stat(e);Date.now()-t.mtimeMs>3e4&&await rm(e,{force:!0})}catch(e){if(!isNodeErrorWithCode(e,`ENOENT`))throw e}}async function acquireEveDevServerLock(n,i){let a=resolveEveCacheDirectory(n),o=resolveEveDevServerLockPath(n),s=Date.now()+i;for(await mkdir(a,{recursive:!0});;)try{let e=await open(o,`wx`);return await e.writeFile(`${String(process.pid)}\n`),await e.close(),async()=>{await rm(o,{force:!0})}}catch(e){if(!isNodeErrorWithCode(e,`EEXIST`))throw e;if(await readUsableEveDevServerRegistry(n)!==void 0)return async()=>{};if(await removeStaleEveDevServerLock(o),Date.now()>s)throw Error(`Timed out after ${i}ms waiting for another Next.js process to start eve.`);await delay(100)}}function createEveBinaryPath(){return join(resolvePackageRoot(),`bin`,`eve.js`)}function isLoopbackHostname(e){return e===`localhost`||e===`::1`||e===`[::1]`||/^127(?:\.\d{1,3}){3}$/.test(e)}function parseLocalServerOrigin(e){let t=URL.parse(e);if(!(t===null||t.protocol!==`http:`&&t.protocol!==`https:`||!isLoopbackHostname(t.hostname)||t.port.length===0))return t.origin}function findLocalServerOrigin(e){for(let t of e.matchAll(SERVER_URL_CANDIDATE_PATTERN)){let e=t[0],n=parseLocalServerOrigin(e);if(n!==void 0)return n}}function formatEveDevOutputLine(e,t){let n=e.replace(/\r$/,``),r=n.replace(ANSI_ESCAPE_PATTERN,``).trim();if(r.length===0||/^☰eve\b/.test(r)||r===`CONFIGURATION_FIELD_CONFLICT`||r.startsWith(`[CONFIGURATION_FIELD_CONFLICT]`))return;let i=t===void 0?`[eve:dev]`:`[eve:dev:${t}]`,a=/server listening at\s+(https?:\/\/[^\s]+)/i.exec(n);return a===null?`${i} ${n}`:`${i} server listening at ${a[1]}`}function createEveDevOutputWriter(e){let t=``,writeLine=t=>{let n=formatEveDevOutputLine(t,e.logLabel);n!==void 0&&e.stream.write(`${n}\n`)};return{flush(){t.length!==0&&(writeLine(t),t=``)},write(e){t+=e.toString(`utf8`);let n=t.split(`
+import{mkdir,open,readFile,rm,stat,writeFile}from"node:fs/promises";import{join}from"node:path";import{resolvePackageRoot}from"#internal/application/package.js";import{existsSync}from"node:fs";import{spawn}from"node:child_process";import{readDevelopmentRuntimeArtifactsRevision}from"#services/dev-client/runtime-artifacts.js";const DEFAULT_SERVER_READY_TIMEOUT_MS=18e4,ANSI_ESCAPE_PATTERN=RegExp(`\x1B\\[[0-?]*[ -/]*[@-~]`,`g`),SERVER_URL_CANDIDATE_PATTERN=/https?:\/\/[^\s"'<>]+/g,globalStateSymbol=Symbol.for(`eve.next.state`);function getGlobalState(){let e=globalThis;return e[globalStateSymbol]??={servers:new Map},e[globalStateSymbol]}function normalizeOrigin(e){return new URL(e).origin}function readEveBaseUrlEnvironment(){let e=process.env.EVE_BASE_URL;if(!(e===void 0||e.trim().length===0))return normalizeOrigin(e)}function isNodeErrorWithCode(e,t){return e instanceof Error&&`code`in e&&e.code===t}function delay(e){return new Promise(t=>setTimeout(t,e))}function isRecord(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function resolveEveCacheDirectory(e){return join(e,`.eve`)}function resolveEveDevServerRegistryPath(e){return join(resolveEveCacheDirectory(e),`next-dev-server.json`)}function resolveEveDevServerLockPath(e){return join(resolveEveCacheDirectory(e),`next-dev-server.lock`)}function normalizeDevServerRegistry(e){if(isRecord(e)&&!(typeof e.appRoot!=`string`||typeof e.origin!=`string`||typeof e.updatedAt!=`string`)&&!(e.pid!==null&&typeof e.pid!=`number`))try{return{appRoot:e.appRoot,origin:normalizeOrigin(e.origin),pid:e.pid,updatedAt:e.updatedAt}}catch{return}}async function readUsableEveDevServerRegistry(e){try{let t=normalizeDevServerRegistry(JSON.parse(await readFile(resolveEveDevServerRegistryPath(e),`utf8`)));return t===void 0||t.appRoot!==e||await readDevelopmentRuntimeArtifactsRevision({serverUrl:t.origin,timeoutMs:1e3})===void 0?void 0:t.origin}catch(e){if(isNodeErrorWithCode(e,`ENOENT`))return;throw e}}async function writeEveDevServerRegistry(t,n){await mkdir(resolveEveCacheDirectory(t),{recursive:!0}),await writeFile(resolveEveDevServerRegistryPath(t),`${JSON.stringify({appRoot:t,origin:n.origin,pid:n.process?.pid??null,updatedAt:new Date().toISOString()},null,2)}\n`)}async function removeStaleEveDevServerLock(e){try{let t=await stat(e);Date.now()-t.mtimeMs>3e4&&await rm(e,{force:!0})}catch(e){if(!isNodeErrorWithCode(e,`ENOENT`))throw e}}async function acquireEveDevServerLock(n,i){let a=resolveEveCacheDirectory(n),o=resolveEveDevServerLockPath(n),s=Date.now()+i;for(await mkdir(a,{recursive:!0});;)try{let e=await open(o,`wx`);return await e.writeFile(`${String(process.pid)}\n`),await e.close(),async()=>{await rm(o,{force:!0})}}catch(e){if(!isNodeErrorWithCode(e,`EEXIST`))throw e;if(await readUsableEveDevServerRegistry(n)!==void 0)return async()=>{};if(await removeStaleEveDevServerLock(o),Date.now()>s)throw Error(`Timed out after ${i}ms waiting for another Next.js process to start eve.`);await delay(100)}}function createEveBinaryPath(){return join(resolvePackageRoot(),`bin`,`eve.js`)}function isLoopbackHostname(e){return e===`localhost`||e===`::1`||e===`[::1]`||/^127(?:\.\d{1,3}){3}$/.test(e)}function parseLocalServerOrigin(e){let t=URL.parse(e);if(!(t===null||t.protocol!==`http:`&&t.protocol!==`https:`||!isLoopbackHostname(t.hostname)||t.port.length===0))return t.origin}function findLocalServerOrigin(e){for(let t of e.matchAll(SERVER_URL_CANDIDATE_PATTERN)){let e=t[0],n=parseLocalServerOrigin(e);if(n!==void 0)return n}}function formatEveDevOutputLine(e,t){let n=e.replace(/\r$/,``),r=n.replace(ANSI_ESCAPE_PATTERN,``).trim();if(r.length===0||/^☰eve\b/.test(r)||r===`CONFIGURATION_FIELD_CONFLICT`||r.startsWith(`[CONFIGURATION_FIELD_CONFLICT]`))return;let i=t===void 0?`[eve:dev]`:`[eve:dev:${t}]`,a=/server listening at\s+(https?:\/\/[^\s]+)/i.exec(n);return a===null?`${i} ${n}`:`${i} server listening at ${a[1]}`}function createEveDevOutputWriter(e){let t=``,writeLine=t=>{let n=formatEveDevOutputLine(t,e.logLabel);n!==void 0&&e.stream.write(`${n}\n`)};return{flush(){t.length!==0&&(writeLine(t),t=``)},write(e){t+=e.toString(`utf8`);let n=t.split(`
 `);t=n.pop()??``;for(let e of n)writeLine(e)}}}function startServerProcess(e){return new Promise((t,n)=>{let r=spawn(e.command,e.args,{cwd:e.cwd,env:{...process.env,...e.env},stdio:[`ignore`,`pipe`,`pipe`]}),i=createEveDevOutputWriter({logLabel:e.logLabel,stream:process.stderr}),a=createEveDevOutputWriter({logLabel:e.logLabel,stream:process.stdout}),o=setTimeout(()=>{r.kill(),n(Error(`Timed out after ${e.timeoutMs??DEFAULT_SERVER_READY_TIMEOUT_MS}ms waiting for eve to print its server URL.`))},e.timeoutMs??DEFAULT_SERVER_READY_TIMEOUT_MS),cleanup=()=>{clearTimeout(o),r.off(`error`,handleError),r.off(`exit`,handleEarlyExit)},flushOutput=()=>{a.flush(),i.flush()},handleError=e=>{flushOutput(),cleanup(),n(e)},handleEarlyExit=(e,t)=>{flushOutput(),cleanup(),n(Error(`eve server process exited before printing its server URL (code ${String(e)}, signal ${String(t)}).`))},handleOutput=e=>{let n=findLocalServerOrigin(e.toString(`utf8`));n!==void 0&&(cleanup(),t({origin:n,process:r}))};r.once(`error`,handleError),r.once(`exit`,handleEarlyExit),r.stdout.on(`data`,e=>{a.write(e),handleOutput(e)}),r.stderr.on(`data`,e=>{i.write(e),handleOutput(e)})})}function installProcessShutdown(e){let t=e.process;if(t===void 0)return e;let close=()=>{t.killed||t.kill()};return process.once(`beforeExit`,close),process.once(`exit`,close),e}function startEveDevServer(e,t,n){return startServerProcess({args:[createEveBinaryPath(),`dev`,`--no-ui`,`--port`,`0`],command:process.execPath,cwd:e,logLabel:n,timeoutMs:t}).then(e=>installProcessShutdown(e))}function startEveProductionServer(e){let t=new URL(e.origin),n=t.port,r=join(e.appRoot,`.output`,`server`,`index.mjs`);if(existsSync(r))return startServerProcess({args:[r],command:process.execPath,cwd:e.appRoot,env:{HOST:t.hostname,NITRO_HOST:t.hostname,NITRO_PORT:n,PORT:n}}).then(installProcessShutdown)}async function resolveSharedEveDevServer(e,t,n){let r=await readUsableEveDevServerRegistry(e);if(r!==void 0)return{origin:r};let i=await acquireEveDevServerLock(e,t);try{let r=await readUsableEveDevServerRegistry(e);if(r!==void 0)return{origin:r};let i=await startEveDevServer(e,t,n);return await writeEveDevServerRegistry(e,i),i}finally{await i()}}async function resolveEveDestinationPrefix(e){let t=getGlobalState();if(process.env.NODE_ENV===`production`){if(e.phase===`phase-production-build`)return e.productionDestinationPrefix;let n=`production:${e.appRoot}`,r=t.servers.get(n);return r===void 0&&(r=process.env.VERCEL||e.productionServerOrigin===void 0?void 0:startEveProductionServer({appRoot:e.appRoot,origin:e.productionServerOrigin}),r!==void 0&&(r=r.catch(e=>{throw t.servers.delete(n),e}),t.servers.set(n,r))),r===void 0?e.productionDestinationPrefix:(await r).origin}let n=readEveBaseUrlEnvironment();if(n!==void 0)return n;if(process.env.NODE_ENV!==`development`)return e.productionDestinationPrefix;let r=`dev:${e.appRoot}`,i=t.servers.get(r);return i===void 0&&(i=resolveSharedEveDevServer(e.appRoot,e.devServerTimeoutMs??18e4,e.logLabel).catch(e=>{throw t.servers.delete(r),e}),t.servers.set(r,i)),(await i).origin}export{resolveEveDestinationPrefix};

package/dist/src/public/nuxt/dev-server.js

@@ -1 +1 @@
-import{joinRoutePrefix,normalizeOrigin}from"./routing.js";import{mkdir,open,readFile,rm,stat,writeFile}from"node:fs/promises";import{EVE_ROUTE_PREFIX}from"#protocol/routes.js";import{join}from"node:path";import{resolvePackageRoot}from"#internal/application/package.js";import{spawn}from"node:child_process";const EVE_BASE_URL_ENV=`EVE_BASE_URL`,DEFAULT_SERVER_READY_TIMEOUT_MS=3e4,DEV_SERVER_REGISTRY_TIMEOUT_MS=3e4,LOCAL_SERVER_URL_PATTERN=/https?:\/\/(?:\[[^\]\s]+\]|[^\s/:[\]]+)(?::\d+)?/;function isNodeErrorWithCode(e,t){return e instanceof Error&&`code`in e&&e.code===t}function delay(e){return new Promise(t=>setTimeout(t,e))}function isRecord(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function resolveEveCacheDirectory(e){return join(e,`.eve`)}function resolveEveDevServerRegistryPath(e){return join(resolveEveCacheDirectory(e),`nuxt-dev-server.json`)}function resolveEveDevServerLockPath(e){return join(resolveEveCacheDirectory(e),`nuxt-dev-server.lock`)}function normalizeDevServerRegistry(e){if(isRecord(e)&&!(typeof e.appRoot!=`string`||typeof e.origin!=`string`||typeof e.updatedAt!=`string`)&&!(e.pid!==null&&typeof e.pid!=`number`))try{return{appRoot:e.appRoot,origin:normalizeOrigin(e.origin),pid:e.pid,updatedAt:e.updatedAt}}catch{return}}async function isEveServerHealthy(t){let n=new AbortController,r=setTimeout(()=>n.abort(),1e3);try{return(await fetch(joinRoutePrefix(t,`${EVE_ROUTE_PREFIX}/health`),{signal:n.signal})).ok}catch{return!1}finally{clearTimeout(r)}}async function readUsableEveDevServerRegistry(e){try{let t=normalizeDevServerRegistry(JSON.parse(await readFile(resolveEveDevServerRegistryPath(e),`utf8`)));return t===void 0||t.appRoot!==e||!await isEveServerHealthy(t.origin)?void 0:t.origin}catch(e){if(isNodeErrorWithCode(e,`ENOENT`))return;throw e}}async function writeEveDevServerRegistry(e,t){await mkdir(resolveEveCacheDirectory(e),{recursive:!0}),await writeFile(resolveEveDevServerRegistryPath(e),`${JSON.stringify({appRoot:e,origin:t.origin,pid:t.process?.pid??null,updatedAt:new Date().toISOString()},null,2)}\n`)}async function removeStaleEveDevServerLock(e){try{let t=await stat(e);Date.now()-t.mtimeMs>3e4&&await rm(e,{force:!0})}catch(e){if(!isNodeErrorWithCode(e,`ENOENT`))throw e}}async function acquireEveDevServerLock(e){let t=resolveEveCacheDirectory(e),i=resolveEveDevServerLockPath(e),o=Date.now()+DEV_SERVER_REGISTRY_TIMEOUT_MS;for(await mkdir(t,{recursive:!0});;)try{let e=await open(i,`wx`);return await e.writeFile(`${String(process.pid)}\n`),await e.close(),async()=>{await rm(i,{force:!0})}}catch(t){if(!isNodeErrorWithCode(t,`EEXIST`))throw t;if(await readUsableEveDevServerRegistry(e)!==void 0)return async()=>{};if(await removeStaleEveDevServerLock(i),Date.now()>o)throw Error(`Timed out after ${DEV_SERVER_REGISTRY_TIMEOUT_MS}ms waiting for another Nuxt process to start eve.`);await delay(100)}}function createEveBinaryPath(){return join(resolvePackageRoot(),`bin`,`eve.js`)}function startServerProcess(e){return new Promise((n,r)=>{let i=spawn(e.command,e.args,{cwd:e.cwd,env:{...process.env,...e.env},stdio:[`ignore`,`pipe`,`pipe`]}),a=setTimeout(()=>{i.kill(),r(Error(`Timed out after ${DEFAULT_SERVER_READY_TIMEOUT_MS}ms waiting for eve to print its server URL.`))},DEFAULT_SERVER_READY_TIMEOUT_MS),cleanup=()=>{clearTimeout(a),i.off(`error`,handleError),i.off(`exit`,handleEarlyExit)},handleError=e=>{cleanup(),r(e)},handleEarlyExit=(e,t)=>{cleanup(),r(Error(`eve server process exited before printing its server URL (code ${String(e)}, signal ${String(t)}).`))},o=!1,handleOutput=e=>{if(o)return;let r=LOCAL_SERVER_URL_PATTERN.exec(e.toString(`utf8`));r!==null&&(o=!0,cleanup(),n({origin:normalizeOrigin(r[0]),process:i}))};i.once(`error`,handleError),i.once(`exit`,handleEarlyExit),i.stdout.on(`data`,e=>{process.stdout.write(e),handleOutput(e)}),i.stderr.on(`data`,e=>{process.stderr.write(e),handleOutput(e)})})}function installProcessShutdown(e){let t=e.process;if(t===void 0)return e;let close=()=>{process.off(`beforeExit`,close),process.off(`exit`,close),t.killed||t.kill()};return process.once(`beforeExit`,close),process.once(`exit`,close),e}function startEveDevServer(e){return startServerProcess({args:[createEveBinaryPath(),`dev`,`--no-ui`,`--port`,`0`],command:process.execPath,cwd:e}).then(e=>(process.env[EVE_BASE_URL_ENV]=e.origin,installProcessShutdown(e)))}async function resolveSharedEveDevServer(e){let t=await readUsableEveDevServerRegistry(e);if(t!==void 0)return process.env[EVE_BASE_URL_ENV]=t,{origin:t};let n=await acquireEveDevServerLock(e);try{let t=await readUsableEveDevServerRegistry(e);if(t!==void 0)return process.env[EVE_BASE_URL_ENV]=t,{origin:t};let n=await startEveDevServer(e);return await writeEveDevServerRegistry(e,n),n}finally{await n()}}export{EVE_BASE_URL_ENV,normalizeDevServerRegistry,resolveSharedEveDevServer};
+import{normalizeOrigin}from"./routing.js";import{mkdir,open,readFile,rm,stat,writeFile}from"node:fs/promises";import{join}from"node:path";import{resolvePackageRoot}from"#internal/application/package.js";import{spawn}from"node:child_process";import{readDevelopmentRuntimeArtifactsRevision}from"#services/dev-client/runtime-artifacts.js";const EVE_BASE_URL_ENV=`EVE_BASE_URL`,DEFAULT_SERVER_READY_TIMEOUT_MS=3e4,DEV_SERVER_REGISTRY_TIMEOUT_MS=3e4,LOCAL_SERVER_URL_PATTERN=/https?:\/\/(?:\[[^\]\s]+\]|[^\s/:[\]]+)(?::\d+)?/;function isNodeErrorWithCode(e,t){return e instanceof Error&&`code`in e&&e.code===t}function delay(e){return new Promise(t=>setTimeout(t,e))}function isRecord(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function resolveEveCacheDirectory(e){return join(e,`.eve`)}function resolveEveDevServerRegistryPath(e){return join(resolveEveCacheDirectory(e),`nuxt-dev-server.json`)}function resolveEveDevServerLockPath(e){return join(resolveEveCacheDirectory(e),`nuxt-dev-server.lock`)}function normalizeDevServerRegistry(t){if(isRecord(t)&&!(typeof t.appRoot!=`string`||typeof t.origin!=`string`||typeof t.updatedAt!=`string`)&&!(t.pid!==null&&typeof t.pid!=`number`))try{return{appRoot:t.appRoot,origin:normalizeOrigin(t.origin),pid:t.pid,updatedAt:t.updatedAt}}catch{return}}async function readUsableEveDevServerRegistry(e){try{let t=normalizeDevServerRegistry(JSON.parse(await readFile(resolveEveDevServerRegistryPath(e),`utf8`)));return t===void 0||t.appRoot!==e||await readDevelopmentRuntimeArtifactsRevision({serverUrl:t.origin,timeoutMs:1e3})===void 0?void 0:t.origin}catch(e){if(isNodeErrorWithCode(e,`ENOENT`))return;throw e}}async function writeEveDevServerRegistry(e,n){await mkdir(resolveEveCacheDirectory(e),{recursive:!0}),await writeFile(resolveEveDevServerRegistryPath(e),`${JSON.stringify({appRoot:e,origin:n.origin,pid:n.process?.pid??null,updatedAt:new Date().toISOString()},null,2)}\n`)}async function removeStaleEveDevServerLock(e){try{let t=await stat(e);Date.now()-t.mtimeMs>3e4&&await rm(e,{force:!0})}catch(e){if(!isNodeErrorWithCode(e,`ENOENT`))throw e}}async function acquireEveDevServerLock(e){let r=resolveEveCacheDirectory(e),a=resolveEveDevServerLockPath(e),o=Date.now()+DEV_SERVER_REGISTRY_TIMEOUT_MS;for(await mkdir(r,{recursive:!0});;)try{let e=await open(a,`wx`);return await e.writeFile(`${String(process.pid)}\n`),await e.close(),async()=>{await rm(a,{force:!0})}}catch(t){if(!isNodeErrorWithCode(t,`EEXIST`))throw t;if(await readUsableEveDevServerRegistry(e)!==void 0)return async()=>{};if(await removeStaleEveDevServerLock(a),Date.now()>o)throw Error(`Timed out after ${DEV_SERVER_REGISTRY_TIMEOUT_MS}ms waiting for another Nuxt process to start eve.`);await delay(100)}}function createEveBinaryPath(){return join(resolvePackageRoot(),`bin`,`eve.js`)}function startServerProcess(t){return new Promise((n,r)=>{let i=spawn(t.command,t.args,{cwd:t.cwd,env:{...process.env,...t.env},stdio:[`ignore`,`pipe`,`pipe`]}),a=setTimeout(()=>{i.kill(),r(Error(`Timed out after ${DEFAULT_SERVER_READY_TIMEOUT_MS}ms waiting for eve to print its server URL.`))},DEFAULT_SERVER_READY_TIMEOUT_MS),cleanup=()=>{clearTimeout(a),i.off(`error`,handleError),i.off(`exit`,handleEarlyExit)},handleError=e=>{cleanup(),r(e)},handleEarlyExit=(e,t)=>{cleanup(),r(Error(`eve server process exited before printing its server URL (code ${String(e)}, signal ${String(t)}).`))},o=!1,handleOutput=t=>{if(o)return;let r=LOCAL_SERVER_URL_PATTERN.exec(t.toString(`utf8`));r!==null&&(o=!0,cleanup(),n({origin:normalizeOrigin(r[0]),process:i}))};i.once(`error`,handleError),i.once(`exit`,handleEarlyExit),i.stdout.on(`data`,e=>{process.stdout.write(e),handleOutput(e)}),i.stderr.on(`data`,e=>{process.stderr.write(e),handleOutput(e)})})}function installProcessShutdown(e){let t=e.process;if(t===void 0)return e;let close=()=>{process.off(`beforeExit`,close),process.off(`exit`,close),t.killed||t.kill()};return process.once(`beforeExit`,close),process.once(`exit`,close),e}function startEveDevServer(e){return startServerProcess({args:[createEveBinaryPath(),`dev`,`--no-ui`,`--port`,`0`],command:process.execPath,cwd:e}).then(e=>(process.env[EVE_BASE_URL_ENV]=e.origin,installProcessShutdown(e)))}async function resolveSharedEveDevServer(e){let t=await readUsableEveDevServerRegistry(e);if(t!==void 0)return process.env[EVE_BASE_URL_ENV]=t,{origin:t};let n=await acquireEveDevServerLock(e);try{let t=await readUsableEveDevServerRegistry(e);if(t!==void 0)return process.env[EVE_BASE_URL_ENV]=t,{origin:t};let n=await startEveDevServer(e);return await writeEveDevServerRegistry(e,n),n}finally{await n()}}export{EVE_BASE_URL_ENV,normalizeDevServerRegistry,resolveSharedEveDevServer};

package/dist/src/public/sandbox/backends/default.d.ts

@@ -1,49 +1 @@
-import type { SandboxBackend } from "#public/definitions/sandbox-backend.js";
-import type { DockerSandboxCreateOptions } from "#public/sandbox/docker-sandbox.js";
-import type { JustBashSandboxCreateOptions } from "#public/sandbox/just-bash-sandbox.js";
-import type { MicrosandboxSandboxCreateOptions } from "#public/sandbox/microsandbox-sandbox.js";
-import type { VercelSandboxCreateOptions } from "#public/sandbox/vercel-sandbox.js";
-/**
- * Input to {@link defaultSandbox}: a separate options bag per inner
- * backend. The framework picks one backend at runtime based on
- * availability and passes it the matching bag; the others are ignored.
- */
-export interface DefaultSandboxOptions {
-    readonly docker?: DockerSandboxCreateOptions;
-    readonly justBash?: JustBashSandboxCreateOptions;
-    readonly microsandbox?: MicrosandboxSandboxCreateOptions;
-    readonly vercel?: VercelSandboxCreateOptions;
-}
-/**
- * Availability probes behind {@link defaultSandbox}'s selection chain.
- * Injectable so selection logic is testable without touching the host.
- */
-export interface DefaultSandboxProbes {
-    readonly isDeployedOnVercel: () => boolean;
-    readonly isDockerAvailable: () => boolean;
-    readonly isMicrosandboxSupported: () => boolean;
-}
-/**
- * Constructs an availability-aware sandbox backend. On first use it
- * picks the best backend the host supports, in priority order:
- *
- * 1. **Vercel Sandbox** when deploying on Vercel (`process.env.VERCEL`
- *    is set) — local container/VM runtimes cannot run there.
- * 2. **Docker** when a Linux-container Docker daemon is reachable.
- * 3. **microsandbox** when the host supports it (macOS on Apple
- *    Silicon, or glibc Linux with KVM); `eve dev` auto-installs the
- *    package into the project.
- * 4. **just-bash** as the dependency-free fallback; `eve dev`
- *    auto-installs the package into the project.
- *
- * The selection is cached for the process lifetime. To pin a backend
- * unconditionally, configure its factory directly (`docker()`,
- * `microsandbox()`, `justbash()`,
- * `vercel()`).
- */
-export declare function defaultSandbox(opts?: DefaultSandboxOptions): SandboxBackend;
-/**
- * The selection chain behind {@link defaultSandbox}. Internal —
- * exported for tests, which inject probes.
- */
-export declare function selectDefaultSandbox(opts: DefaultSandboxOptions | undefined, probes: DefaultSandboxProbes): SandboxBackend;
+export * from "#sandbox/backends/default.js";

package/dist/src/public/sandbox/backends/default.js

@@ -1 +1 @@
-import{isLinuxDockerDaemonAvailableSync,isMicrosandboxPlatformSupported}from"#execution/sandbox/bindings/local.js";import{lazyBackend}from"#execution/sandbox/lazy-backend.js";import{docker}from"#public/sandbox/backends/docker.js";import{justbash}from"#public/sandbox/backends/just-bash.js";import{microsandbox}from"#public/sandbox/backends/microsandbox.js";import{vercel}from"#public/sandbox/backends/vercel.js";const PRODUCTION_PROBES={isDeployedOnVercel:()=>!!process.env.VERCEL,isDockerAvailable:()=>isLinuxDockerDaemonAvailableSync(),isMicrosandboxSupported:()=>isMicrosandboxPlatformSupported()};function defaultSandbox(e){return lazyBackend(()=>selectDefaultSandbox(e,PRODUCTION_PROBES))}function selectDefaultSandbox(e,t){return t.isDeployedOnVercel()?vercel(e?.vercel):t.isDockerAvailable()?docker(e?.docker):t.isMicrosandboxSupported()?microsandbox(e?.microsandbox):justbash(e?.justBash)}export{defaultSandbox,selectDefaultSandbox};
+export*from"#sandbox/backends/default.js";export{};

package/dist/src/public/sandbox/backends/docker.d.ts

@@ -1,14 +1 @@
-import type { SandboxBackend } from "#public/definitions/sandbox-backend.js";
-import type { DockerSandboxCreateOptions } from "#public/sandbox/docker-sandbox.js";
-/**
- * Constructs the Docker sandbox backend: the workspace runs inside a
- * real Linux container driven through the Docker CLI, using the
- * official Ubuntu 26.04 image by default.
- *
- * Requires a running Docker-compatible daemon reachable through a
- * `docker` CLI (Docker Desktop, OrbStack, Colima, Podman via its
- * docker-compatible CLI, …; override the binary with `EVE_DOCKER_PATH`).
- * Configuring this backend pins it unconditionally — when you want
- * fallback behavior, use `defaultBackend()` instead.
- */
-export declare function docker(opts?: DockerSandboxCreateOptions): SandboxBackend;
+export * from "#sandbox/backends/docker.js";

package/dist/src/public/sandbox/backends/docker.js

@@ -1 +1 @@
-import{createDockerSandboxBackend}from"#execution/sandbox/bindings/local.js";function docker(e){return createDockerSandboxBackend({createOptions:e})}export{docker};
+export*from"#sandbox/backends/docker.js";export{};

package/dist/src/public/sandbox/backends/just-bash.d.ts

@@ -1,17 +1 @@
-import type { SandboxBackend } from "#public/definitions/sandbox-backend.js";
-import type { JustBashSandboxCreateOptions } from "#public/sandbox/just-bash-sandbox.js";
-/**
- * Constructs the just-bash sandbox backend: a pure-JS bash interpreter
- * over a virtual filesystem stored under `.eve/sandbox-cache/`. It
- * needs no daemon or VM, but commands run in a simulated shell — no
- * real binaries (`git`, `node`, package managers) and no network
- * isolation.
- *
- * The `just-bash` package is not bundled with eve. When it is missing,
- * `eve dev` installs it into the application automatically (disable
- * with `autoInstall: false`); production processes fail with an
- * actionable install error instead. Configuring this backend pins it
- * unconditionally — when you want fallback behavior, use
- * `defaultBackend()` instead.
- */
-export declare function justbash(opts?: JustBashSandboxCreateOptions): SandboxBackend;
+export * from "#sandbox/backends/just-bash.js";

package/dist/src/public/sandbox/backends/just-bash.js

@@ -1 +1 @@
-import{createJustBashSandboxBackend}from"#execution/sandbox/bindings/local.js";function justbash(e){return createJustBashSandboxBackend({createOptions:e})}export{justbash};
+export*from"#sandbox/backends/just-bash.js";export{};

package/dist/src/public/sandbox/backends/microsandbox.d.ts

@@ -1,17 +1 @@
-import type { SandboxBackend } from "#public/definitions/sandbox-backend.js";
-import type { MicrosandboxBootstrapUseOptions, MicrosandboxSandboxCreateOptions, MicrosandboxSessionUseOptions } from "#public/sandbox/microsandbox-sandbox.js";
-/**
- * Constructs the microsandbox sandbox backend: lightweight local VMs
- * via [microsandbox](https://www.npmjs.com/package/microsandbox) with
- * snapshot-backed templates and a firewall capable of domain-level
- * network policies and credential brokering.
- *
- * Supported hosts: macOS on Apple Silicon, or Linux (glibc) with KVM
- * enabled. The `microsandbox` package is not bundled with eve. When it
- * (or its VM runtime) is missing, `eve dev` installs both
- * automatically (disable with `setup: { autoInstall: false }`);
- * production processes fail with actionable errors instead.
- * Configuring this backend pins it unconditionally — when you want
- * fallback behavior, use `defaultBackend()` instead.
- */
-export declare function microsandbox(opts?: MicrosandboxSandboxCreateOptions): SandboxBackend<MicrosandboxBootstrapUseOptions, MicrosandboxSessionUseOptions>;
+export * from "#sandbox/backends/microsandbox.js";

package/dist/src/public/sandbox/backends/microsandbox.js

@@ -1 +1 @@
-import{createMicrosandboxSandboxBackend}from"#execution/sandbox/bindings/local.js";function microsandbox(e){return createMicrosandboxSandboxBackend({createOptions:e})}export{microsandbox};
+export*from"#sandbox/backends/microsandbox.js";export{};

package/dist/src/public/sandbox/backends/vercel.d.ts

@@ -1,30 +1 @@
-import type { SandboxBackend } from "#public/definitions/sandbox-backend.js";
-import type { VercelSandboxBootstrapUseOptions, VercelSandboxOptions, VercelSandboxSessionUseOptions } from "#public/sandbox/vercel-sandbox.js";
-/**
- * Constructs the [Vercel Sandbox](https://vercel.com/docs/sandbox)
- * backend. Configuring this backend pins it unconditionally —
- * including for local development, where it creates real hosted
- * sandboxes (requires Vercel credentials).
- *
- * The optional provider creation fields are forwarded to Vercel Sandbox creation
- * for every fresh sandbox the framework creates (template at prewarm,
- * session at first-time create). On resume (`Sandbox.get`), no create
- * happens, so opts are not re-applied. `networkPolicy` is applied after
- * framework-owned base setup for fresh templates and template-less
- * sessions, before authored bootstrap code runs.
- *
- * `opts.source`, if supplied, is used only on the template create:
- * the author's snapshot, git revision, or tarball becomes the base
- * layer of the template. Bootstrap, seed files, and framework setup
- * still run on top, and every session derives from the resulting
- * eve-owned snapshot. `source` is stripped from session creates so the
- * framework's snapshot always wins.
- *
- * `bootstrap({ use })` applies its options to the template via
- * `sandbox.update(...)`; those settings persist into the snapshot.
- * `onSession({ use })` applies its options to the live session via the
- * SDK's `update` under the hood, overriding any overlapping field
- * from `opts`. `sessionCreateOptions`, when provided, is resolved only
- * when creating a fresh live session and can attach session-specific Drives.
- */
-export declare function vercel(opts?: VercelSandboxOptions): SandboxBackend<VercelSandboxBootstrapUseOptions, VercelSandboxSessionUseOptions>;
+export * from "#sandbox/backends/vercel.js";

package/dist/src/public/sandbox/backends/vercel.js

@@ -1 +1 @@
-import{createVercelSandbox}from"#execution/sandbox/bindings/vercel.js";function vercel(e){let{sessionCreateOptions:t,...n}=e??{};return createVercelSandbox({createOptions:n,resolveSessionCreateOptions:t})}export{vercel};
+export*from"#sandbox/backends/vercel.js";export{};

package/dist/src/public/skills/index.d.ts

@@ -1,7 +1,7 @@
 /**
  * Skill authoring helpers and runtime accessors.
  */
-export type { SkillFile, SkillHandle } from "#execution/skills/types.js";
+export type { SkillFile, SkillHandle } from "#shared/skill-types.js";
 export { defineSkill, type NamedSkillDefinition, type SkillDefinition, type SkillFileContent, type SkillPackageDefinition, } from "#public/definitions/skill.js";
-export { defineDynamic } from "#public/definitions/tool.js";
-export type { DynamicResolveContext, DynamicSentinel } from "#shared/dynamic-tool-definition.js";
+export { defineDynamic } from "#dynamic/definition.js";
+export type { DynamicResolveContext, DynamicSentinel } from "#dynamic/definition.js";

package/dist/src/public/skills/index.js

@@ -1 +1 @@
-import{defineDynamic}from"#public/definitions/tool.js";import{defineSkill}from"#public/definitions/skill.js";export{defineDynamic,defineSkill};
+import{defineSkill}from"#public/definitions/skill.js";import{defineDynamic}from"#dynamic/definition.js";export{defineDynamic,defineSkill};