gemi 0.125.0 → 0.126.0

package/dist/{chunk-j5rwv09s.js → chunk-ravssmdy.js}

@@ -1,6 +1,6 @@
 // @bun
-import{Ba as y}from"./chunk-kk18xqgc.js";import{createElement as q}from"react";function z(i,n){let p=Object.keys(n).sort((s,g)=>g.length-s.length).map((s)=>s.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")),b=new RegExp(p.join("|"),"g");return i.replace(b,(s)=>n[s])}async function L(i,n,p=[],b){let s=[...p.map((t)=>`${i}/views/${t}.tsx`),b?`${i}/views/${b}.tsx`:`${i}/views/RootLayout.tsx`],g=new Set;for(let t of s){let u=n.moduleGraph.getModulesByFile(t);if(u)for(let x of u)g.add(x)}let e=[],l=[],r={};for(let t of g)if(t)for(let u of t.importedModules){if(u.file.includes("module.css"))r[u.file]=u.ssrTransformResult.map.sourcesContent.join("");if(u.file.includes(".css"))l.push(u.file)}for(let t of l){let u=await n.transformRequest(t+"?direct"),x=t.includes("module.css"),k="";if(x)k=z(r[t],u.default);e.push({isDev:!0,id:t,content:x?k:u.code})}return e.map((t,u)=>{return q("style",{key:u,type:"text/css","data-vite-dev-id":t.id,dangerouslySetInnerHTML:{__html:t.content}})})}async function _(i=[]){return i.map((n,p)=>{return q("style",{key:p,id:n?.id,type:"text/css",dangerouslySetInnerHTML:{__html:n.content}})})}import{existsSync as J}from"fs";import{basename as N}from"path";import{networkInterfaces as O}from"os";var v={name:"gemi",version:"0.125.0",private:!1,license:"MIT",author:"Enes Tufekci <enes@gemijs.dev>",repository:{type:"git",url:"git+https://github.com/nstfkc/gemi.git",directory:"packages/gemi"},bin:{gemi:"./dist/bin/gemi.js","gemi-orm-generator":"./dist/bin/orm-generator.js"},files:["dist/**/*","ide/typescript-plugin/package.json","skills/**/*"],module:!0,exports:{"./http":"./http/index.ts","./client":"./client/index.ts","./ai":"./ai/index.ts","./ai/client":"./ai/client/index.ts","./testing":"./testing/index.ts","./app":"./app/index.ts","./facades":"./facades/index.ts","./email":"./email/index.ts","./vite":"./dist/vite/index.mjs","./kernel":"./kernel/index.ts","./services":"./services/index.ts","./i18n":"./i18n/index.ts","./dictionary":"./i18n/dictionaryRuntime.ts","./server":"./server/index.ts","./config":"./config/index.ts","./container":"./container/index.ts","./foundation":"./foundation/index.ts","./database":"./database/index.ts","./orm":"./orm/index.ts","./support":"./support/index.ts","./console/run":"./console/run.ts","./queue/work":"./services/queue/work.ts","./stats/route-table":"./stats/route-table.ts","./ide/typescript-plugin":"./ide/typescript-plugin/index.ts","./bun/preload":"./bun/preload.ts","./bun/plugin":"./bun/plugin.ts","./vitest":"./vitest/index.ts"},scripts:{lint:"oxlint",typecheck:"tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.browser.json && tsc --noEmit -p ide/typescript-plugin/tsconfig.json",build:"NODE_ENV=production bun run build:core && bun run build:bin && bun run build:types && bun run build:client && bun run build:plugin && bun run build:ts-plugin && bun run build:client-types && bun run build:augmentation","build:core":"bun ./scripts/build.ts","build:bin":"bun build --outdir=./dist/bin --target=bun --external=vite --external=react-dom --external=react/jsx-runtime --external=bun --external=sharp --external=@azure/storage-blob --external=typescript --sourcemap ./bin/gemi.ts ./bin/orm-generator.ts && bun ./scripts/prepare-bin.ts","build:client":"rm -rf dist/client dist/testing dist/ai/client dist/chunks && vite build -c vite.client.config.mts","build:plugin":"vite build -c vite.plugin.config.mts","build:ts-plugin":"bun ./scripts/build-ts-plugin.ts","build:types":"tsc -p tsconfig.build.json","build:client-types":"tsc -p tsconfig.browser.json",test:"bun --bun x vitest","test:types":"vitest run --typecheck.only","test:live":"bun --bun x vitest run ai/live","test:packaging":"bun --bun x vitest run --config vitest.packaging.config.ts","build:publish":"bun scripts/build-publish.ts",prepublishOnly:"echo 'Do not publish from this directory \u2014 its exports point at TS source. Run: bun run build:publish, then publish from .publish/' && exit 1","build:augmentation":"bun ./scripts/wire-augmentation.ts"},dependencies:{"@aws-sdk/client-s3":"^3.629.0","@aws-sdk/s3-request-presigner":"^3.629.0","ast-types":"^0.14.2",commander:"^12.1.0",history:"^5.3.0","jsx-email":"2.0.0-rc2.1","magic-string":"^0.30.17",open:"^10.1.0","react-error-boundary":"^6.0.0",recast:"^0.23.9",resend:"^6.12.3",satori:"^0.12.2","temporal-polyfill":"^0.2.5","twitter-api-v2":"^1.20.2","urlpattern-polyfill":"^10.0.0",uuid:"^9.0.1"},devDependencies:{"@babel/parser":"^7.25.4","@prisma/generator-helper":"^6.5.0","@repo/typescript-config":"*","@testing-library/react":"^16.3.2","@types/bun":"^1.3.14","@types/eslint":"^8.56.5","@types/node":"^20.11.24","@types/react":"^19.0.2","@types/react-dom":"^19.0.2",eslint:"^8.57.0",jsdom:"^30.0.1",oxlint:"^1.39.0",postgres:"^3.4.5",react:"19.2.3","react-dom":"19.2.3",typescript:"^5.7.3",vitest:"^4.0.0"},peerDependencies:{"@azure/storage-blob":"^12.28.0",react:">=19","react-dom":">=19",sharp:"^0.34.2",typescript:">=5",vite:"^8.0.0",postgres:"^3.4.0"},peerDependenciesMeta:{"@azure/storage-blob":{optional:!0},typescript:{optional:!0},postgres:{optional:!0}}};var Q=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2557   \u2588\u2588\u2588\u2557\u2588\u2588\u2557","\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2551","\u2588\u2588\u2551  \u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2554\u2588\u2588\u2588\u2588\u2554\u2588\u2588\u2551\u2588\u2588\u2551","\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u255D  \u2588\u2588\u2551\u255A\u2588\u2588\u2554\u255D\u2588\u2588\u2551\u2588\u2588\u2551","\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2551 \u255A\u2550\u255D \u2588\u2588\u2551\u2588\u2588\u2551"," \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D     \u255A\u2550\u255D\u255A\u2550\u255D"],W=Boolean(process.stdout.isTTY)&&!process.env.NO_COLOR,c=(i,n)=>W?`\x1B[${i}m${n}\x1B[0m`:n,X=(i)=>c("1",i),d=(i)=>c("2",i),j=(i)=>c("36",i),Y=(i)=>c("32",i),Z=(i)=>c("35",i);function $(){return v.version??"?"}function f(i){for(let n of Object.values(O()))for(let p of n??[])if((p.family==="IPv4"||p.family===4)&&!p.internal)return`http://${p.address}:${i}`;return null}function H(i){return y(i).filter((n)=>J(n)).map((n)=>N(n))}function T(i){let{port:n,rootDir:p}=i,b=`http://localhost:${n}`,s=f(n),g=H(p),e=(r,t)=>`  ${Y("\u279C")}  ${X(r.padEnd(9))}${t}`,l=["",...Q.map((r)=>Z(r)),"",`  ${d("gemi")} ${j(`v${$()}`)}`,"",e("Local:",j(b)),e("Network:",s?j(s):d("unavailable")),e("Env:",g.length?g.join(", "):d("none")),""];console.log(l.join(`
+import{Ba as y}from"./chunk-kk18xqgc.js";import{createElement as q}from"react";function z(i,n){let p=Object.keys(n).sort((s,g)=>g.length-s.length).map((s)=>s.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")),b=new RegExp(p.join("|"),"g");return i.replace(b,(s)=>n[s])}async function L(i,n,p=[],b){let s=[...p.map((t)=>`${i}/views/${t}.tsx`),b?`${i}/views/${b}.tsx`:`${i}/views/RootLayout.tsx`],g=new Set;for(let t of s){let u=n.moduleGraph.getModulesByFile(t);if(u)for(let x of u)g.add(x)}let e=[],l=[],r={};for(let t of g)if(t)for(let u of t.importedModules){if(u.file.includes("module.css"))r[u.file]=u.ssrTransformResult.map.sourcesContent.join("");if(u.file.includes(".css"))l.push(u.file)}for(let t of l){let u=await n.transformRequest(t+"?direct"),x=t.includes("module.css"),k="";if(x)k=z(r[t],u.default);e.push({isDev:!0,id:t,content:x?k:u.code})}return e.map((t,u)=>{return q("style",{key:u,type:"text/css","data-vite-dev-id":t.id,dangerouslySetInnerHTML:{__html:t.content}})})}async function _(i=[]){return i.map((n,p)=>{return q("style",{key:p,id:n?.id,type:"text/css",dangerouslySetInnerHTML:{__html:n.content}})})}import{existsSync as J}from"fs";import{basename as N}from"path";import{networkInterfaces as O}from"os";var v={name:"gemi",version:"0.126.0",private:!1,license:"MIT",author:"Enes Tufekci <enes@gemijs.dev>",repository:{type:"git",url:"git+https://github.com/nstfkc/gemi.git",directory:"packages/gemi"},bin:{gemi:"./dist/bin/gemi.js","gemi-orm-generator":"./dist/bin/orm-generator.js"},files:["dist/**/*","ide/typescript-plugin/package.json","skills/**/*"],module:!0,exports:{"./http":"./http/index.ts","./client":"./client/index.ts","./ai":"./ai/index.ts","./ai/client":"./ai/client/index.ts","./testing":"./testing/index.ts","./app":"./app/index.ts","./facades":"./facades/index.ts","./email":"./email/index.ts","./vite":"./dist/vite/index.mjs","./kernel":"./kernel/index.ts","./services":"./services/index.ts","./i18n":"./i18n/index.ts","./dictionary":"./i18n/dictionaryRuntime.ts","./server":"./server/index.ts","./config":"./config/index.ts","./container":"./container/index.ts","./foundation":"./foundation/index.ts","./database":"./database/index.ts","./orm":"./orm/index.ts","./support":"./support/index.ts","./console/run":"./console/run.ts","./queue/work":"./services/queue/work.ts","./stats/route-table":"./stats/route-table.ts","./ide/typescript-plugin":"./ide/typescript-plugin/index.ts","./bun/preload":"./bun/preload.ts","./bun/plugin":"./bun/plugin.ts","./vitest":"./vitest/index.ts"},scripts:{lint:"oxlint",typecheck:"tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.browser.json && tsc --noEmit -p ide/typescript-plugin/tsconfig.json",build:"NODE_ENV=production bun run build:core && bun run build:bin && bun run build:types && bun run build:client && bun run build:plugin && bun run build:ts-plugin && bun run build:client-types && bun run build:augmentation","build:core":"bun ./scripts/build.ts","build:bin":"bun build --outdir=./dist/bin --target=bun --external=vite --external=react-dom --external=react/jsx-runtime --external=bun --external=sharp --external=@azure/storage-blob --external=typescript --sourcemap ./bin/gemi.ts ./bin/orm-generator.ts && bun ./scripts/prepare-bin.ts","build:client":"rm -rf dist/client dist/testing dist/ai/client dist/chunks && vite build -c vite.client.config.mts","build:plugin":"vite build -c vite.plugin.config.mts","build:ts-plugin":"bun ./scripts/build-ts-plugin.ts","build:types":"tsc -p tsconfig.build.json","build:client-types":"tsc -p tsconfig.browser.json",test:"bun --bun x vitest","test:types":"vitest run --typecheck.only","test:live":"bun --bun x vitest run ai/live","test:packaging":"bun --bun x vitest run --config vitest.packaging.config.ts","build:publish":"bun scripts/build-publish.ts",prepublishOnly:"echo 'Do not publish from this directory \u2014 its exports point at TS source. Run: bun run build:publish, then publish from .publish/' && exit 1","build:augmentation":"bun ./scripts/wire-augmentation.ts"},dependencies:{"@aws-sdk/client-s3":"^3.629.0","@aws-sdk/s3-request-presigner":"^3.629.0","ast-types":"^0.14.2",commander:"^12.1.0",history:"^5.3.0","jsx-email":"2.0.0-rc2.1","magic-string":"^0.30.17",open:"^10.1.0","react-error-boundary":"^6.0.0",recast:"^0.23.9",resend:"^6.12.3",satori:"^0.12.2","temporal-polyfill":"^0.2.5","twitter-api-v2":"^1.20.2","urlpattern-polyfill":"^10.0.0",uuid:"^9.0.1"},devDependencies:{"@babel/parser":"^7.25.4","@prisma/generator-helper":"^6.5.0","@repo/typescript-config":"*","@testing-library/react":"^16.3.2","@types/bun":"^1.3.14","@types/eslint":"^8.56.5","@types/node":"^20.11.24","@types/react":"^19.0.2","@types/react-dom":"^19.0.2",eslint:"^8.57.0",jsdom:"^30.0.1",oxlint:"^1.39.0",postgres:"^3.4.5",react:"19.2.3","react-dom":"19.2.3",typescript:"^5.7.3",vitest:"^4.0.0"},peerDependencies:{"@azure/storage-blob":"^12.28.0",react:">=19","react-dom":">=19",sharp:"^0.34.2",typescript:">=5",vite:"^8.0.0",postgres:"^3.4.0"},peerDependenciesMeta:{"@azure/storage-blob":{optional:!0},typescript:{optional:!0},postgres:{optional:!0}}};var Q=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2557   \u2588\u2588\u2588\u2557\u2588\u2588\u2557","\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2551","\u2588\u2588\u2551  \u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2554\u2588\u2588\u2588\u2588\u2554\u2588\u2588\u2551\u2588\u2588\u2551","\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u255D  \u2588\u2588\u2551\u255A\u2588\u2588\u2554\u255D\u2588\u2588\u2551\u2588\u2588\u2551","\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2551 \u255A\u2550\u255D \u2588\u2588\u2551\u2588\u2588\u2551"," \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D     \u255A\u2550\u255D\u255A\u2550\u255D"],W=Boolean(process.stdout.isTTY)&&!process.env.NO_COLOR,c=(i,n)=>W?`\x1B[${i}m${n}\x1B[0m`:n,X=(i)=>c("1",i),d=(i)=>c("2",i),j=(i)=>c("36",i),Y=(i)=>c("32",i),Z=(i)=>c("35",i);function $(){return v.version??"?"}function f(i){for(let n of Object.values(O()))for(let p of n??[])if((p.family==="IPv4"||p.family===4)&&!p.internal)return`http://${p.address}:${i}`;return null}function H(i){return y(i).filter((n)=>J(n)).map((n)=>N(n))}function T(i){let{port:n,rootDir:p}=i,b=`http://localhost:${n}`,s=f(n),g=H(p),e=(r,t)=>`  ${Y("\u279C")}  ${X(r.padEnd(9))}${t}`,l=["",...Q.map((r)=>Z(r)),"",`  ${d("gemi")} ${j(`v${$()}`)}`,"",e("Local:",j(b)),e("Network:",s?j(s):d("unavailable")),e("Env:",g.length?g.join(", "):d("none")),""];console.log(l.join(`
 `))}function I(i=process.env.SERVER_IDLE_TIMEOUT){if(i===void 0||i.trim()==="")return 10;let n=Number(i.trim());if(!Number.isInteger(n)||n<0||n>255)throw Error(`SERVER_IDLE_TIMEOUT must be a whole number of seconds from 0 to 255 (0 disables the timeout), got ${JSON.stringify(i)}.`);return n}
 export{L as R,_ as S,T,I as U};
 
-//# debugId=69502409866BBC5B64756E2164756E21
+//# debugId=299603313C89621664756E2164756E21

package/dist/{chunk-j5rwv09s.js.map → chunk-ravssmdy.js.map}

@@ -7,6 +7,6 @@
     "/**\n * Bun's default, and what both servers use when `SERVER_IDLE_TIMEOUT` is unset.\n */\nexport const DEFAULT_SERVER_IDLE_TIMEOUT = 10;\n\n/**\n * The `idleTimeout` (seconds) both `gemi dev` and `gemi start` pass to\n * `Bun.serve`, from `SERVER_IDLE_TIMEOUT` (#787).\n *\n * One reader for both servers, so a long-poll that works under `gemi start`\n * also works under `gemi dev`. Before this, only `httpProd` read the variable\n * and the dev server always ran at Bun's 10 seconds.\n *\n * It is the time a connection may stay silent, a response that has not started\n * included, before Bun closes it; `0` disables it. It does not apply to an\n * upgraded websocket (the HMR relay included), which has its own\n * `websocket.idleTimeout`.\n *\n * Unset or blank means the default. Anything that is not a whole number from 0\n * to 255 (Bun's own limits) fails the boot with the variable's name, instead\n * of Bun's \"expects idleTimeout to be an integer\", which does not say where the\n * value came from.\n */\nexport function serverIdleTimeout(raw: string | undefined = process.env.SERVER_IDLE_TIMEOUT): number {\n  if (raw === undefined || raw.trim() === \"\") return DEFAULT_SERVER_IDLE_TIMEOUT;\n\n  const seconds = Number(raw.trim());\n  if (!Number.isInteger(seconds) || seconds < 0 || seconds > 255) {\n    throw new Error(\n      `SERVER_IDLE_TIMEOUT must be a whole number of seconds from 0 to 255 ` +\n        `(0 disables the timeout), got ${JSON.stringify(raw)}.`,\n    );\n  }\n  return seconds;\n}\n"
   ],
   "mappings": ";yCAAA,wBAAS,cAGT,SAAS,CAAc,CAAC,EAAc,EAAwC,CAC5E,IAAM,EAAc,OAAO,KAAK,CAAM,EACnC,KAAK,CAAC,EAAG,IAAM,EAAE,OAAS,EAAE,MAAM,EAClC,IAAI,CAAC,IAAQ,EAAI,QAAQ,sBAAuB,MAAM,CAAC,EAGpD,EAAQ,IAAI,OAAO,EAAY,KAAK,GAAG,EAAG,GAAG,EAEnD,OAAO,EAAK,QAAQ,EAAO,CAAC,IAAU,EAAO,EAAM,EAGrD,eAAsB,CAAe,CACnC,EACA,EACA,EAAyB,CAAC,EAE1B,EACA,CACA,IAAM,EAAQ,CACZ,GAAG,EAAa,IAAI,CAAC,IAAS,GAAG,WAAgB,OAAU,EAC3D,EAAS,GAAG,WAAgB,QAAe,GAAG,wBAChD,EAEM,EAAU,IAAI,IACpB,QAAW,KAAQ,EAAO,CACxB,IAAM,EAAM,EAAK,YAAY,iBAAiB,CAAI,EAClD,GAAI,EACF,QAAW,KAAK,EAAK,EAAQ,IAAI,CAAC,EAItC,IAAM,EAAS,CAAC,EACV,EAAa,CAAC,EACd,EAA2C,CAAC,EAClD,QAAW,KAAO,EAChB,GAAI,EACF,QAAW,KAAY,EAAI,gBAAiB,CAC1C,GAAI,EAAS,KAAK,SAAS,YAAY,EACrC,EAAiB,EAAS,MAAQ,EAAS,mBAAmB,IAAI,eAAe,KAAK,EAAE,EAE1F,GAAI,EAAS,KAAK,SAAS,MAAM,EAC/B,EAAW,KAAK,EAAS,IAAI,EAMrC,QAAW,KAAiB,EAAY,CACtC,IAAM,EAAY,MAAM,EAAK,iBAAiB,EAAgB,SAAS,EAEjE,EAAc,EAAc,SAAS,YAAY,EAEnD,EAAuB,GAE3B,GAAI,EACF,EAAuB,EACrB,EAAiB,GAGhB,EAA6D,OAChE,EAGF,EAAO,KAAK,CACV,MAAO,GACP,GAAI,EACJ,QAAS,EAAc,EAAuB,EAAU,IAC1D,CAAC,EAGH,OAAO,EAAO,IAAI,CAAC,EAAO,IAAM,CAC9B,OAAO,EAAc,QAAS,CAC5B,IAAK,EACL,KAAM,WACN,mBAAoB,EAAM,GAC1B,wBAAyB,CAAE,OAAQ,EAAM,OAAQ,CACnD,CAAC,EACF,EAGH,eAAsB,CAAY,CAAC,EAAS,CAAC,EAAG,CAC9C,OAAO,EAAO,IAAI,CAAC,EAAO,IAAM,CAC9B,OAAO,EAAc,QAAS,CAC5B,IAAK,EACL,GAAI,GAAO,GACX,KAAM,WACN,wBAAyB,CAAE,OAAQ,EAAM,OAAQ,CACnD,CAAC,EACF,EC3FH,qBAAS,WACT,mBAAS,aACT,4BAAS,gyHAKT,IAAM,EAAM,CACV,oKACA,mLACA,yKACA,oKACA,mLACA,yJACF,EAEM,EAAW,QAAQ,QAAQ,OAAO,KAAK,GAAK,CAAC,QAAQ,IAAI,SACzD,EAAQ,CAAC,EAAc,IAC3B,EAAW,QAAQ,KAAQ,WAAgB,EACvC,EAAO,CAAC,IAAc,EAAM,IAAK,CAAC,EAClC,EAAM,CAAC,IAAc,EAAM,IAAK,CAAC,EACjC,EAAO,CAAC,IAAc,EAAM,KAAM,CAAC,EACnC,EAAQ,CAAC,IAAc,EAAM,KAAM,CAAC,EACpC,EAAU,CAAC,IAAc,EAAM,KAAM,CAAC,EAE5C,SAAS,CAAW,EAAW,CAC7B,OAAQ,EAA6B,SAAW,IAGlD,SAAS,CAAU,CAAC,EAAsC,CACxD,QAAW,KAAU,OAAO,OAAO,EAAkB,CAAC,EACpD,QAAW,KAAS,GAAU,CAAC,EAG7B,IADa,EAAM,SAAW,QAAW,EAAM,SAAuB,IAC1D,CAAC,EAAM,SAAU,MAAO,UAAU,EAAM,WAAW,IAGnE,OAAO,KAGT,SAAS,CAAc,CAAC,EAA2B,CACjD,OAAO,EAAS,CAAO,EACpB,OAAO,CAAC,IAAS,EAAW,CAAI,CAAC,EACjC,IAAI,CAAC,IAAS,EAAS,CAAI,CAAC,EAG1B,SAAS,CAAkB,CAAC,EAGhC,CACD,IAAQ,OAAM,WAAY,EACpB,EAAQ,oBAAoB,IAC5B,EAAU,EAAW,CAAI,EACzB,EAAM,EAAe,CAAO,EAE5B,EAAM,CAAC,EAAe,IAC1B,KAAK,EAAM,QAAE,MAAM,EAAK,EAAM,OAAO,CAAC,CAAC,IAAI,IAEvC,EAAM,CACV,GACA,GAAG,EAAI,IAAI,CAAC,IAAS,EAAQ,CAAI,CAAC,EAClC,GACA,KAAK,EAAI,MAAM,KAAK,EAAK,IAAI,EAAY,GAAG,IAC5C,GACA,EAAI,SAAU,EAAK,CAAK,CAAC,EACzB,EAAI,WAAY,EAAU,EAAK,CAAO,EAAI,EAAI,aAAa,CAAC,EAC5D,EAAI,OAAQ,EAAI,OAAS,EAAI,KAAK,IAAI,EAAI,EAAI,MAAM,CAAC,EACrD,EACF,EAEA,QAAQ,IAAI,EAAI,KAAK;AAAA,CAAI,CAAC,EC/CrB,SAAS,CAAiB,CAAC,EAA0B,QAAQ,IAAI,oBAA6B,CACnG,GAAI,IAAQ,QAAa,EAAI,KAAK,IAAM,GAAI,MArBH,IAuBzC,IAAM,EAAU,OAAO,EAAI,KAAK,CAAC,EACjC,GAAI,CAAC,OAAO,UAAU,CAAO,GAAK,EAAU,GAAK,EAAU,IACzD,MAAU,MACR,qGACmC,KAAK,UAAU,CAAG,IACvD,EAEF,OAAO",
-  "debugId": "69502409866BBC5B64756E2164756E21",
+  "debugId": "299603313C89621664756E2164756E21",
   "names": []
 }

package/dist/{chunk-rvspb96n.js → chunk-rtb64x14.js}

@@ -1,5 +1,5 @@
 // @bun
-import{vi as O}from"./chunk-y9f2see3.js";import{cj as S}from"./chunk-rany5zgk.js";import{Jj as E}from"./chunk-npbf06c1.js";import{hk as U}from"./chunk-6gwxvmjv.js";class F{rows=new Map;async find(j,G){for(let Q of this.rows.values())if(Q.userId===j&&Q.provider===G)return{...Q};return null}async list(j){return[...this.rows.values()].filter((G)=>G.userId===j).map((G)=>({...G}))}async save(j,G,Q){let V=await this.find(j,G),W=new Date,Y={id:V?.id??Bun.randomUUIDv7(),userId:j,provider:G,...P(Q),needsReconnect:!1,revision:(V?.revision??0)+1,createdAt:V?.createdAt??W,updatedAt:W};return this.rows.set(Y.id,Y),{...Y}}async updateTokens(j,G,Q){let V=this.rows.get(j);if(!V||V.revision!==G)return null;let W=P(Q);W.providerAccountId??=V.providerAccountId;let Y={...V,...W,needsReconnect:!1,revision:G+1,updatedAt:new Date};return this.rows.set(j,Y),{...Y}}async markNeedsReconnect(j){let G=this.rows.get(j);if(G)this.rows.set(j,{...G,needsReconnect:!0,updatedAt:new Date})}async delete(j){this.rows.delete(j)}}class L{encrypter;table;sql;dialect;constructor(j,G,Q={}){this.encrypter=G;let V=Q.table??"gemi_oauth_connections";if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(V))throw Error(`The connections table name "${V}" is not a plain identifier.`);this.table=V,this.sql=j.sql,this.dialect=j.dialect}async createTable(){for(let j of q(this.dialect,this.table))await this.sql.unsafe(j)}async find(j,G){let Q=this.sql,V=await Q`
+import{Fi as O}from"./chunk-8df7fn7f.js";import{nj as S}from"./chunk-0arss2xy.js";import{Uj as E}from"./chunk-v7nw1g2n.js";import{sk as U}from"./chunk-yg8se4vs.js";class F{rows=new Map;async find(j,G){for(let Q of this.rows.values())if(Q.userId===j&&Q.provider===G)return{...Q};return null}async list(j){return[...this.rows.values()].filter((G)=>G.userId===j).map((G)=>({...G}))}async save(j,G,Q){let V=await this.find(j,G),W=new Date,Y={id:V?.id??Bun.randomUUIDv7(),userId:j,provider:G,...P(Q),needsReconnect:!1,revision:(V?.revision??0)+1,createdAt:V?.createdAt??W,updatedAt:W};return this.rows.set(Y.id,Y),{...Y}}async updateTokens(j,G,Q){let V=this.rows.get(j);if(!V||V.revision!==G)return null;let W=P(Q);W.providerAccountId??=V.providerAccountId;let Y={...V,...W,needsReconnect:!1,revision:G+1,updatedAt:new Date};return this.rows.set(j,Y),{...Y}}async markNeedsReconnect(j){let G=this.rows.get(j);if(G)this.rows.set(j,{...G,needsReconnect:!0,updatedAt:new Date})}async delete(j){this.rows.delete(j)}}class L{encrypter;table;sql;dialect;constructor(j,G,Q={}){this.encrypter=G;let V=Q.table??"gemi_oauth_connections";if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(V))throw Error(`The connections table name "${V}" is not a plain identifier.`);this.table=V,this.sql=j.sql,this.dialect=j.dialect}async createTable(){for(let j of q(this.dialect,this.table))await this.sql.unsafe(j)}async find(j,G){let Q=this.sql,V=await Q`
       SELECT * FROM ${this.name(Q)} WHERE user_id = ${j} AND provider = ${G}
     `;return V[0]?this.decode(V[0]):null}async list(j){let G=this.sql;return(await G`
       SELECT * FROM ${this.name(G)} WHERE user_id = ${j} ORDER BY provider
@@ -66,6 +66,6 @@ import{vi as O}from"./chunk-y9f2see3.js";import{cj as S}from"./chunk-rany5zgk.js
     "created_at" BIGINT NOT NULL,
     "updated_at" BIGINT NOT NULL${V}
 )`,`CREATE UNIQUE INDEX IF NOT EXISTS "${G}_user_id_provider_key" ON "${G}"("user_id", "provider")`]}class X extends Error{code;status;providerError;constructor(j,G,Q={}){super(G,Q.cause!==void 0?{cause:Q.cause}:void 0);this.code=j;this.name="OAuthConnectionError",this.status=Q.status,this.providerError=Q.providerError}}class K extends X{provider;constructor(j,G={}){super("reconnect_required",`The ${j} connection needs to be reconnected: its tokens were refused and could not be refreshed.`,G);this.provider=j;this.name="OAuthReconnectRequiredError"}}class C{config;constructor(j){for(let G of["authorizeUrl","tokenUrl"])_(G,j[G]);for(let G of["refreshUrl","revokeUrl"])if(j[G]!==void 0)_(G,j[G]);if(j.apiBaseUrl===void 0||j.apiBaseUrl===null||j.apiBaseUrl==="")throw Error(`OAuthConnectionProvider: apiBaseUrl is required. Set it to the provider's API origin (e.g. apiBaseUrl: "https://api.figma.com"); connection.fetch only sends the token there.`);_("apiBaseUrl",j.apiBaseUrl),this.config={scopeSeparator:" ",clientAuth:"body",pkce:!0,authorizationParams:{},refreshLeewaySeconds:60,multiple:!1,tokenPlacement:"header",...j,refreshGrantType:j.refreshGrantType??"refresh_token"}}async isTokenRejected(j){let G=this.config.isTokenRejected;if(!G)return j.status===401;return await G(j)}authorizationUrl(j){let G=new URL(this.config.authorizeUrl),Q={...this.config.authorizationParams,response_type:"code",client_id:this.config.clientId,redirect_uri:j.redirectUri,scope:this.config.scopes.join(this.config.scopeSeparator),state:j.state};if(this.config.pkce)Q.code_challenge=j.codeChallenge,Q.code_challenge_method="S256";for(let[V,W]of Object.entries(Q))G.searchParams.set(V,W);return G.toString()}exchangeCode(j){let G=new URLSearchParams({grant_type:"authorization_code",code:j.code,redirect_uri:j.redirectUri});if(this.config.pkce)G.set("code_verifier",j.codeVerifier);return this.tokenRequest(this.config.tokenUrl,G,{scopes:this.config.scopes,refreshToken:null,phase:"exchange"})}refresh(j,G){let Q=new URLSearchParams,V=this.config.refreshGrantType;if(V!==!1&&V!=="")Q.set("grant_type",V);return Q.set("refresh_token",j),this.tokenRequest(this.config.refreshUrl??this.config.tokenUrl,Q,{scopes:G,refreshToken:j,phase:"refresh"})}async revoke(j,G){if(!this.config.revokeUrl)throw new X("revoke_unsupported","This provider has no revokeUrl configured. Use disconnect() to forget the tokens locally.");let Q=new URLSearchParams({token:j,token_type_hint:G}),V;try{V=await fetch(this.config.revokeUrl,this.post(Q))}catch(W){throw new X("revoke_failed","The revocation request failed.",{cause:W})}if(!V.ok)throw new X("revoke_failed",`The provider refused the revocation (HTTP ${V.status}).`,{status:V.status})}post(j){let G={"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"};if(this.config.clientAuth==="basic"){let Q=`${encodeURIComponent(this.config.clientId)}:${encodeURIComponent(this.config.clientSecret)}`;G.Authorization=`Basic ${Buffer.from(Q).toString("base64")}`}else j.set("client_id",this.config.clientId),j.set("client_secret",this.config.clientSecret);return{method:"POST",headers:G,body:j.toString(),redirect:"error"}}async tokenRequest(j,G,Q){let V=Q.phase==="exchange"?"exchange_failed":"refresh_failed",W;try{W=await fetch(j,this.post(G))}catch($){throw new X(V,"The token request failed.",{cause:$})}let Y=await W.json().catch(()=>({}));if(!W.ok||typeof Y.access_token!=="string"||Y.access_token===""){let $=typeof Y.error==="string"&&/^[a-z0-9_]{1,64}$/.test(Y.error)?Y.error:void 0;throw new X(V,`The token endpoint refused the ${Q.phase==="exchange"?"code":"refresh token"} (HTTP ${W.status}${$?`, ${$}`:""}).`,{status:W.status,providerError:$})}let Z=Number(Y.expires_in),B=typeof Y.scope==="string"?Y.scope:void 0,J=Y.user_id_string??Y.user_id??Y.account_id;return{accessToken:Y.access_token,refreshToken:typeof Y.refresh_token==="string"&&Y.refresh_token!==""?Y.refresh_token:Q.refreshToken,tokenType:typeof Y.token_type==="string"?Y.token_type:null,expiresAt:Number.isFinite(Z)&&Z>0?new Date(Date.now()+Z*1000):null,scopes:B!==void 0?B.split(/[\s,]+/).filter(Boolean):Q.scopes,providerAccountId:typeof J==="string"||typeof J==="number"?String(J):null}}}function _(j,G){let Q;try{Q=new URL(String(G))}catch{Q=void 0}if(!Q||Q.protocol!=="https:"&&!(Q.protocol==="http:"&&M(Q.hostname)))throw Error(`OAuthConnectionProvider: ${j} must be an https URL (http only for localhost), got ${JSON.stringify(G)}.`)}function M(j){return j==="localhost"||j==="127.0.0.1"||j==="[::1]"||j==="::1"}class A{options;static token="auth.connections";resolvedStore;refreshing=new Map;fakes;fakeStore;fakeRequests=[];constructor(j){this.options=j;for(let[G,Q]of Object.entries(j.providers)){if(!Q.config.multiple)continue;let V=Object.keys(j.providers).find((W)=>W.startsWith(`${G}${D}`));if(G.includes(D)||V)throw Error(`auth.connections: "${V??G}" cannot be used alongside the multiple-account provider "${G}" ("${D}" separates a provider from an account id in the store).`)}}get providers(){return this.options.providers}get store(){if(this.fakeStore)return this.fakeStore;if(!this.resolvedStore){let j=this.options.store;this.resolvedStore=typeof j==="function"?j():j??new L(U(E).connection(),()=>O())}return this.resolvedStore}provider(j){let G=this.options.providers[j];if(!G){let Q=Object.keys(this.options.providers);throw new X("unknown_provider",`No OAuth connection provider "${j}" in auth.connections`+(Q.length>0?` (configured: ${Q.join(", ")}).`:" (none are configured)."))}return G}async for(j,G,Q){let V=this.provider(G),W=N(j);if(!V.config.multiple){let Z=await this.store.find(W,G);if(!Z||Q!==void 0&&Z.providerAccountId!==Q)return null;return new z(this,Z)}if(Q!==void 0){let Z=await this.store.find(W,T(G,Q))??await this.store.find(W,G);return Z&&Z.providerAccountId===Q?new z(this,Z):null}let[Y]=(await this.list(j,G)).sort((Z,B)=>B.connectedAt.getTime()-Z.connectedAt.getTime());return Y??null}async list(j,G){if(G!==void 0)this.provider(G);return(await this.store.list(N(j))).filter((V)=>{let W=this.providerName(V.provider);return W!==null&&(G===void 0||W===G)}).map((V)=>new z(this,V))}async save(j,G,Q){let V=this.provider(G),W=N(j),{profile:Y,...Z}=Q,B={refreshToken:null,tokenType:null,expiresAt:null,providerAccountId:null,scopes:V.config.scopes,...Z};if(!V.config.multiple)return new z(this,await this.store.save(W,G,B));let J=B.providerAccountId;if(typeof J!=="string"||J==="")throw new X("missing_account_id",`"${G}" allows several accounts per user, so a connection needs the provider's account id (providerAccountId), and the token exchange did not supply one.`);let $=await this.store.save(W,T(G,J),B),H=await this.store.find(W,G);if(H&&H.providerAccountId===J)await this.store.delete(H.id);return new z(this,$)}providerName(j){let G=this.options.providers;if(Object.hasOwn(G,j))return j;let Q=j.indexOf(D);if(Q<=0)return null;let V=j.slice(0,Q);return Object.hasOwn(G,V)&&G[V].config.multiple?V:null}fake(j={}){return this.fakes=new Map(Object.entries(j)),this.fakeStore=new F,this.fakeRequests.length=0,this}restore(){this.fakes=void 0,this.fakeStore=void 0,this.fakeRequests.length=0}get faked(){return this.fakes!==void 0}async send(j,G){if(!this.fakes)return fetch(G);this.fakeRequests.push(G.clone());let Q=this.fakes.get(j);if(!Q)throw Error(`Connections.fake() has no handler for "${j}". Pass one: Connections.fake({ ${j}: (req) => ... }).`);return Q(G)}refresh(j,G="requested"){let Q=this.refreshing.get(j.id);if(Q)return Q;let V=this.withLock(j.id,()=>this.refreshOnce(j,G)).finally(()=>this.refreshing.delete(j.id));return this.refreshing.set(j.id,V),V}async refreshOnce(j,G){let Q=this.providerName(j.provider)??j.provider,V=await this.store.find(j.userId,j.provider);if(!V||V.id!==j.id)throw new K(Q);if(V.revision!==j.revision&&!V.needsReconnect)return V;if(V.needsReconnect)throw new K(Q);let W=this.provider(Q);if(this.faked)return V;let Y=W.config.refreshStrategy;if(!Y&&V.refreshToken===null)throw await this.store.markNeedsReconnect(V.id),new K(Q);let Z;try{Z=Y?await Y({accessToken:V.accessToken,refreshToken:V.refreshToken,scopes:[...V.scopes],expiresAt:V.expiresAt,issuedAt:V.updatedAt,reason:G,providerAccountId:V.providerAccountId}):await W.refresh(V.refreshToken,V.scopes)}catch($){if($ instanceof X&&$.status!==void 0&&$.status>=400&&$.status<500&&$.providerError!=="invalid_client")throw await this.store.markNeedsReconnect(V.id),new K(Q,{cause:$,status:$.status,providerError:$.providerError});throw $}if(Z===null)return V;let B=await this.store.updateTokens(V.id,V.revision,Z);if(B)return B;let J=await this.store.find(V.userId,V.provider);if(!J)throw new K(Q);return J}async withLock(j,G){let Q=U();if(this.faked||!Q.bound(S))return G();let V=await Q.make(S).run(`gemi:oauth-connection:${j}`,{ttl:30000,wait:20000},()=>G());if(!V.acquired)throw new X("refresh_failed","Timed out waiting for another refresh of this connection to finish.");return V.value}}class z{manager;record;constructor(j,G){this.manager=j;this.record=G}get provider(){return this.manager.providerName(this.record.provider)??this.record.provider}get userId(){return this.record.userId}get providerAccountId(){return this.record.providerAccountId}get scopes(){return this.record.scopes}get expiresAt(){return this.record.expiresAt}get needsReconnect(){return this.record.needsReconnect}get connectedAt(){return this.record.createdAt}get status(){if(this.record.needsReconnect)return"needs_reconnect";let j=this.record.expiresAt?.getTime();if(this.record.refreshToken===null&&j!==void 0&&j<=Date.now())return"needs_reconnect";return"connected"}hasScopes(...j){return j.every((G)=>this.record.scopes.includes(G))}async fetch(j,G={}){let Q=this.resolveUrl(j),V=await this.current(),W=await this.send(Q,G,V.accessToken);if(!W.authorized||G.body instanceof ReadableStream)return W.response;if(!await this.manager.provider(this.provider).isTokenRejected(W.response))return W.response;await W.response.body?.cancel().catch(()=>{});let Z=await this.refreshFrom(V,"rejected");return(await this.send(Q,G,Z.accessToken)).response}async accessToken(){return(await this.current()).accessToken}async refresh(){await this.refreshFrom(this.record)}async revoke(){if(!this.manager.faked){let j=this.manager.provider(this.provider);if(this.record.refreshToken!==null)await j.revoke(this.record.refreshToken,"refresh_token");else await j.revoke(this.record.accessToken,"access_token")}await this.manager.store.delete(this.record.id)}async disconnect(){await this.manager.store.delete(this.record.id)}toJSON(){return{provider:this.provider,providerAccountId:this.providerAccountId,scopes:[...this.scopes],expiresAt:this.expiresAt,needsReconnect:this.needsReconnect,status:this.status,connectedAt:this.connectedAt}}[Symbol.for("nodejs.util.inspect.custom")](){return{ProviderConnection:this.toJSON()}}async current(){if(this.record.needsReconnect)throw new K(this.provider);let j=this.manager.provider(this.provider).config.refreshLeewaySeconds*1000,G=this.record.expiresAt?.getTime();if(G!==void 0&&G-Date.now()<=j)return this.refreshFrom(this.record,"expiring");return this.record}async refreshFrom(j,G="requested"){try{this.record=await this.manager.refresh(j,G)}catch(Q){if(Q instanceof K)this.record={...this.record,needsReconnect:!0};throw Q}return this.record}resolveUrl(j){let G=this.manager.provider(this.provider).config.apiBaseUrl,Q;try{Q=new URL(String(j),G)}catch{throw new X("forbidden_url",`connection.fetch was given ${JSON.stringify(String(j))}, which is not a URL.`)}if(Q.origin!==new URL(G).origin)throw new X("forbidden_url",`connection.fetch only sends the ${this.provider} token to ${new URL(G).origin} (apiBaseUrl), not to ${Q.origin}.`);if(Q.protocol!=="https:"&&!(Q.protocol==="http:"&&M(Q.hostname)))throw new X("forbidden_url",`connection.fetch only sends a token over https, not to ${Q.origin}.`);return Q}async send(j,G,Q){let V=j,W=(G.method??"GET").toUpperCase(),Y=G.body,Z=!0;if(G.redirect==="manual"||G.redirect==="error")return{response:await this.manager.send(this.provider,this.request(V,G,W,Y,Q)),authorized:Z};for(let B=0;;B++){let J=this.request(V,{...G,redirect:"manual"},W,Y,Z?Q:null),$=await this.manager.send(this.provider,J),H=$.headers.get("location");if(!b.has($.status)||H===null||B>=5)return{response:$,authorized:Z};await $.body?.cancel().catch(()=>{});let x=new URL(H,V);if(x.origin!==V.origin)Z=!1;if($.status===303||($.status===301||$.status===302)&&W==="POST")W="GET",Y=void 0;V=x}}request(j,G,Q,V,W){let Y=new Headers(G.headers),Z=new URL(j),B=this.manager.provider(this.provider).config.tokenPlacement;if(W===null)Y.delete("authorization");else if(B==="query")Z.searchParams.set("access_token",W);else Y.set("Authorization",`Bearer ${W}`);return new Request(Z,{...G,method:Q,body:V,headers:Y})}}var b=new Set([301,302,303,307,308]),D=":";function T(j,G){return`${j}${D}${G}`}function N(j){let G=typeof j==="object"&&j!==null?j.id:j;if(G===void 0||G===null||G==="")throw TypeError("An OAuth connection belongs to a user: pass the user (or its id).");return String(G)}
-export{F as ei,L as fi,X as gi,K as hi,C as ii,A as ji,z as ki};
+export{F as oi,L as pi,X as qi,K as ri,C as si,A as ti,z as ui};
 
-//# debugId=38A8DEECB767A5F064756E2164756E21
+//# debugId=397D81BCA2A62B6E64756E2164756E21

package/dist/{chunk-rvspb96n.js.map → chunk-rtb64x14.js.map}

@@ -8,6 +8,6 @@
     "import { DatabaseManager } from \"../../database/DatabaseManager\";\nimport { app } from \"../../foundation/app\";\nimport { currentEncrypter } from \"../../orm/encryption\";\nimport { LockManager } from \"../../services/lock/LockManager\";\nimport {\n  type ConnectionRecord,\n  type ConnectionStore,\n  DatabaseConnectionStore,\n  MemoryConnectionStore,\n} from \"./ConnectionStore\";\nimport { OAuthConnectionError, OAuthReconnectRequiredError } from \"./errors\";\nimport {\n  type ConnectionRefreshReason,\n  type OAuthConnectionProvider,\n  type OAuthTokenSet,\n  isLoopback,\n} from \"./OAuthConnectionProvider\";\n\n/** A user, as far as a connection is concerned: anything with an `id`. */\nexport type ConnectionOwner = { id: string | number } | string | number;\n\n/** See `ProviderConnection.status`. */\nexport type ConnectionStatus = \"connected\" | \"needs_reconnect\";\n\n/** What `Connections.fake` answers an API request with. */\nexport type FakeConnectionHandler = (request: Request) => Response | Promise<Response>;\n\nexport interface ConnectionManagerOptions {\n  providers: Record<string, OAuthConnectionProvider>;\n  /** Default: a `DatabaseConnectionStore` on the default database connection. */\n  store?: ConnectionStore | (() => ConnectionStore);\n}\n\n/**\n * The OAuth connections a user has made, and the one place their tokens are\n * read, refreshed and spent. Reached through the `Connections` facade.\n */\nexport class ConnectionManager {\n  static token = \"auth.connections\";\n\n  private resolvedStore: ConnectionStore | undefined;\n  private readonly refreshing = new Map<string, Promise<ConnectionRecord>>();\n  private fakes: Map<string, FakeConnectionHandler> | undefined;\n  private fakeStore: MemoryConnectionStore | undefined;\n  readonly fakeRequests: Request[] = [];\n\n  constructor(private readonly options: ConnectionManagerOptions) {\n    for (const [name, provider] of Object.entries(options.providers)) {\n      if (!provider.config.multiple) continue;\n      // A multiple-account provider's connections are stored under\n      // `<name>:<account id>`, which must not be read as another provider's.\n      const clash = Object.keys(options.providers).find((other) => other.startsWith(`${name}${ACCOUNT_SEPARATOR}`));\n      if (name.includes(ACCOUNT_SEPARATOR) || clash) {\n        throw new Error(\n          `auth.connections: \"${clash ?? name}\" cannot be used alongside the multiple-account provider \"${name}\" ` +\n            `(\"${ACCOUNT_SEPARATOR}\" separates a provider from an account id in the store).`,\n        );\n      }\n    }\n  }\n\n  get providers(): Record<string, OAuthConnectionProvider> {\n    return this.options.providers;\n  }\n\n  /** The store connections are kept in. */\n  get store(): ConnectionStore {\n    if (this.fakeStore) return this.fakeStore;\n    if (!this.resolvedStore) {\n      const configured = this.options.store;\n      this.resolvedStore =\n        typeof configured === \"function\"\n          ? configured()\n          : (configured ??\n            new DatabaseConnectionStore(app(DatabaseManager).connection(), () => currentEncrypter()));\n    }\n    return this.resolvedStore;\n  }\n\n  provider(name: string): OAuthConnectionProvider {\n    const provider = this.options.providers[name];\n    if (!provider) {\n      const known = Object.keys(this.options.providers);\n      throw new OAuthConnectionError(\n        \"unknown_provider\",\n        `No OAuth connection provider \"${name}\" in auth.connections` +\n          (known.length > 0 ? ` (configured: ${known.join(\", \")}).` : \" (none are configured).\"),\n      );\n    }\n    return provider;\n  }\n\n  /**\n   * The user's connection to `provider`, or `null` when they have not\n   * connected it. With `accountId`, only the connection to that account\n   * (`providerAccountId`). For a provider with `multiple: true` and no\n   * `accountId`, the account added most recently; use `list(user,\n   * provider)` for all of them.\n   */\n  async for(user: ConnectionOwner, provider: string, accountId?: string): Promise<ProviderConnection | null> {\n    const config = this.provider(provider);\n    const userId = ownerId(user);\n    if (!config.config.multiple) {\n      const record = await this.store.find(userId, provider);\n      if (!record || (accountId !== undefined && record.providerAccountId !== accountId)) return null;\n      return new ProviderConnection(this, record);\n    }\n    if (accountId !== undefined) {\n      const record =\n        (await this.store.find(userId, storeKey(provider, accountId))) ??\n        // Stored before the provider was switched to `multiple`.\n        (await this.store.find(userId, provider));\n      return record && record.providerAccountId === accountId ? new ProviderConnection(this, record) : null;\n    }\n    const [latest] = (await this.list(user, provider)).sort(\n      (a, b) => b.connectedAt.getTime() - a.connectedAt.getTime(),\n    );\n    return latest ?? null;\n  }\n\n  /** Every connection the user has, or only those to `provider`. */\n  async list(user: ConnectionOwner, provider?: string): Promise<ProviderConnection[]> {\n    if (provider !== undefined) this.provider(provider);\n    const records = await this.store.list(ownerId(user));\n    return records\n      .filter((record) => {\n        const name = this.providerName(record.provider);\n        return name !== null && (provider === undefined || name === provider);\n      })\n      .map((record) => new ProviderConnection(this, record));\n  }\n\n  /**\n   * Stores tokens for the user, replacing any earlier connection to the same\n   * provider — or, for a provider with `multiple: true`, to the same account\n   * (`providerAccountId`, required there). The connect callback calls this;\n   * call it yourself for tokens obtained some other way.\n   */\n  async save(\n    user: ConnectionOwner,\n    provider: string,\n    tokens: Partial<OAuthTokenSet> & { accessToken: string },\n  ): Promise<ProviderConnection> {\n    const config = this.provider(provider);\n    const userId = ownerId(user);\n    const { profile: _profile, ...grant } = tokens;\n    const set: OAuthTokenSet = {\n      refreshToken: null,\n      tokenType: null,\n      expiresAt: null,\n      providerAccountId: null,\n      scopes: config.config.scopes,\n      ...grant,\n    };\n    if (!config.config.multiple) {\n      return new ProviderConnection(this, await this.store.save(userId, provider, set));\n    }\n\n    const accountId = set.providerAccountId;\n    if (typeof accountId !== \"string\" || accountId === \"\") {\n      throw new OAuthConnectionError(\n        \"missing_account_id\",\n        `\"${provider}\" allows several accounts per user, so a connection needs the provider's account id ` +\n          \"(providerAccountId), and the token exchange did not supply one.\",\n      );\n    }\n    const record = await this.store.save(userId, storeKey(provider, accountId), set);\n    // The same account, stored before the provider was switched to `multiple`.\n    const legacy = await this.store.find(userId, provider);\n    if (legacy && legacy.providerAccountId === accountId) await this.store.delete(legacy.id);\n    return new ProviderConnection(this, record);\n  }\n\n  /**\n   * The configured provider a stored connection belongs to: the store key\n   * itself, or `<name>` of a multiple-account provider's `<name>:<account id>`.\n   * `null` for a provider no longer configured.\n   *\n   * @internal\n   */\n  providerName(key: string): string | null {\n    const providers = this.options.providers;\n    if (Object.hasOwn(providers, key)) return key;\n    const at = key.indexOf(ACCOUNT_SEPARATOR);\n    if (at <= 0) return null;\n    const name = key.slice(0, at);\n    return Object.hasOwn(providers, name) && providers[name].config.multiple ? name : null;\n  }\n\n  // --- testing ---------------------------------------------------------------\n\n  /**\n   * Fakes every provider's API: connections live in memory, `fetch` answers\n   * through `handlers[provider]` (recorded in `fakeRequests`), and nothing\n   * reaches a token or revocation endpoint. Returns `this` so a test can\n   * `save` a connection to start from.\n   */\n  fake(handlers: Record<string, FakeConnectionHandler> = {}): this {\n    this.fakes = new Map(Object.entries(handlers));\n    this.fakeStore = new MemoryConnectionStore();\n    this.fakeRequests.length = 0;\n    return this;\n  }\n\n  /** Undoes `fake`. */\n  restore(): void {\n    this.fakes = undefined;\n    this.fakeStore = undefined;\n    this.fakeRequests.length = 0;\n  }\n\n  get faked(): boolean {\n    return this.fakes !== undefined;\n  }\n\n  // --- internals, for ProviderConnection ---------------------------------------\n\n  /** @internal */\n  async send(provider: string, request: Request): Promise<Response> {\n    if (!this.fakes) return fetch(request);\n    this.fakeRequests.push(request.clone());\n    const handler = this.fakes.get(provider);\n    if (!handler) {\n      throw new Error(`Connections.fake() has no handler for \"${provider}\". Pass one: Connections.fake({ ${provider}: (req) => ... }).`);\n    }\n    return handler(request);\n  }\n\n  /**\n   * A record whose access token is not the one at `staleRevision`: refreshed\n   * by this call, or by whoever refreshed it first. Serialised per connection\n   * in this process (concurrent callers share one refresh) and, through the\n   * app's lock store, across processes — a rotating refresh token must be\n   * spent exactly once.\n   *\n   * @internal\n   */\n  refresh(record: ConnectionRecord, reason: ConnectionRefreshReason = \"requested\"): Promise<ConnectionRecord> {\n    const inFlight = this.refreshing.get(record.id);\n    if (inFlight) return inFlight;\n    const task = this.withLock(record.id, () => this.refreshOnce(record, reason)).finally(() =>\n      this.refreshing.delete(record.id),\n    );\n    this.refreshing.set(record.id, task);\n    return task;\n  }\n\n  private async refreshOnce(seen: ConnectionRecord, reason: ConnectionRefreshReason): Promise<ConnectionRecord> {\n    // Re-read under the lock: another process may have refreshed already.\n    const name = this.providerName(seen.provider) ?? seen.provider;\n    const current = await this.store.find(seen.userId, seen.provider);\n    if (!current || current.id !== seen.id) {\n      throw new OAuthReconnectRequiredError(name);\n    }\n    if (current.revision !== seen.revision && !current.needsReconnect) return current;\n    if (current.needsReconnect) throw new OAuthReconnectRequiredError(name);\n\n    const provider = this.provider(name);\n    if (this.faked) return current;\n    const strategy = provider.config.refreshStrategy;\n    if (!strategy && current.refreshToken === null) {\n      await this.store.markNeedsReconnect(current.id);\n      throw new OAuthReconnectRequiredError(name);\n    }\n\n    let tokens: OAuthTokenSet | null;\n    try {\n      tokens = strategy\n        ? await strategy({\n            accessToken: current.accessToken,\n            refreshToken: current.refreshToken,\n            scopes: [...current.scopes],\n            expiresAt: current.expiresAt,\n            issuedAt: current.updatedAt,\n            reason,\n            providerAccountId: current.providerAccountId,\n          })\n        : await provider.refresh(current.refreshToken as string, current.scopes);\n    } catch (error) {\n      // A refusal from the token endpoint is final: the grant is gone. A\n      // network error or a 5xx is not, and leaves the connection alone. Nor\n      // is `invalid_client`: the app's own credentials (or `clientAuth`) are\n      // wrong, reconnecting would fail the same way, and marking would make\n      // every user reconnect once the config is fixed.\n      if (\n        error instanceof OAuthConnectionError &&\n        error.status !== undefined &&\n        error.status >= 400 &&\n        error.status < 500 &&\n        error.providerError !== \"invalid_client\"\n      ) {\n        await this.store.markNeedsReconnect(current.id);\n        throw new OAuthReconnectRequiredError(name, {\n          cause: error,\n          status: error.status,\n          providerError: error.providerError,\n        });\n      }\n      throw error;\n    }\n    // The strategy has nothing to refresh yet: keep the current token.\n    if (tokens === null) return current;\n\n    const updated = await this.store.updateTokens(current.id, current.revision, tokens);\n    if (updated) return updated;\n    // Someone else wrote first (only possible without a shared lock store).\n    const winner = await this.store.find(current.userId, current.provider);\n    if (!winner) throw new OAuthReconnectRequiredError(name);\n    return winner;\n  }\n\n  private async withLock<T>(id: string, fn: () => Promise<T>): Promise<T> {\n    const application = app();\n    if (this.faked || !application.bound(LockManager)) return fn();\n    const result = await application\n      .make(LockManager)\n      .run(`gemi:oauth-connection:${id}`, { ttl: 30_000, wait: 20_000 }, () => fn());\n    if (!result.acquired) {\n      throw new OAuthConnectionError(\n        \"refresh_failed\",\n        \"Timed out waiting for another refresh of this connection to finish.\",\n      );\n    }\n    return result.value as T;\n  }\n}\n\n/**\n * One user's connection to one provider. Never exposes a token as a property,\n * and serialises (`toJSON`, `console.log`) without them.\n */\nexport class ProviderConnection {\n  constructor(\n    private readonly manager: ConnectionManager,\n    private record: ConnectionRecord,\n  ) {}\n\n  /** The provider's name under `auth.connections`. */\n  get provider(): string {\n    return this.manager.providerName(this.record.provider) ?? this.record.provider;\n  }\n  get userId(): string {\n    return this.record.userId;\n  }\n  get providerAccountId(): string | null {\n    return this.record.providerAccountId;\n  }\n  /** The scopes the provider granted. */\n  get scopes(): readonly string[] {\n    return this.record.scopes;\n  }\n  get expiresAt(): Date | null {\n    return this.record.expiresAt;\n  }\n  /** A refresh was refused: the user has to connect again. */\n  get needsReconnect(): boolean {\n    return this.record.needsReconnect;\n  }\n  get connectedAt(): Date {\n    return this.record.createdAt;\n  }\n\n  /**\n   * What to show the user: `\"needs_reconnect\"` when a refresh was refused, or\n   * when the access token has expired and there is no refresh token to renew\n   * it; `\"connected\"` otherwise. Read without calling the provider.\n   */\n  get status(): ConnectionStatus {\n    if (this.record.needsReconnect) return \"needs_reconnect\";\n    const expiresAt = this.record.expiresAt?.getTime();\n    if (this.record.refreshToken === null && expiresAt !== undefined && expiresAt <= Date.now()) {\n      return \"needs_reconnect\";\n    }\n    return \"connected\";\n  }\n\n  /** Whether every one of `scopes` was granted. */\n  hasScopes(...scopes: string[]): boolean {\n    return scopes.every((scope) => this.record.scopes.includes(scope));\n  }\n\n  /**\n   * `fetch`, as the user: adds `Authorization: Bearer <token>`, refreshes the\n   * token first when it is about to expire, and after a 401 refreshes and\n   * retries once. A refresh the provider refuses marks the connection and\n   * throws `OAuthReconnectRequiredError`.\n   *\n   * A path is resolved against the provider's `apiBaseUrl`, and a URL on any\n   * other origin is refused (`OAuthConnectionError`,\n   * `forbidden_url`), so the token only ever goes to the provider. Redirects\n   * are followed by hand: the token is dropped on one that leaves the origin.\n   * A streamed request body cannot be sent twice, so a 401 for one is\n   * returned rather than retried.\n   */\n  async fetch(input: string | URL, init: RequestInit = {}): Promise<Response> {\n    const url = this.resolveUrl(input);\n    const record = await this.current();\n    const first = await this.send(url, init, record.accessToken);\n    // Retry only a refusal of the token itself, not one from where a redirect\n    // led after the token was dropped.\n    if (!first.authorized || init.body instanceof ReadableStream) return first.response;\n    const provider = this.manager.provider(this.provider);\n    if (!(await provider.isTokenRejected(first.response))) return first.response;\n\n    await first.response.body?.cancel().catch(() => {});\n    const refreshed = await this.refreshFrom(record, \"rejected\");\n    return (await this.send(url, init, refreshed.accessToken)).response;\n  }\n\n  /**\n   * A valid access token, refreshed first if it is about to expire — for an\n   * SDK that wants the token itself. Prefer `fetch`, which also retries a 401.\n   */\n  async accessToken(): Promise<string> {\n    return (await this.current()).accessToken;\n  }\n\n  /** Refreshes now, whatever the expiry says. */\n  async refresh(): Promise<void> {\n    await this.refreshFrom(this.record);\n  }\n\n  /**\n   * Revokes the grant at the provider (the refresh token when there is one,\n   * which ends the whole grant, else the access token) and deletes the\n   * connection. If the provider refuses, nothing is deleted and\n   * `OAuthConnectionError` (`revoke_failed`) is thrown — call `disconnect()`\n   * to forget the tokens anyway. A provider without a `revokeUrl` throws\n   * `revoke_unsupported`; use `disconnect()`.\n   */\n  async revoke(): Promise<void> {\n    if (!this.manager.faked) {\n      const provider = this.manager.provider(this.provider);\n      if (this.record.refreshToken !== null) {\n        await provider.revoke(this.record.refreshToken, \"refresh_token\");\n      } else {\n        await provider.revoke(this.record.accessToken, \"access_token\");\n      }\n    }\n    await this.manager.store.delete(this.record.id);\n  }\n\n  /** Forgets the tokens locally without telling the provider. */\n  async disconnect(): Promise<void> {\n    await this.manager.store.delete(this.record.id);\n  }\n\n  toJSON() {\n    return {\n      provider: this.provider,\n      providerAccountId: this.providerAccountId,\n      scopes: [...this.scopes],\n      expiresAt: this.expiresAt,\n      needsReconnect: this.needsReconnect,\n      status: this.status,\n      connectedAt: this.connectedAt,\n    };\n  }\n\n  [Symbol.for(\"nodejs.util.inspect.custom\")]() {\n    return { ProviderConnection: this.toJSON() };\n  }\n\n  private async current(): Promise<ConnectionRecord> {\n    if (this.record.needsReconnect) throw new OAuthReconnectRequiredError(this.provider);\n    const leeway = this.manager.provider(this.provider).config.refreshLeewaySeconds * 1000;\n    const expiresAt = this.record.expiresAt?.getTime();\n    if (expiresAt !== undefined && expiresAt - Date.now() <= leeway) {\n      return this.refreshFrom(this.record, \"expiring\");\n    }\n    return this.record;\n  }\n\n  private async refreshFrom(\n    record: ConnectionRecord,\n    reason: ConnectionRefreshReason = \"requested\",\n  ): Promise<ConnectionRecord> {\n    try {\n      this.record = await this.manager.refresh(record, reason);\n    } catch (error) {\n      if (error instanceof OAuthReconnectRequiredError) {\n        this.record = { ...this.record, needsReconnect: true };\n      }\n      throw error;\n    }\n    return this.record;\n  }\n\n  private resolveUrl(input: string | URL): URL {\n    const base = this.manager.provider(this.provider).config.apiBaseUrl;\n    let url: URL;\n    try {\n      url = new URL(String(input), base);\n    } catch {\n      throw new OAuthConnectionError(\n        \"forbidden_url\",\n        `connection.fetch was given ${JSON.stringify(String(input))}, which is not a URL.`,\n      );\n    }\n    if (url.origin !== new URL(base).origin) {\n      throw new OAuthConnectionError(\n        \"forbidden_url\",\n        `connection.fetch only sends the ${this.provider} token to ${new URL(base).origin} ` +\n          `(apiBaseUrl), not to ${url.origin}.`,\n      );\n    }\n    if (url.protocol !== \"https:\" && !(url.protocol === \"http:\" && isLoopback(url.hostname))) {\n      throw new OAuthConnectionError(\n        \"forbidden_url\",\n        `connection.fetch only sends a token over https, not to ${url.origin}.`,\n      );\n    }\n    return url;\n  }\n\n  private async send(url: URL, init: RequestInit, token: string): Promise<{ response: Response; authorized: boolean }> {\n    let target = url;\n    let method = (init.method ?? \"GET\").toUpperCase();\n    let body = init.body;\n    let authorized = true;\n\n    // Followed by hand (unless the caller asked for \"manual\" or \"error\"), so\n    // the token never follows a redirect to another origin.\n    if (init.redirect === \"manual\" || init.redirect === \"error\") {\n      const response = await this.manager.send(this.provider, this.request(target, init, method, body, token));\n      return { response, authorized };\n    }\n\n    for (let hop = 0; ; hop++) {\n      const request = this.request(target, { ...init, redirect: \"manual\" }, method, body, authorized ? token : null);\n      const response = await this.manager.send(this.provider, request);\n      const location = response.headers.get(\"location\");\n      if (!REDIRECTS.has(response.status) || location === null || hop >= 5) return { response, authorized };\n\n      await response.body?.cancel().catch(() => {});\n      const next = new URL(location, target);\n      if (next.origin !== target.origin) authorized = false;\n      if (response.status === 303 || ((response.status === 301 || response.status === 302) && method === \"POST\")) {\n        method = \"GET\";\n        body = undefined;\n      }\n      target = next;\n    }\n  }\n\n  private request(url: URL, init: RequestInit, method: string, body: RequestInit[\"body\"], token: string | null): Request {\n    const headers = new Headers(init.headers);\n    const target = new URL(url);\n    const placement = this.manager.provider(this.provider).config.tokenPlacement;\n    if (token === null) {\n      headers.delete(\"authorization\");\n    } else if (placement === \"query\") {\n      // Where the provider documents it (Instagram's Graph API). Only ever on\n      // `apiBaseUrl`'s origin: a redirect elsewhere is sent with `token` null.\n      target.searchParams.set(\"access_token\", token);\n    } else {\n      headers.set(\"Authorization\", `Bearer ${token}`);\n    }\n    return new Request(target, { ...init, method, body, headers });\n  }\n}\n\nconst REDIRECTS = new Set([301, 302, 303, 307, 308]);\n\n/** Between a multiple-account provider's name and the account id, in the store's `provider` column. */\nconst ACCOUNT_SEPARATOR = \":\";\n\nfunction storeKey(provider: string, accountId: string): string {\n  return `${provider}${ACCOUNT_SEPARATOR}${accountId}`;\n}\n\nfunction ownerId(user: ConnectionOwner): string {\n  const id = typeof user === \"object\" && user !== null ? user.id : user;\n  if (id === undefined || id === null || id === \"\") {\n    throw new TypeError(\"An OAuth connection belongs to a user: pass the user (or its id).\");\n  }\n  return String(id);\n}\n"
   ],
   "mappings": ";sLAwCO,AAAM,LAAiD,LAC3C,KAAO,IAAI,SAEtB,KAAI,CAAC,EAAgB,EAAkB,CAC3C,QAAW,KAAO,KAAK,KAAK,OAAO,EACjC,GAAI,EAAI,SAAW,GAAU,EAAI,WAAa,EAAU,MAAO,IAAK,CAAI,EAE1E,OAAO,UAGH,KAAI,CAAC,EAAgB,CACzB,MAAO,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,OAAO,CAAC,IAAQ,EAAI,SAAW,CAAM,EAAE,IAAI,CAAC,KAAS,IAAK,CAAI,EAAE,OAG3F,KAAI,CAAC,EAAgB,EAAkB,EAAuB,CAClE,IAAM,EAAW,MAAM,KAAK,KAAK,EAAQ,CAAQ,EAC3C,EAAM,IAAI,KACV,EAAwB,CAC5B,GAAI,GAAU,IAAM,IAAI,aAAa,EACrC,SACA,cACG,EAAW,CAAM,EACpB,eAAgB,GAChB,UAAW,GAAU,UAAY,GAAK,EACtC,UAAW,GAAU,WAAa,EAClC,UAAW,CACb,EAEA,OADA,KAAK,KAAK,IAAI,EAAI,GAAI,CAAG,EAClB,IAAK,CAAI,OAGZ,aAAY,CAAC,EAAY,EAAkB,EAAuB,CACtE,IAAM,EAAM,KAAK,KAAK,IAAI,CAAE,EAC5B,GAAI,CAAC,GAAO,EAAI,WAAa,EAAU,OAAO,KAG9C,IAAM,EAAQ,EAAW,CAAM,EAC/B,EAAM,oBAAsB,EAAI,kBAChC,IAAM,EAAO,IAAK,KAAQ,EAAO,eAAgB,GAAO,SAAU,EAAW,EAAG,UAAW,IAAI,IAAO,EAEtG,OADA,KAAK,KAAK,IAAI,EAAI,CAAI,EACf,IAAK,CAAK,OAGb,mBAAkB,CAAC,EAAY,CACnC,IAAM,EAAM,KAAK,KAAK,IAAI,CAAE,EAC5B,GAAI,EAAK,KAAK,KAAK,IAAI,EAAI,IAAK,EAAK,eAAgB,GAAM,UAAW,IAAI,IAAO,CAAC,OAG9E,OAAM,CAAC,EAAY,CACvB,KAAK,KAAK,OAAO,CAAE,EAEvB,CAaO,MAAM,CAAmD,CAO3C,UANV,MACQ,IACA,QAEjB,WAAW,CACT,EACiB,EACjB,EAA0C,CAAC,EAC3C,CAFiB,iBAGjB,IAAM,EAAQ,EAAQ,OAAS,yBAC/B,GAAI,CAAC,2BAA2B,KAAK,CAAK,EACxC,MAAU,MAAM,+BAA+B,+BAAmC,EAEpF,KAAK,MAAQ,EACb,KAAK,IAAM,EAAW,IACtB,KAAK,QAAU,EAAW,aAItB,YAAW,EAAkB,CACjC,QAAW,KAAa,EAAgC,KAAK,QAAS,KAAK,KAAK,EAC9E,MAAM,KAAK,IAAI,OAAO,CAAS,OAI7B,KAAI,CAAC,EAAgB,EAAkB,CAC3C,IAAM,EAAI,KAAK,IACT,EAAQ,KAAM;AAAA,sBACF,KAAK,KAAK,CAAC,qBAAqB,oBAAyB;AAAA,MAE3E,OAAO,EAAK,GAAK,KAAK,OAAO,EAAK,EAAE,EAAI,UAGpC,KAAI,CAAC,EAAgB,CACzB,IAAM,EAAI,KAAK,IAIf,OAHc,KAAM;AAAA,sBACF,KAAK,KAAK,CAAC,qBAAqB;AAAA,OAEtC,IAAI,CAAC,IAAQ,KAAK,OAAO,CAAG,CAAC,OAGrC,KAAI,CAAC,EAAgB,EAAkB,EAAuB,CAClE,IAAM,EAAI,KAAK,IACT,EAAS,KAAK,OAAO,CAAM,EAC3B,EAAM,KAAK,IAAI,EAEf,EAAS,SACb,EACE,KAAM;AAAA,mBACK,KAAK,KAAK,CAAC;AAAA,sCACQ,EAAO,+BAA+B,EAAO;AAAA,+BACpD,EAAO,gCAAgC,EAAO;AAAA,6BAChD,EAAO,2BAA2B,EAAO;AAAA,2EACK;AAAA,4BAC/C,oBAAyB;AAAA,SAE/C,EAEF,GAAK,MAAM,EAAO,IAAO,EACvB,GAAI,CACF,KAAM;AAAA,wBACU,KAAK,KAAK,CAAC;AAAA;AAAA;AAAA,oBAGf,IAAI,aAAa,MAAM,MAAW,MAAa,EAAO;AAAA,cAC5D,EAAO,WAAW,EAAO,gBAAgB,EAAO,iBAAiB,EAAO;AAAA,cACxE,EAAO,oBAAoB,MAAQ;AAAA,UAEzC,MAAO,EAAO,CAEd,GAAK,MAAM,EAAO,IAAO,EAAG,MAAM,EAItC,IAAM,EAAQ,MAAM,KAAK,KAAK,EAAQ,CAAQ,EAC9C,GAAI,CAAC,EAAO,MAAU,MAAM,yDAAyD,EACrF,OAAO,OAGH,aAAY,CAAC,EAAY,EAAkB,EAAuB,CACtE,IAAM,EAAI,KAAK,IACT,EAAS,KAAK,OAAO,CAAM,EAC3B,EAAS,KAAM;AAAA,eACV,KAAK,KAAK,CAAC;AAAA,2CACiB,EAAO;AAAA,qBAC7B,EAAO,0BAA0B,EAAO;AAAA,4BACjC,EAAO,8BAA8B,EAAO;AAAA,yBAC/C,EAAO;AAAA,yBACP,KAAK,IAAI;AAAA,mBACf,oBAAqB;AAAA,MAEpC,GAAI,EAAS,CAAM,IAAM,EAAG,OAAO,KACnC,IAAM,EAAQ,KAAM,mBAAkB,KAAK,KAAK,CAAC,gBAAgB,IACjE,OAAO,EAAK,GAAK,KAAK,OAAO,EAAK,EAAE,EAAI,UAGpC,mBAAkB,CAAC,EAAY,CACnC,IAAM,EAAI,KAAK,IACf,KAAM,YAAW,KAAK,KAAK,CAAC,2CAA2C,KAAK,IAAI,gBAAgB,SAG5F,OAAM,CAAC,EAAY,CACvB,IAAM,EAAI,KAAK,IACf,KAAM,iBAAgB,KAAK,KAAK,CAAC,gBAAgB,SAQ7C,iBAAgB,CAAC,EAAgC,CAAC,EAAkD,CACxG,IAAM,EAAI,KAAK,IACT,EAAY,KAAK,UAAU,EAC3B,EAAQ,KAAM;AAAA,8DACsC,KAAK,KAAK,CAAC;AAAA,MAEjE,EAAU,EACd,QAAW,KAAO,EAAM,CACtB,IAAM,EAAQ,CAAC,IAAyB,OAAO,IAAU,UAAY,EAAU,kBAAkB,CAAK,EACtG,GAAI,CAAC,EAAM,EAAI,YAAY,GAAK,CAAC,EAAM,EAAI,aAAa,EAAG,SAE3D,GADA,GAAW,EACP,EAAQ,OAAQ,SACpB,IAAM,EAAS,CAAC,IAA0B,IAAU,KAAO,KAAO,EAAU,QAAQ,EAAU,QAAQ,CAAK,CAAC,EAC5G,KAAM;AAAA,iBACK,KAAK,KAAK,CAAC;AAAA,6BACC,EAAO,EAAI,YAAY,sBAAsB,EAAO,EAAI,aAAa;AAAA;AAAA,qBAE7E,EAAI,qBAAqB,OAAO,EAAI,QAAQ;AAAA,QAG7D,MAAO,CAAE,QAAS,EAAK,OAAQ,SAAQ,EAGjC,MAAM,CAAC,EAAuB,CACpC,IAAM,EAAY,KAAK,UAAU,EACjC,MAAO,CACL,kBAAmB,EAAO,kBAC1B,OAAQ,EAAO,OAAO,KAAK,GAAG,EAC9B,YAAa,EAAU,QAAQ,EAAO,WAAW,EACjD,aAAc,EAAO,eAAiB,KAAO,KAAO,EAAU,QAAQ,EAAO,YAAY,EACzF,UAAW,EAAO,UAClB,UAAW,EAAO,YAAc,KAAO,KAAO,EAAO,UAAU,QAAQ,CACzE,EAGM,MAAM,CAAC,EAA+B,CAC5C,IAAM,EAAY,KAAK,UAAU,EACjC,MAAO,CACL,GAAI,OAAO,EAAI,EAAE,EACjB,OAAQ,OAAO,EAAI,OAAO,EAC1B,SAAU,OAAO,EAAI,QAAQ,EAC7B,kBAAmB,EAAI,sBAAwB,KAAO,KAAO,OAAO,EAAI,mBAAmB,EAC3F,OAAQ,OAAO,EAAI,QAAU,EAAE,EAAE,MAAM,GAAG,EAAE,OAAO,OAAO,EAC1D,YAAa,EAAU,QAAQ,OAAO,EAAI,YAAY,CAAC,EACvD,aAAc,EAAI,gBAAkB,KAAO,KAAO,EAAU,QAAQ,OAAO,EAAI,aAAa,CAAC,EAC7F,UAAW,EAAI,aAAe,KAAO,KAAO,OAAO,EAAI,UAAU,EACjE,UAAW,EAAI,aAAe,KAAO,KAAO,IAAI,KAAK,OAAO,EAAI,UAAU,CAAC,EAC3E,eAAgB,OAAO,EAAI,eAAe,IAAM,EAChD,SAAU,OAAO,EAAI,QAAQ,EAC7B,UAAW,IAAI,KAAK,OAAO,EAAI,UAAU,CAAC,EAC1C,UAAW,IAAI,KAAK,OAAO,EAAI,UAAU,CAAC,CAC5C,KAGU,MAAK,EAAG,CAClB,OAAO,KAAK,UAAY,SAAW,KAAK,UAAY,UAG9C,IAAI,CAAC,EAAQ,CACnB,OAAO,EAAE,OAAO,KAAK,MAAQ,KAAK,KAAK,UAAY,IAAI,KAAK,QAAQ,EAExE,CAkBA,SAAS,CAAU,CAAC,EAAuB,CACzC,MAAO,CACL,kBAAmB,EAAO,kBAC1B,OAAQ,CAAC,GAAG,EAAO,MAAM,EACzB,YAAa,EAAO,YACpB,aAAc,EAAO,aACrB,UAAW,EAAO,UAClB,UAAW,EAAO,SACpB,EAGF,SAAS,CAAQ,CAAC,EAAyB,CACzC,IAAM,EAAS,EACf,OAAO,KAAK,IAAI,OAAO,EAAO,OAAS,CAAC,EAAG,OAAO,EAAO,cAAgB,CAAC,CAAC,EAItE,SAAS,CAA+B,CAAC,EAAkB,EAAyB,CACzF,GAAI,IAAY,SAAW,IAAY,UACrC,MAAO,CACL,gCAAgC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAejB;AAAA;AAAA,2DAGjB,EAEF,IAAM,EAAM,IAAY,SAAW,kCAAoC,sBACjE,EACJ,IAAY,SAAW,GAAK;AAAA;AAAA,kBAAwB,6BACtD,MAAO,CACL,+BAA+B;AAAA,MAC7B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kCAY4B;AAAA,GAE9B,sCAAsC,+BAAmC,2BAC3E,ECpVK,MAAM,UAA6B,KAAM,CAKnC,KAJF,OACA,cAET,WAAW,CACA,EACT,EACA,EAAwE,CAAC,EACzE,CACA,MAAM,EAAS,EAAQ,QAAU,OAAY,CAAE,MAAO,EAAQ,KAAM,EAAI,MAAS,EAJxE,YAKT,KAAK,KAAO,uBACZ,KAAK,OAAS,EAAQ,OACtB,KAAK,cAAgB,EAAQ,cAEjC,CASO,MAAM,UAAoC,CAAqB,CAEzD,SADX,WAAW,CACA,EACT,EAAwE,CAAC,EACzE,CACA,MACE,qBACA,OAAO,4FACP,CACF,EAPS,gBAQT,KAAK,KAAO,8BAEhB,CCwHO,MAAM,CAAwB,CAC1B,OAQT,WAAW,CAAC,EAAuC,CACjD,QAAW,IAAO,CAAC,eAAgB,UAAU,EAC3C,EAAc,EAAK,EAAO,EAAI,EAEhC,QAAW,IAAO,CAAC,aAAc,WAAW,EAC1C,GAAI,EAAO,KAAS,OAAW,EAAc,EAAK,EAAO,EAAI,EAM/D,GAAI,EAAO,aAAe,QAAa,EAAO,aAAe,MAAQ,EAAO,aAAe,GACzF,MAAU,MACR,+KAEF,EAEF,EAAc,aAAc,EAAO,UAAU,EAC7C,KAAK,OAAS,CACZ,eAAgB,IAChB,WAAY,OACZ,KAAM,GACN,oBAAqB,CAAC,EACtB,qBAAsB,GACtB,SAAU,GACV,eAAgB,YACb,EACH,iBAAkB,EAAO,kBAAoB,eAC/C,OAOI,gBAAe,CAAC,EAAsC,CAC1D,IAAM,EAAQ,KAAK,OAAO,gBAC1B,GAAI,CAAC,EAAO,OAAO,EAAS,SAAW,IACvC,OAAO,MAAM,EAAM,CAAQ,EAI7B,gBAAgB,CAAC,EAA6E,CAC5F,IAAM,EAAM,IAAI,IAAI,KAAK,OAAO,YAAY,EACtC,EAAiC,IAClC,KAAK,OAAO,oBACf,cAAe,OACf,UAAW,KAAK,OAAO,SACvB,aAAc,EAAK,YACnB,MAAO,KAAK,OAAO,OAAO,KAAK,KAAK,OAAO,cAAc,EACzD,MAAO,EAAK,KACd,EACA,GAAI,KAAK,OAAO,KACd,EAAO,eAAiB,EAAK,cAC7B,EAAO,sBAAwB,OAEjC,QAAY,EAAK,KAAU,OAAO,QAAQ,CAAM,EAAG,EAAI,aAAa,IAAI,EAAK,CAAK,EAClF,OAAO,EAAI,SAAS,EAItB,YAAY,CAAC,EAA2F,CACtG,IAAM,EAAO,IAAI,gBAAgB,CAC/B,WAAY,qBACZ,KAAM,EAAK,KACX,aAAc,EAAK,WACrB,CAAC,EACD,GAAI,KAAK,OAAO,KAAM,EAAK,IAAI,gBAAiB,EAAK,YAAY,EACjE,OAAO,KAAK,aAAa,KAAK,OAAO,SAAU,EAAM,CACnD,OAAQ,KAAK,OAAO,OACpB,aAAc,KACd,MAAO,UACT,CAAC,EAQH,OAAO,CAAC,EAAsB,EAA0C,CACtE,IAAM,EAAO,IAAI,gBACX,EAAY,KAAK,OAAO,iBAC9B,GAAI,IAAc,IAAS,IAAc,GAAI,EAAK,IAAI,aAAc,CAAS,EAE7E,OADA,EAAK,IAAI,gBAAiB,CAAY,EAC/B,KAAK,aAAa,KAAK,OAAO,YAAc,KAAK,OAAO,SAAU,EAAM,CAC7E,SACA,eACA,MAAO,SACT,CAAC,OAIG,OAAM,CAAC,EAAe,EAAuD,CACjF,GAAI,CAAC,KAAK,OAAO,UACf,MAAM,IAAI,EACR,qBACA,2FACF,EAEF,IAAM,EAAO,IAAI,gBAAgB,CAAE,QAAO,gBAAiB,CAAK,CAAC,EAC7D,EACJ,GAAI,CACF,EAAW,MAAM,MAAM,KAAK,OAAO,UAAW,KAAK,KAAK,CAAI,CAAC,EAC7D,MAAO,EAAO,CACd,MAAM,IAAI,EAAqB,gBAAiB,iCAAkC,CAAE,OAAM,CAAC,EAG7F,GAAI,CAAC,EAAS,GACZ,MAAM,IAAI,EACR,gBACA,6CAA6C,EAAS,WACtD,CAAE,OAAQ,EAAS,MAAO,CAC5B,EAII,IAAI,CAAC,EAAoC,CAC/C,IAAM,EAAkC,CACtC,eAAgB,oCAEhB,OAAQ,kBACV,EACA,GAAI,KAAK,OAAO,aAAe,QAAS,CACtC,IAAM,EAAc,GAAG,mBAAmB,KAAK,OAAO,QAAQ,KAAK,mBAAmB,KAAK,OAAO,YAAY,IAC9G,EAAQ,cAAgB,SAAS,OAAO,KAAK,CAAW,EAAE,SAAS,QAAQ,IAE3E,OAAK,IAAI,YAAa,KAAK,OAAO,QAAQ,EAC1C,EAAK,IAAI,gBAAiB,KAAK,OAAO,YAAY,EAEpD,MAAO,CAAE,OAAQ,OAAQ,UAAS,KAAM,EAAK,SAAS,EAAG,SAAU,OAAQ,OAG/D,aAAY,CACxB,EACA,EACA,EACwB,CACxB,IAAM,EAAU,EAAS,QAAU,WAAa,kBAAoB,iBAChE,EACJ,GAAI,CACF,EAAW,MAAM,MAAM,EAAU,KAAK,KAAK,CAAI,CAAC,EAChD,MAAO,EAAO,CACd,MAAM,IAAI,EAAqB,EAAS,4BAA6B,CAAE,OAAM,CAAC,EAGhF,IAAM,EAAW,MAAM,EAAS,KAAK,EAAE,MAAM,KAAO,CAAC,EAAE,EACvD,GAAI,CAAC,EAAS,IAAM,OAAO,EAAQ,eAAiB,UAAY,EAAQ,eAAiB,GAAI,CAE3F,IAAM,EAAO,OAAO,EAAQ,QAAU,UAAY,oBAAoB,KAAK,EAAQ,KAAK,EAAI,EAAQ,MAAQ,OAC5G,MAAM,IAAI,EACR,EACA,kCAAkC,EAAS,QAAU,WAAa,OAAS,yBAChE,EAAS,SAAS,EAAO,KAAK,IAAS,OAClD,CAAE,OAAQ,EAAS,OAAQ,cAAe,CAAK,CACjD,EAGF,IAAM,EAAY,OAAO,EAAQ,UAAU,EACrC,EAAQ,OAAO,EAAQ,QAAU,SAAW,EAAQ,MAAQ,OAG5D,EAAY,EAAQ,gBAAkB,EAAQ,SAAW,EAAQ,WACvE,MAAO,CACL,YAAa,EAAQ,aACrB,aACE,OAAO,EAAQ,gBAAkB,UAAY,EAAQ,gBAAkB,GACnE,EAAQ,cACR,EAAS,aACf,UAAW,OAAO,EAAQ,aAAe,SAAW,EAAQ,WAAa,KACzE,UAAW,OAAO,SAAS,CAAS,GAAK,EAAY,EAAI,IAAI,KAAK,KAAK,IAAI,EAAI,EAAY,IAAI,EAAI,KACnG,OAAQ,IAAU,OAAY,EAAM,MAAM,QAAQ,EAAE,OAAO,OAAO,EAAI,EAAS,OAC/E,kBACE,OAAO,IAAc,UAAY,OAAO,IAAc,SAAW,OAAO,CAAS,EAAI,IACzF,EAEJ,CAEA,SAAS,CAAa,CAAC,EAAa,EAAsB,CACxD,IAAI,EACJ,GAAI,CACF,EAAM,IAAI,IAAI,OAAO,CAAK,CAAC,EAC3B,KAAM,CACN,EAAM,OAER,GAAI,CAAC,GAAQ,EAAI,WAAa,UAAY,EAAE,EAAI,WAAa,SAAW,EAAW,EAAI,QAAQ,GAC7F,MAAU,MACR,4BAA4B,yDAA2D,KAAK,UAAU,CAAK,IAC7G,EAIG,SAAS,CAAU,CAAC,EAA2B,CACpD,OAAO,IAAa,aAAe,IAAa,aAAe,IAAa,SAAW,IAAa,MC/U/F,MAAM,CAAkB,CASA,cARtB,OAAQ,mBAEP,cACS,WAAa,IAAI,IAC1B,MACA,UACC,aAA0B,CAAC,EAEpC,WAAW,CAAkB,EAAmC,CAAnC,eAC3B,QAAY,EAAM,KAAa,OAAO,QAAQ,EAAQ,SAAS,EAAG,CAChE,GAAI,CAAC,EAAS,OAAO,SAAU,SAG/B,IAAM,EAAQ,OAAO,KAAK,EAAQ,SAAS,EAAE,KAAK,CAAC,IAAU,EAAM,WAAW,GAAG,IAAO,GAAmB,CAAC,EAC5G,GAAI,EAAK,SAAS,CAAiB,GAAK,EACtC,MAAU,MACR,sBAAsB,GAAS,8DAAiE,QACzF,2DACT,MAKF,UAAS,EAA4C,CACvD,OAAO,KAAK,QAAQ,aAIlB,MAAK,EAAoB,CAC3B,GAAI,KAAK,UAAW,OAAO,KAAK,UAChC,GAAI,CAAC,KAAK,cAAe,CACvB,IAAM,EAAa,KAAK,QAAQ,MAChC,KAAK,cACH,OAAO,IAAe,WAClB,EAAW,EACV,GACD,IAAI,EAAwB,EAAI,CAAe,EAAE,WAAW,EAAG,IAAM,EAAiB,CAAC,EAE/F,OAAO,KAAK,cAGd,QAAQ,CAAC,EAAuC,CAC9C,IAAM,EAAW,KAAK,QAAQ,UAAU,GACxC,GAAI,CAAC,EAAU,CACb,IAAM,EAAQ,OAAO,KAAK,KAAK,QAAQ,SAAS,EAChD,MAAM,IAAI,EACR,mBACA,iCAAiC,0BAC9B,EAAM,OAAS,EAAI,iBAAiB,EAAM,KAAK,IAAI,MAAQ,0BAChE,EAEF,OAAO,OAUH,IAAG,CAAC,EAAuB,EAAkB,EAAwD,CACzG,IAAM,EAAS,KAAK,SAAS,CAAQ,EAC/B,EAAS,EAAQ,CAAI,EAC3B,GAAI,CAAC,EAAO,OAAO,SAAU,CAC3B,IAAM,EAAS,MAAM,KAAK,MAAM,KAAK,EAAQ,CAAQ,EACrD,GAAI,CAAC,GAAW,IAAc,QAAa,EAAO,oBAAsB,EAAY,OAAO,KAC3F,OAAO,IAAI,EAAmB,KAAM,CAAM,EAE5C,GAAI,IAAc,OAAW,CAC3B,IAAM,EACH,MAAM,KAAK,MAAM,KAAK,EAAQ,EAAS,EAAU,CAAS,CAAC,GAE3D,MAAM,KAAK,MAAM,KAAK,EAAQ,CAAQ,EACzC,OAAO,GAAU,EAAO,oBAAsB,EAAY,IAAI,EAAmB,KAAM,CAAM,EAAI,KAEnG,IAAO,IAAW,MAAM,KAAK,KAAK,EAAM,CAAQ,GAAG,KACjD,CAAC,EAAG,IAAM,EAAE,YAAY,QAAQ,EAAI,EAAE,YAAY,QAAQ,CAC5D,EACA,OAAO,GAAU,UAIb,KAAI,CAAC,EAAuB,EAAkD,CAClF,GAAI,IAAa,OAAW,KAAK,SAAS,CAAQ,EAElD,OADgB,MAAM,KAAK,MAAM,KAAK,EAAQ,CAAI,CAAC,GAEhD,OAAO,CAAC,IAAW,CAClB,IAAM,EAAO,KAAK,aAAa,EAAO,QAAQ,EAC9C,OAAO,IAAS,OAAS,IAAa,QAAa,IAAS,GAC7D,EACA,IAAI,CAAC,IAAW,IAAI,EAAmB,KAAM,CAAM,CAAC,OASnD,KAAI,CACR,EACA,EACA,EAC6B,CAC7B,IAAM,EAAS,KAAK,SAAS,CAAQ,EAC/B,EAAS,EAAQ,CAAI,GACnB,QAAS,KAAa,GAAU,EAClC,EAAqB,CACzB,aAAc,KACd,UAAW,KACX,UAAW,KACX,kBAAmB,KACnB,OAAQ,EAAO,OAAO,UACnB,CACL,EACA,GAAI,CAAC,EAAO,OAAO,SACjB,OAAO,IAAI,EAAmB,KAAM,MAAM,KAAK,MAAM,KAAK,EAAQ,EAAU,CAAG,CAAC,EAGlF,IAAM,EAAY,EAAI,kBACtB,GAAI,OAAO,IAAc,UAAY,IAAc,GACjD,MAAM,IAAI,EACR,qBACA,IAAI,sJAEN,EAEF,IAAM,EAAS,MAAM,KAAK,MAAM,KAAK,EAAQ,EAAS,EAAU,CAAS,EAAG,CAAG,EAEzE,EAAS,MAAM,KAAK,MAAM,KAAK,EAAQ,CAAQ,EACrD,GAAI,GAAU,EAAO,oBAAsB,EAAW,MAAM,KAAK,MAAM,OAAO,EAAO,EAAE,EACvF,OAAO,IAAI,EAAmB,KAAM,CAAM,EAU5C,YAAY,CAAC,EAA4B,CACvC,IAAM,EAAY,KAAK,QAAQ,UAC/B,GAAI,OAAO,OAAO,EAAW,CAAG,EAAG,OAAO,EAC1C,IAAM,EAAK,EAAI,QAAQ,CAAiB,EACxC,GAAI,GAAM,EAAG,OAAO,KACpB,IAAM,EAAO,EAAI,MAAM,EAAG,CAAE,EAC5B,OAAO,OAAO,OAAO,EAAW,CAAI,GAAK,EAAU,GAAM,OAAO,SAAW,EAAO,KAWpF,IAAI,CAAC,EAAkD,CAAC,EAAS,CAI/D,OAHA,KAAK,MAAQ,IAAI,IAAI,OAAO,QAAQ,CAAQ,CAAC,EAC7C,KAAK,UAAY,IAAI,EACrB,KAAK,aAAa,OAAS,EACpB,KAIT,OAAO,EAAS,CACd,KAAK,MAAQ,OACb,KAAK,UAAY,OACjB,KAAK,aAAa,OAAS,KAGzB,MAAK,EAAY,CACnB,OAAO,KAAK,QAAU,YAMlB,KAAI,CAAC,EAAkB,EAAqC,CAChE,GAAI,CAAC,KAAK,MAAO,OAAO,MAAM,CAAO,EACrC,KAAK,aAAa,KAAK,EAAQ,MAAM,CAAC,EACtC,IAAM,EAAU,KAAK,MAAM,IAAI,CAAQ,EACvC,GAAI,CAAC,EACH,MAAU,MAAM,0CAA0C,oCAA2C,qBAA4B,EAEnI,OAAO,EAAQ,CAAO,EAYxB,OAAO,CAAC,EAA0B,EAAkC,YAAwC,CAC1G,IAAM,EAAW,KAAK,WAAW,IAAI,EAAO,EAAE,EAC9C,GAAI,EAAU,OAAO,EACrB,IAAM,EAAO,KAAK,SAAS,EAAO,GAAI,IAAM,KAAK,YAAY,EAAQ,CAAM,CAAC,EAAE,QAAQ,IACpF,KAAK,WAAW,OAAO,EAAO,EAAE,CAClC,EAEA,OADA,KAAK,WAAW,IAAI,EAAO,GAAI,CAAI,EAC5B,OAGK,YAAW,CAAC,EAAwB,EAA4D,CAE5G,IAAM,EAAO,KAAK,aAAa,EAAK,QAAQ,GAAK,EAAK,SAChD,EAAU,MAAM,KAAK,MAAM,KAAK,EAAK,OAAQ,EAAK,QAAQ,EAChE,GAAI,CAAC,GAAW,EAAQ,KAAO,EAAK,GAClC,MAAM,IAAI,EAA4B,CAAI,EAE5C,GAAI,EAAQ,WAAa,EAAK,UAAY,CAAC,EAAQ,eAAgB,OAAO,EAC1E,GAAI,EAAQ,eAAgB,MAAM,IAAI,EAA4B,CAAI,EAEtE,IAAM,EAAW,KAAK,SAAS,CAAI,EACnC,GAAI,KAAK,MAAO,OAAO,EACvB,IAAM,EAAW,EAAS,OAAO,gBACjC,GAAI,CAAC,GAAY,EAAQ,eAAiB,KAExC,MADA,MAAM,KAAK,MAAM,mBAAmB,EAAQ,EAAE,EACxC,IAAI,EAA4B,CAAI,EAG5C,IAAI,EACJ,GAAI,CACF,EAAS,EACL,MAAM,EAAS,CACb,YAAa,EAAQ,YACrB,aAAc,EAAQ,aACtB,OAAQ,CAAC,GAAG,EAAQ,MAAM,EAC1B,UAAW,EAAQ,UACnB,SAAU,EAAQ,UAClB,SACA,kBAAmB,EAAQ,iBAC7B,CAAC,EACD,MAAM,EAAS,QAAQ,EAAQ,aAAwB,EAAQ,MAAM,EACzE,MAAO,EAAO,CAMd,GACE,aAAiB,GACjB,EAAM,SAAW,QACjB,EAAM,QAAU,KAChB,EAAM,OAAS,KACf,EAAM,gBAAkB,iBAGxB,MADA,MAAM,KAAK,MAAM,mBAAmB,EAAQ,EAAE,EACxC,IAAI,EAA4B,EAAM,CAC1C,MAAO,EACP,OAAQ,EAAM,OACd,cAAe,EAAM,aACvB,CAAC,EAEH,MAAM,EAGR,GAAI,IAAW,KAAM,OAAO,EAE5B,IAAM,EAAU,MAAM,KAAK,MAAM,aAAa,EAAQ,GAAI,EAAQ,SAAU,CAAM,EAClF,GAAI,EAAS,OAAO,EAEpB,IAAM,EAAS,MAAM,KAAK,MAAM,KAAK,EAAQ,OAAQ,EAAQ,QAAQ,EACrE,GAAI,CAAC,EAAQ,MAAM,IAAI,EAA4B,CAAI,EACvD,OAAO,OAGK,SAAW,CAAC,EAAY,EAAkC,CACtE,IAAM,EAAc,EAAI,EACxB,GAAI,KAAK,OAAS,CAAC,EAAY,MAAM,CAAW,EAAG,OAAO,EAAG,EAC7D,IAAM,EAAS,MAAM,EAClB,KAAK,CAAW,EAChB,IAAI,yBAAyB,IAAM,CAAE,IAAK,MAAQ,KAAM,KAAO,EAAG,IAAM,EAAG,CAAC,EAC/E,GAAI,CAAC,EAAO,SACV,MAAM,IAAI,EACR,iBACA,qEACF,EAEF,OAAO,EAAO,MAElB,CAMO,MAAM,CAAmB,CAEX,QACT,OAFV,WAAW,CACQ,EACT,EACR,CAFiB,eACT,iBAIN,SAAQ,EAAW,CACrB,OAAO,KAAK,QAAQ,aAAa,KAAK,OAAO,QAAQ,GAAK,KAAK,OAAO,YAEpE,OAAM,EAAW,CACnB,OAAO,KAAK,OAAO,UAEjB,kBAAiB,EAAkB,CACrC,OAAO,KAAK,OAAO,qBAGjB,OAAM,EAAsB,CAC9B,OAAO,KAAK,OAAO,UAEjB,UAAS,EAAgB,CAC3B,OAAO,KAAK,OAAO,aAGjB,eAAc,EAAY,CAC5B,OAAO,KAAK,OAAO,kBAEjB,YAAW,EAAS,CACtB,OAAO,KAAK,OAAO,aAQjB,OAAM,EAAqB,CAC7B,GAAI,KAAK,OAAO,eAAgB,MAAO,kBACvC,IAAM,EAAY,KAAK,OAAO,WAAW,QAAQ,EACjD,GAAI,KAAK,OAAO,eAAiB,MAAQ,IAAc,QAAa,GAAa,KAAK,IAAI,EACxF,MAAO,kBAET,MAAO,YAIT,SAAS,IAAI,EAA2B,CACtC,OAAO,EAAO,MAAM,CAAC,IAAU,KAAK,OAAO,OAAO,SAAS,CAAK,CAAC,OAgB7D,MAAK,CAAC,EAAqB,EAAoB,CAAC,EAAsB,CAC1E,IAAM,EAAM,KAAK,WAAW,CAAK,EAC3B,EAAS,MAAM,KAAK,QAAQ,EAC5B,EAAQ,MAAM,KAAK,KAAK,EAAK,EAAM,EAAO,WAAW,EAG3D,GAAI,CAAC,EAAM,YAAc,EAAK,gBAAgB,eAAgB,OAAO,EAAM,SAE3E,GAAI,CAAE,MADW,KAAK,QAAQ,SAAS,KAAK,QAAQ,EAC/B,gBAAgB,EAAM,QAAQ,EAAI,OAAO,EAAM,SAEpE,MAAM,EAAM,SAAS,MAAM,OAAO,EAAE,MAAM,IAAM,EAAE,EAClD,IAAM,EAAY,MAAM,KAAK,YAAY,EAAQ,UAAU,EAC3D,OAAQ,MAAM,KAAK,KAAK,EAAK,EAAM,EAAU,WAAW,GAAG,cAOvD,YAAW,EAAoB,CACnC,OAAQ,MAAM,KAAK,QAAQ,GAAG,iBAI1B,QAAO,EAAkB,CAC7B,MAAM,KAAK,YAAY,KAAK,MAAM,OAW9B,OAAM,EAAkB,CAC5B,GAAI,CAAC,KAAK,QAAQ,MAAO,CACvB,IAAM,EAAW,KAAK,QAAQ,SAAS,KAAK,QAAQ,EACpD,GAAI,KAAK,OAAO,eAAiB,KAC/B,MAAM,EAAS,OAAO,KAAK,OAAO,aAAc,eAAe,EAE/D,WAAM,EAAS,OAAO,KAAK,OAAO,YAAa,cAAc,EAGjE,MAAM,KAAK,QAAQ,MAAM,OAAO,KAAK,OAAO,EAAE,OAI1C,WAAU,EAAkB,CAChC,MAAM,KAAK,QAAQ,MAAM,OAAO,KAAK,OAAO,EAAE,EAGhD,MAAM,EAAG,CACP,MAAO,CACL,SAAU,KAAK,SACf,kBAAmB,KAAK,kBACxB,OAAQ,CAAC,GAAG,KAAK,MAAM,EACvB,UAAW,KAAK,UAChB,eAAgB,KAAK,eACrB,OAAQ,KAAK,OACb,YAAa,KAAK,WACpB,GAGD,OAAO,IAAI,4BAA4B,EAAE,EAAG,CAC3C,MAAO,CAAE,mBAAoB,KAAK,OAAO,CAAE,OAG/B,QAAO,EAA8B,CACjD,GAAI,KAAK,OAAO,eAAgB,MAAM,IAAI,EAA4B,KAAK,QAAQ,EACnF,IAAM,EAAS,KAAK,QAAQ,SAAS,KAAK,QAAQ,EAAE,OAAO,qBAAuB,KAC5E,EAAY,KAAK,OAAO,WAAW,QAAQ,EACjD,GAAI,IAAc,QAAa,EAAY,KAAK,IAAI,GAAK,EACvD,OAAO,KAAK,YAAY,KAAK,OAAQ,UAAU,EAEjD,OAAO,KAAK,YAGA,YAAW,CACvB,EACA,EAAkC,YACP,CAC3B,GAAI,CACF,KAAK,OAAS,MAAM,KAAK,QAAQ,QAAQ,EAAQ,CAAM,EACvD,MAAO,EAAO,CACd,GAAI,aAAiB,EACnB,KAAK,OAAS,IAAK,KAAK,OAAQ,eAAgB,EAAK,EAEvD,MAAM,EAER,OAAO,KAAK,OAGN,UAAU,CAAC,EAA0B,CAC3C,IAAM,EAAO,KAAK,QAAQ,SAAS,KAAK,QAAQ,EAAE,OAAO,WACrD,EACJ,GAAI,CACF,EAAM,IAAI,IAAI,OAAO,CAAK,EAAG,CAAI,EACjC,KAAM,CACN,MAAM,IAAI,EACR,gBACA,8BAA8B,KAAK,UAAU,OAAO,CAAK,CAAC,wBAC5D,EAEF,GAAI,EAAI,SAAW,IAAI,IAAI,CAAI,EAAE,OAC/B,MAAM,IAAI,EACR,gBACA,mCAAmC,KAAK,qBAAqB,IAAI,IAAI,CAAI,EAAE,+BACjD,EAAI,SAChC,EAEF,GAAI,EAAI,WAAa,UAAY,EAAE,EAAI,WAAa,SAAW,EAAW,EAAI,QAAQ,GACpF,MAAM,IAAI,EACR,gBACA,0DAA0D,EAAI,SAChE,EAEF,OAAO,OAGK,KAAI,CAAC,EAAU,EAAmB,EAAqE,CACnH,IAAI,EAAS,EACT,GAAU,EAAK,QAAU,OAAO,YAAY,EAC5C,EAAO,EAAK,KACZ,EAAa,GAIjB,GAAI,EAAK,WAAa,UAAY,EAAK,WAAa,QAElD,MAAO,CAAE,SADQ,MAAM,KAAK,QAAQ,KAAK,KAAK,SAAU,KAAK,QAAQ,EAAQ,EAAM,EAAQ,EAAM,CAAK,CAAC,EACpF,YAAW,EAGhC,QAAS,EAAM,GAAK,IAAO,CACzB,IAAM,EAAU,KAAK,QAAQ,EAAQ,IAAK,EAAM,SAAU,QAAS,EAAG,EAAQ,EAAM,EAAa,EAAQ,IAAI,EACvG,EAAW,MAAM,KAAK,QAAQ,KAAK,KAAK,SAAU,CAAO,EACzD,EAAW,EAAS,QAAQ,IAAI,UAAU,EAChD,GAAI,CAAC,EAAU,IAAI,EAAS,MAAM,GAAK,IAAa,MAAQ,GAAO,EAAG,MAAO,CAAE,WAAU,YAAW,EAEpG,MAAM,EAAS,MAAM,OAAO,EAAE,MAAM,IAAM,EAAE,EAC5C,IAAM,EAAO,IAAI,IAAI,EAAU,CAAM,EACrC,GAAI,EAAK,SAAW,EAAO,OAAQ,EAAa,GAChD,GAAI,EAAS,SAAW,MAAS,EAAS,SAAW,KAAO,EAAS,SAAW,MAAQ,IAAW,OACjG,EAAS,MACT,EAAO,OAET,EAAS,GAIL,OAAO,CAAC,EAAU,EAAmB,EAAgB,EAA2B,EAA+B,CACrH,IAAM,EAAU,IAAI,QAAQ,EAAK,OAAO,EAClC,EAAS,IAAI,IAAI,CAAG,EACpB,EAAY,KAAK,QAAQ,SAAS,KAAK,QAAQ,EAAE,OAAO,eAC9D,GAAI,IAAU,KACZ,EAAQ,OAAO,eAAe,EACzB,QAAI,IAAc,QAGvB,EAAO,aAAa,IAAI,eAAgB,CAAK,EAE7C,OAAQ,IAAI,gBAAiB,UAAU,GAAO,EAEhD,OAAO,IAAI,QAAQ,EAAQ,IAAK,EAAM,SAAQ,OAAM,SAAQ,CAAC,EAEjE,CAEA,IAAM,EAAY,IAAI,IAAI,CAAC,IAAK,IAAK,IAAK,IAAK,GAAG,CAAC,EAG7C,EAAoB,IAE1B,SAAS,CAAQ,CAAC,EAAkB,EAA2B,CAC7D,MAAO,GAAG,IAAW,IAAoB,IAG3C,SAAS,CAAO,CAAC,EAA+B,CAC9C,IAAM,EAAK,OAAO,IAAS,UAAY,IAAS,KAAO,EAAK,GAAK,EACjE,GAAI,IAAO,QAAa,IAAO,MAAQ,IAAO,GAC5C,MAAU,UAAU,mEAAmE,EAEzF,OAAO,OAAO,CAAE",
-  "debugId": "38A8DEECB767A5F064756E2164756E21",
+  "debugId": "397D81BCA2A62B6E64756E2164756E21",
   "names": []
 }

package/dist/{chunk-ayfjjgv2.js → chunk-rvdsaqdv.js}

@@ -1,5 +1,5 @@
 // @bun
-import{fa as k,ga as p}from"./chunk-zq5375wd.js";function D(){return{name:"gemi-custom-request",setup(x){x.onLoad({filter:k},async(j)=>{let y=await Bun.file(j.path).text();return{contents:await p(y),loader:j.path.endsWith(".tsx")?"tsx":"ts"}})}}}
+import{fa as k,ga as p}from"./chunk-ewv1m1sv.js";function D(){return{name:"gemi-custom-request",setup(x){x.onLoad({filter:k},async(j)=>{let y=await Bun.file(j.path).text();return{contents:await p(y),loader:j.path.endsWith(".tsx")?"tsx":"ts"}})}}}
 export{D as ea};
 
 //# debugId=92CE5F11E40AB21B64756E2164756E21

package/dist/{chunk-7vrrgxwm.js → chunk-s0kns9q1.js}

@@ -1,5 +1,5 @@
 // @bun
-import{Dd as a0,Id as r0}from"./chunk-h8w9mzjj.js";import{Nh as s0,Ph as p,Qh as LZ,Sh as u0,fh as SZ,gh as o}from"./chunk-6wgh7nk6.js";import{di as g0}from"./chunk-tabsxzg9.js";import{hk as l}from"./chunk-6gwxvmjv.js";class pZ{spent=new Map;sweepAt=1024;async consume(Z,$){return this.consumeSync(Z,$)}consumeSync(Z,$,Q=Date.now()){if(this.spent.size>=this.sweepAt)this.sweep(Q);let B=this.spent.get(Z);if(B!==void 0&&B>Q)return!1;return this.spent.set(Z,$),!0}get size(){return this.spent.size}sweep(Z){for(let[$,Q]of this.spent)if(Q<=Z)this.spent.delete($);this.sweepAt=Math.max(1024,this.spent.size*2)}}class B1{injectedClient;prefix;constructor(Z={}){this.injectedClient=Z.client,this.prefix=Z.prefix??"gemi:ai:nonce"}async consume(Z,$){let Q=Math.max(1,Math.ceil($-Date.now()));return await this.client.send("SET",[`${this.prefix}:${Z}`,"1","PX",String(Q),"NX"])==="OK"}get client(){if(this.injectedClient)return this.injectedClient;let Z=l(),$=Z.bound(LZ)?Z.make(LZ).client:void 0;if(!$)throw Error("RedisNonceStore could not reach the Redis client. Register RedisServiceProvider on your application, or pass a client: new RedisNonceStore({ client }).");return $}}var DZ=new pZ;class P extends Error{retryable;constructor(Z,$={}){super(Z,$.cause!==void 0?{cause:$.cause}:void 0);this.name="ToolError",this.retryable=$.retryable??!0}}var X1={provider_error:"The model provider returned an error.",rate_limited:"The model provider is rate limiting requests. Try again shortly.",context_length_exceeded:"The conversation is too long for the model.",content_filtered:"The model provider's content filter blocked this request.",invalid_tool_input:"The model provider rejected the request.",tool_error:"A tool failed.",unknown:"The run failed unexpectedly."};function n(Z,$){if($.source==="tool"){if($.cause instanceof P)return Z;return{...Z,message:`The tool "${$.toolName}" failed with an unexpected error.`}}let Q=X1[Z.code];return Q===void 0?Z:{...Z,message:Q}}function mZ(Z,$,Q,B){let X;try{X=(Z??n)($,Q)}catch(Y){B(Y),X=n($,Q)}return{code:X.code,message:X.message,...X.toolCallId!==void 0?{toolCallId:X.toolCallId}:{},retryable:X.retryable}}var iZ=new WeakMap;function lZ(Z,$){if(Z!==$)iZ.set(Z,$)}function C4(Z){return iZ.get(Z)??Z}class PZ extends P{id;code="attachment_not_found";constructor(Z){super(`No attachment ${Z}.`);this.id=Z;this.name="AttachmentNotFoundError"}}class w extends P{code="invalid_attachment_scope";constructor(Z){super(Z);this.name="InvalidAttachmentScopeError"}}function UZ(Z){if(!Z||typeof Z.key!=="string"||Z.key.length===0)throw new w("An attachment scope needs a non-empty key. Return `null` from `attachmentScope()` for a request that has no subject \u2014 an empty key is a bucket every caller shares.");return Z}var CZ="gemi_att_";function Y1(){return`${CZ}${crypto.randomUUID()}`}class OZ{store;storage;scope;constructor(Z,$,Q){this.store=Z;this.storage=$;this.scope=Q;UZ(Q)}get scopeKey(){return this.scope.key}async get(Z){let $=await this.store.find(this.scope,Z);if(!$||$.scopeKey!==this.scope.key)throw new PZ(Z);return $}async read(Z){return await this.readRecord(Z,await this.get(Z))}async readRecord(Z,$){if(!$.objectName)throw new PZ(Z);return await this.storage.read({name:$.objectName})}async file(Z){let $=await this.get(Z),B=(await this.readRecord(Z,$)).body,X=B instanceof Blob?B:B?await new Response(B).blob():new Blob([]);return new File([X],$.name,{type:$.mimeType})}async put(Z,$={}){let Q=Y1(),B=$.mimeType??Z.type??"",X=$.name??(Z instanceof File?Z.name:Q),Y=await this.storage.put({name:G1(Q,X),body:Z,contentType:B||void 0}),G={id:Q,scopeKey:this.scope.key,objectName:Y,name:X,mimeType:B||"application/octet-stream",size:Z.size,createdAt:new Date().toISOString(),destination:$.fileId?"both":"storage",...$.fileId?{fileId:$.fileId}:{}};return await this.store.put(this.scope,G),G}}function G1(Z,$){let Q=/\.([A-Za-z0-9]{1,8})$/.exec($);return`attachments/${Z}${Q?`.${Q[1].toLowerCase()}`:""}`}class nZ{rows=new Map;async put(Z,$){UZ(Z),this.rows.set($.id,{...$,scopeKey:Z.key})}async find(Z,$){UZ(Z);let Q=this.rows.get($);if(!Q||Q.scopeKey!==Z.key)return null;return Q}get size(){return this.rows.size}}var oZ=new nZ;class jZ{jobs=new Map;async create(Z){if(this.jobs.has(Z.id))throw Error(`A background job with the id ${Z.id} already exists.`);let $=Date.now(),{deadlineMs:Q,...B}=Z,X={...structuredClone(B),state:"running",createdAt:$,updatedAt:$,deadlineAt:$+Q};return this.jobs.set(X.id,X),this.trim(X.threadId),structuredClone(X)}async get(Z){let $=this.jobs.get(Z);return $?structuredClone($):null}async listForThread(Z,$={}){let Q=[];for(let B of this.jobs.values()){if(B.threadId!==Z)continue;if($.states&&!$.states.includes(B.state))continue;Q.push(B)}return Q.sort(tZ),($.limit===void 0?Q:Q.slice(0,$.limit)).map((B)=>structuredClone(B))}async transition(Z,$,Q){let B=this.jobs.get(Z);if(!B||!$.includes(B.state))return!1;let X=structuredClone(Q),Y=Date.now();if(Object.assign(B,X,{updatedAt:Y}),X.state&&X.state!=="running"&&B.settledAt===void 0)B.settledAt=X.settledAt??Y;return!0}async overdue(Z,$){let Q=[];for(let B of this.jobs.values())if(B.state==="running"&&B.deadlineAt<=Z)Q.push(B);return Q.sort((B,X)=>B.deadlineAt-X.deadlineAt),Q.slice(0,Math.max(0,$)).map((B)=>structuredClone(B))}async now(){return Date.now()}trim(Z){let $=[...this.jobs.values()].filter((Q)=>Q.threadId===Z&&Q.state!=="running").sort(tZ);for(let Q of $.slice(200))this.jobs.delete(Q.id)}}function tZ(Z,$){return $.createdAt-Z.createdAt||(Z.id<$.id?1:Z.id>$.id?-1:0)}class M extends Error{constructor(){super("The run was stopped");this.name="RunAborted"}}function T(Z,$){if($.aborted)return Promise.reject(new M);return new Promise((Q,B)=>{let X=()=>B(new M);$.addEventListener("abort",X,{once:!0}),Z.then(Q,B).finally(()=>$.removeEventListener("abort",X))})}function j(){return{inputTokens:0,outputTokens:0,totalTokens:0}}function O(Z,$){if(!$)return Z;let Q={inputTokens:Z.inputTokens+($.inputTokens??0),outputTokens:Z.outputTokens+($.outputTokens??0),totalTokens:Z.totalTokens+($.totalTokens??0)};if($.reasoningTokens!==void 0||Z.reasoningTokens!==void 0)Q.reasoningTokens=(Z.reasoningTokens??0)+($.reasoningTokens??0);if($.cachedInputTokens!==void 0||Z.cachedInputTokens!==void 0)Q.cachedInputTokens=(Z.cachedInputTokens??0)+($.cachedInputTokens??0);if($.imageInputTokens!==void 0||Z.imageInputTokens!==void 0)Q.imageInputTokens=(Z.imageInputTokens??0)+($.imageInputTokens??0);if($.imageOutputTokens!==void 0||Z.imageOutputTokens!==void 0)Q.imageOutputTokens=(Z.imageOutputTokens??0)+($.imageOutputTokens??0);return Q}function t(Z){if(!Z.trim())return{};try{return JSON.parse(Z)}catch{}let $=[],Q=!1,B=!1;for(let G of Z){if(Q){if(B)B=!1;else if(G==="\\")B=!0;else if(G==='"')Q=!1;continue}if(G==='"')Q=!0;else if(G==="{")$.push("}");else if(G==="[")$.push("]");else if(G==="}"||G==="]")$.pop()}let X=Z;if(Q)X+='"';X=X.replace(/[,:]\s*$/,"");let Y=$.reverse().join("");try{return JSON.parse(X+Y)}catch{try{return JSON.parse(X.replace(/,?\s*"[^"]*"\s*$/,"")+Y)}catch{return{}}}}function s(Z){return{name:"output",schema:Z.toJSONSchema(),strict:o(Z)}}function a(Z,$){let Q=Z.safeParse(t($));if(Q.ok===!0)return{ok:!0,value:Q.value};return{ok:!1,error:{code:"invalid_output",message:`The model's structured answer did not match the output schema: ${Q.errors.join(", ")}`,retryable:!0}}}function r(Z){if(Z.length>0)Z[0];return Z}function h(Z,$,Q){let B=Z.content[Z.content.length-1];if(B&&B.type===$){B.text=(B.text??"")+Q;return}Z.content.push($==="text"?{type:"text",text:Q}:{type:"reasoning",text:Q})}function e(Z,$,Q){let B=Z.content[Z.content.length-1];if(B&&B.type==="reasoning"&&B.id===$){B.text=(B.text??"")+Q;return}Z.content.push($?{type:"reasoning",id:$,text:Q}:{type:"reasoning",text:Q})}import{createHmac as J1,hkdfSync as V1,randomBytes as sZ,timingSafeEqual as z1}from"crypto";var MZ="agt2",$Z="agt1",aZ=[MZ,$Z],NZ=86400000,H1=Date.now()+NZ;function rZ(Z){return Z<=H1}var eZ="gemi.ai.pending-call.v1",Z0="gemi.ai.nested-run.v1",W1="gemi.ai.execution-receipt.v1",q1="gemi.ai.signing",ZZ=new Map;function g(Z,$){let Q=RZ($),B=`${Z}\x00${Q}`,X=ZZ.get(B);if(!X){if(X=Buffer.from(V1("sha256",Q,q1,Z,32)),ZZ.size>64)ZZ.clear();ZZ.set(B,X)}return X}function RZ(Z){let $=Z??process.env.SECRET;if(!$)throw Error("Signing a pending tool call needs an app secret. Set SECRET in the environment.");return $}function R(Z){if(Z===null||typeof Z!=="object")return JSON.stringify(Z)??"null";if(Array.isArray(Z))return`[${Z.map(R).join(",")}]`;let $=Z;return`{${Object.keys($).filter((B)=>$[B]!==void 0).sort().map((B)=>`${JSON.stringify(B)}:${R($[B])}`).join(",")}}`}function K1(Z){return Z.map(($)=>`${$.length}:${$}`).join("")}function S(Z,$){return J1("sha256",Z).update(K1($)).digest()}function $0(Z,$){let Q=Buffer.from(Z.split(".")[4],"base64url");return Q.length===$.length&&z1(Q,$)}function _Z(Z){return R(Z??null)}function Q0(Z,$,Q){return[MZ,Z.runId,Z.toolCallId,Z.name,Z.kind,$,String(Q),R(Z.input),R(Z.path??[]),_Z(Z.subject)]}function F1(Z,$,Q){let B=[$Z,Z.runId,Z.toolCallId,Z.name,Z.kind,$,String(Q),R(Z.input)];if(Z.path&&Z.path.length>0)B.push(R(Z.path));return B}var B0=(Z)=>Buffer.from(Z,"utf8").toString("base64url"),L1=(Z)=>Buffer.from(Z,"base64url").toString("utf8");function X0(Z,$={}){let Q=g(eZ,$.secret),X=($.now??Date.now())+($.ttlMs??NZ),Y=sZ(12).toString("base64url"),G=S(Q,Q0(Z,Y,X)).toString("base64url");return[MZ,B0(Z.runId),Y,X.toString(36),G].join(".")}function IZ(Z){return BZ(Z,aZ)}function BZ(Z,$){let Q=Z.split(".");if(Q.length!==5||!$.includes(Q[0]))return null;let B=Number.parseInt(Q[3],36);if(!Number.isFinite(B))return null;try{return{runId:L1(Q[1]),nonce:Q[2],expiresAt:B,version:Q[0]}}catch{return null}}function Y0(Z,$,Q={}){let B=BZ(Z,aZ);if(!B)return{ok:!1,reason:"malformed"};if(B.version===$Z&&!rZ(B.expiresAt))return{ok:!1,reason:"forged"};let X=B.version===$Z?S(RZ(Q.secret),F1($,B.nonce,B.expiresAt)):S(g(eZ,Q.secret),Q0($,B.nonce,B.expiresAt));if(!$0(Z,X))return{ok:!1,reason:"forged"};if((Q.now??Date.now())>B.expiresAt)return{ok:!1,reason:"expired"};return{ok:!0,runId:B.runId,nonce:B.nonce,expiresAt:B.expiresAt}}var AZ="agn2",QZ="agn1",G0=[AZ,QZ];function J0(Z,$,Q){return[...V0(Z,$,Q,AZ),_Z(Z.subject)]}function V0(Z,$,Q,B=QZ){return[B,Z.runId,R(Z.path),Z.nestedRunId,$,String(Q),R([...Z.open].sort()),R(Z.input)]}function z0(Z,$={}){let Q=g(Z0,$.secret),X=($.now??Date.now())+($.ttlMs??NZ),Y=sZ(12).toString("base64url"),G=S(Q,J0(Z,Y,X)).toString("base64url");return[AZ,B0(Z.runId),Y,X.toString(36),G].join(".")}function H0(Z,$,Q={}){let B=BZ(Z,G0);if(!B)return{ok:!1,reason:"malformed"};if(B.version===QZ&&!rZ(B.expiresAt))return{ok:!1,reason:"forged"};let X={...$,runId:B.runId},Y=B.version===QZ?S(RZ(Q.secret),V0(X,B.nonce,B.expiresAt)):S(g(Z0,Q.secret),J0(X,B.nonce,B.expiresAt));if(!$0(Z,Y))return{ok:!1,reason:"forged"};if((Q.now??Date.now())>B.expiresAt)return{ok:!1,reason:"expired"};return{ok:!0,runId:B.runId,nonce:B.nonce,expiresAt:B.expiresAt}}function W0(Z,$,Q={}){let B=g(W1,Q.secret);return S(B,[Z,$.runId,$.toolCallId,$.name,$.kind,R($.input),R($.path??[]),_Z($.subject)]).toString("base64url")}function q0(Z,$){return F0($,IZ(Z))}function K0(Z,$){return F0($,BZ(Z,G0))}async function F0(Z,$){if(!$)return!1;return Z.consume($.nonce,$.expiresAt)}class L0 extends Error{status;body;requestId;constructor(Z,$,Q){super(`Provider request failed with status ${Z}: ${D1($)}`);this.name="ProviderHttpError",this.status=Z,this.body=$,this.requestId=Q}}class D0 extends Error{timeoutMs;constructor(Z){super(`Provider request timed out after ${Z}ms`);this.name="ProviderTimeoutError",this.timeoutMs=Z}}function D1(Z){let $=P0(Z);if($?.message)return $.message;if(typeof Z==="string")return Z.slice(0,500);return"no error body"}function P0(Z){if(!Z||typeof Z!=="object")return null;let $=Z,B=$.error&&typeof $.error==="object"?$.error:Z;if(typeof B.message!=="string"&&typeof B.code!=="string"&&typeof B.type!=="string")return null;let X=B.innererror?.code??B.code;return{message:B.message,type:B.type,code:X,param:B.param}}function x(Z){if(!Z||typeof Z!=="object")return{};let{status:$,requestId:Q}=Z;return{...typeof $==="number"&&$>=100&&$<=599?{status:$}:{},...typeof Q==="string"&&Q?{requestId:Q}:{}}}function T4(Z){if(Z instanceof D0)return{code:"provider_error",message:Z.message,retryable:!0};if(O1(Z))return{code:"aborted",message:"The request was aborted.",retryable:!1};if(Z instanceof L0)return P1(Z.status,P0(Z.body),Z.message);if(Z instanceof TypeError)return{code:"provider_error",message:`Could not reach the provider: ${Z.message}`,retryable:!0};if(Z instanceof Error)return{code:"provider_error",message:Z.message,retryable:!1};return{code:"unknown",message:String(Z),retryable:!1}}function P1(Z,$,Q){let B=$?.message??Q,X=($?.code??"").toLowerCase(),Y=($?.type??"").toLowerCase(),G=`${X} ${Y} ${B}`.toLowerCase();if(Z===429){let z=X==="insufficient_quota"||G.includes("quota");return{code:"rate_limited",message:B,retryable:!z}}if(Z>=500||Z===408||Z===409)return{code:"provider_error",message:B,retryable:!0};if(U1(G))return{code:"context_length_exceeded",message:B,retryable:!1};if(C1(G))return{code:"content_filtered",message:B,retryable:!1};if($?.param?.startsWith("tools")||G.includes("invalid schema for function"))return{code:"invalid_tool_input",message:B,retryable:!1};return{code:"provider_error",message:B,retryable:!1}}function U1(Z){return Z.includes("context_length_exceeded")||Z.includes("maximum context length")||Z.includes("context window")||Z.includes("reduce the length")}function C1(Z){return Z.includes("content_filter")||Z.includes("content_policy_violation")||Z.includes("responsibleaipolicyviolation")||Z.includes("content management policy")}function O1(Z){if(!Z||typeof Z!=="object")return!1;let $=Z;return $.name==="AbortError"||$.code==="ABORT_ERR"}function YZ(Z){let $=new Set;for(let Q of Z)for(let B of Q.content??[]){if(B.type!=="tool-call")continue;for(let X of B.attachments??[])if(X&&"shown"in X&&X.shown)$.add(X.shown.messageId)}return $}function GZ(Z){if(Z.length===0)return[];let $=YZ(Z),Q=[0];for(let B=1;B<Z.length;B++){let X=Z[B];if(X.role==="user"&&!$.has(X.id))Q.push(B)}return Q}function x4(Z){let $=GZ(Z);return $.map((Q,B)=>Z.slice(Q,$[B+1]??Z.length))}function j1(Z){try{return JSON.stringify(Z).length}catch{return 0}}var M1=4,N1=10,R1="[Earlier turns of this conversation are not shown.]";function u(Z,$={}){let Q=[...Z],B=GZ(Q),X=_1($),Y=XZ($.maxTurns)??1/0,G=Math.max(1,Math.floor(XZ($.step)??N1));if(B.length<=1||Y>=B.length&&X===1/0)return{messages:Q,start:0,omittedTurns:0,omittedMessages:0};let z=Array.from({length:Q.length+1},()=>0);if(X!==1/0)for(let D=Q.length-1;D>=0;D--)z[D]=z[D+1]+j1(Q[D]);let V=(D)=>B.length-D<=Y&&z[B[D]]<=X,J=-1;for(let D=0;D<B.length;D+=G)if(V(D)){J=D;break}if(J<0){for(let D=0;D<B.length;D++)if(V(D)){J=D;break}}if(J<0)J=B.length-1;if(J===0)return{messages:Q,start:0,omittedTurns:0,omittedMessages:0};let H=B[J],q=Q.slice(0,H),W=q.filter((D)=>D.role==="system"),F=I1(q,Q.slice(H)),K={turns:J,messages:q.length-W.length},L=typeof $.note==="function"?$.note(K):$.note===void 0?R1:$.note;if(L){let D=F[0];F[0]={...D,content:[{type:"text",text:L},...D.content]}}return{messages:[...W,...F],start:H,omittedTurns:K.turns,omittedMessages:K.messages}}function XZ(Z){return typeof Z==="number"&&Z>0?Z:void 0}function _1(Z){let $=XZ(Z.maxBytes)??1/0,Q=XZ(Z.maxTokens);return Math.min($,Q===void 0?1/0:Q*M1)}function U0(Z,$){let Q=Array.isArray(Z?.namespaces)?Z.namespaces:[],B=Array.isArray(Z?.loaded)?Z.loaded:[];return $.namespace?Q.includes($.namespace):B.includes(String($.name))}function kZ(Z){return Array.isArray(Z.toolSearches)?Z.toolSearches:[]}function I1(Z,$){let Q=[];for(let J of Z)for(let H of J.content??[])if(H.type==="tool-call")Q.push(...kZ(H));if(Q.length===0)return $;let B=[],X=new Set,Y;if($.forEach((J,H)=>{(J.content??[]).forEach((q,W)=>{if(q.type!=="tool-call"||q.partial)return;if(B.push(...kZ(q)),B.some((K)=>U0(K,q)))return;let F=Q.filter((K)=>U0(K,q));if(F.length===0)return;for(let K of F)X.add(K);Y??={message:H,part:W}})}),!Y)return $;let G=Q.filter((J)=>X.has(J)),z=[...$],V=z[Y.message];return z[Y.message]={...V,content:V.content.map((J,H)=>H===Y.part&&J.type==="tool-call"?{...J,toolSearches:[...G,...kZ(J)]}:J)},z}var A1=1000,k1=24000,T1=20000,S1=1e5,x1=120000,E1=["You keep a running summary of a conversation between a user and an AI assistant.","The assistant will continue the conversation with only your summary and the latest turns, so the summary has to carry everything from the earlier turns it may still need.","You are given the summary so far (possibly empty) and the turns that came after it. Answer the updated summary, which replaces the old one.","Keep: the user's goals, preferences and constraints; decisions made and why; facts, names, ids, numbers, dates, file names and URLs that may matter later; what tools were used and their important results; open questions and unfinished work.","Drop greetings, repetition and anything later turns superseded. Do not invent anything, and do not answer the user.","Write terse prose or bullet points, in the language of the conversation."].join(" "),f1="[Summary of the earlier turns of this conversation, which are not shown:]",b1=8;class M0{ttlMs;threads=new Map;lastSweep=0;constructor(Z=86400000){this.ttlMs=Z}async loadSummaries(Z){this.sweep();let $=this.threads.get(Z);if(!$)return[];return $.touchedAt=Date.now(),$.summaries.slice()}async saveSummary(Z,$){this.sweep();let Q=this.threads.get(Z)??{summaries:[],touchedAt:Date.now()};Q.summaries=w1(Q.summaries,$),Q.touchedAt=Date.now(),this.threads.set(Z,Q)}delete(Z){this.threads.delete(Z)}sweep(Z=Date.now()){if(Z-this.lastSweep<60000)return;this.lastSweep=Z;for(let[$,Q]of this.threads)if(Z-Q.touchedAt>this.ttlMs)this.threads.delete($)}}function w1(Z,$){return[$,...Z.filter((Q)=>Q.cutMessageId!==$.cutMessageId)].slice(0,b1)}var N0=new M0;function y4(Z){let $=Z;return typeof $?.loadSummaries==="function"&&typeof $?.saveSummary==="function"}function R0(Z,$,Q){let B=A(Q.maxSummaryTokens)??A1,X=(V)=>Math.max(1,V-B),Y={...$,...A($.maxTokens)?{maxTokens:X($.maxTokens)}:{},...A($.maxBytes)?{maxBytes:Math.max(1,$.maxBytes-B*xZ)}:{}},G=v1($,Q),z={...Y,note:!1,...G?{maxTokens:Math.min(Y.maxTokens??1/0,X(G))}:{}};return{plain:Y,cut:u(Z,z),maxSummaryTokens:B}}function v1(Z,$){if($.triggerTokens===!1)return;let Q=A($.triggerTokens||void 0);if(Q)return Q;if(A(Z.maxTokens)||A(Z.maxBytes))return;return S1}async function _0(Z){let{history:$,window:Q,compact:B}=Z,{plain:X,cut:Y,maxSummaryTokens:G}=R0($,Q,B);if(Y.omittedTurns===0)return Y.messages;let z=`${$[Y.start].id}:${Y.start}`,V=Z.memo?.get(z);if(V===void 0){try{V=await u1(Z,Y.start,G)}catch(F){if(Z.signal.aborted)throw F;V=null}if(!Z.signal.aborted)Z.memo?.set(z,V)}if(!V)return u($,X).messages;let J=$.length-Y.start,H=Y.messages.slice(0,Y.messages.length-J),q=Y.messages.slice(Y.messages.length-J),W=$[Y.start];return[...H,{id:`summary_${W.id}`,role:"user",content:[{type:"text",text:`${f1}
+import{Ed as a0,Jd as r0}from"./chunk-b2pdqxj3.js";import{Vh as s0,Xh as p,Yh as LZ,_h as u0,nh as SZ,oh as o}from"./chunk-dm7mada7.js";import{ni as g0}from"./chunk-15bmfr7f.js";import{sk as l}from"./chunk-yg8se4vs.js";class pZ{spent=new Map;sweepAt=1024;async consume(Z,$){return this.consumeSync(Z,$)}consumeSync(Z,$,Q=Date.now()){if(this.spent.size>=this.sweepAt)this.sweep(Q);let B=this.spent.get(Z);if(B!==void 0&&B>Q)return!1;return this.spent.set(Z,$),!0}get size(){return this.spent.size}sweep(Z){for(let[$,Q]of this.spent)if(Q<=Z)this.spent.delete($);this.sweepAt=Math.max(1024,this.spent.size*2)}}class B1{injectedClient;prefix;constructor(Z={}){this.injectedClient=Z.client,this.prefix=Z.prefix??"gemi:ai:nonce"}async consume(Z,$){let Q=Math.max(1,Math.ceil($-Date.now()));return await this.client.send("SET",[`${this.prefix}:${Z}`,"1","PX",String(Q),"NX"])==="OK"}get client(){if(this.injectedClient)return this.injectedClient;let Z=l(),$=Z.bound(LZ)?Z.make(LZ).client:void 0;if(!$)throw Error("RedisNonceStore could not reach the Redis client. Register RedisServiceProvider on your application, or pass a client: new RedisNonceStore({ client }).");return $}}var DZ=new pZ;class P extends Error{retryable;constructor(Z,$={}){super(Z,$.cause!==void 0?{cause:$.cause}:void 0);this.name="ToolError",this.retryable=$.retryable??!0}}var X1={provider_error:"The model provider returned an error.",rate_limited:"The model provider is rate limiting requests. Try again shortly.",context_length_exceeded:"The conversation is too long for the model.",content_filtered:"The model provider's content filter blocked this request.",invalid_tool_input:"The model provider rejected the request.",tool_error:"A tool failed.",unknown:"The run failed unexpectedly."};function n(Z,$){if($.source==="tool"){if($.cause instanceof P)return Z;return{...Z,message:`The tool "${$.toolName}" failed with an unexpected error.`}}let Q=X1[Z.code];return Q===void 0?Z:{...Z,message:Q}}function mZ(Z,$,Q,B){let X;try{X=(Z??n)($,Q)}catch(Y){B(Y),X=n($,Q)}return{code:X.code,message:X.message,...X.toolCallId!==void 0?{toolCallId:X.toolCallId}:{},retryable:X.retryable}}var iZ=new WeakMap;function lZ(Z,$){if(Z!==$)iZ.set(Z,$)}function C4(Z){return iZ.get(Z)??Z}class PZ extends P{id;code="attachment_not_found";constructor(Z){super(`No attachment ${Z}.`);this.id=Z;this.name="AttachmentNotFoundError"}}class w extends P{code="invalid_attachment_scope";constructor(Z){super(Z);this.name="InvalidAttachmentScopeError"}}function UZ(Z){if(!Z||typeof Z.key!=="string"||Z.key.length===0)throw new w("An attachment scope needs a non-empty key. Return `null` from `attachmentScope()` for a request that has no subject \u2014 an empty key is a bucket every caller shares.");return Z}var CZ="gemi_att_";function Y1(){return`${CZ}${crypto.randomUUID()}`}class OZ{store;storage;scope;constructor(Z,$,Q){this.store=Z;this.storage=$;this.scope=Q;UZ(Q)}get scopeKey(){return this.scope.key}async get(Z){let $=await this.store.find(this.scope,Z);if(!$||$.scopeKey!==this.scope.key)throw new PZ(Z);return $}async read(Z){return await this.readRecord(Z,await this.get(Z))}async readRecord(Z,$){if(!$.objectName)throw new PZ(Z);return await this.storage.read({name:$.objectName})}async file(Z){let $=await this.get(Z),B=(await this.readRecord(Z,$)).body,X=B instanceof Blob?B:B?await new Response(B).blob():new Blob([]);return new File([X],$.name,{type:$.mimeType})}async put(Z,$={}){let Q=Y1(),B=$.mimeType??Z.type??"",X=$.name??(Z instanceof File?Z.name:Q),Y=await this.storage.put({name:G1(Q,X),body:Z,contentType:B||void 0}),G={id:Q,scopeKey:this.scope.key,objectName:Y,name:X,mimeType:B||"application/octet-stream",size:Z.size,createdAt:new Date().toISOString(),destination:$.fileId?"both":"storage",...$.fileId?{fileId:$.fileId}:{}};return await this.store.put(this.scope,G),G}}function G1(Z,$){let Q=/\.([A-Za-z0-9]{1,8})$/.exec($);return`attachments/${Z}${Q?`.${Q[1].toLowerCase()}`:""}`}class nZ{rows=new Map;async put(Z,$){UZ(Z),this.rows.set($.id,{...$,scopeKey:Z.key})}async find(Z,$){UZ(Z);let Q=this.rows.get($);if(!Q||Q.scopeKey!==Z.key)return null;return Q}get size(){return this.rows.size}}var oZ=new nZ;class jZ{jobs=new Map;async create(Z){if(this.jobs.has(Z.id))throw Error(`A background job with the id ${Z.id} already exists.`);let $=Date.now(),{deadlineMs:Q,...B}=Z,X={...structuredClone(B),state:"running",createdAt:$,updatedAt:$,deadlineAt:$+Q};return this.jobs.set(X.id,X),this.trim(X.threadId),structuredClone(X)}async get(Z){let $=this.jobs.get(Z);return $?structuredClone($):null}async listForThread(Z,$={}){let Q=[];for(let B of this.jobs.values()){if(B.threadId!==Z)continue;if($.states&&!$.states.includes(B.state))continue;Q.push(B)}return Q.sort(tZ),($.limit===void 0?Q:Q.slice(0,$.limit)).map((B)=>structuredClone(B))}async transition(Z,$,Q){let B=this.jobs.get(Z);if(!B||!$.includes(B.state))return!1;let X=structuredClone(Q),Y=Date.now();if(Object.assign(B,X,{updatedAt:Y}),X.state&&X.state!=="running"&&B.settledAt===void 0)B.settledAt=X.settledAt??Y;return!0}async overdue(Z,$){let Q=[];for(let B of this.jobs.values())if(B.state==="running"&&B.deadlineAt<=Z)Q.push(B);return Q.sort((B,X)=>B.deadlineAt-X.deadlineAt),Q.slice(0,Math.max(0,$)).map((B)=>structuredClone(B))}async now(){return Date.now()}trim(Z){let $=[...this.jobs.values()].filter((Q)=>Q.threadId===Z&&Q.state!=="running").sort(tZ);for(let Q of $.slice(200))this.jobs.delete(Q.id)}}function tZ(Z,$){return $.createdAt-Z.createdAt||(Z.id<$.id?1:Z.id>$.id?-1:0)}class M extends Error{constructor(){super("The run was stopped");this.name="RunAborted"}}function T(Z,$){if($.aborted)return Promise.reject(new M);return new Promise((Q,B)=>{let X=()=>B(new M);$.addEventListener("abort",X,{once:!0}),Z.then(Q,B).finally(()=>$.removeEventListener("abort",X))})}function j(){return{inputTokens:0,outputTokens:0,totalTokens:0}}function O(Z,$){if(!$)return Z;let Q={inputTokens:Z.inputTokens+($.inputTokens??0),outputTokens:Z.outputTokens+($.outputTokens??0),totalTokens:Z.totalTokens+($.totalTokens??0)};if($.reasoningTokens!==void 0||Z.reasoningTokens!==void 0)Q.reasoningTokens=(Z.reasoningTokens??0)+($.reasoningTokens??0);if($.cachedInputTokens!==void 0||Z.cachedInputTokens!==void 0)Q.cachedInputTokens=(Z.cachedInputTokens??0)+($.cachedInputTokens??0);if($.imageInputTokens!==void 0||Z.imageInputTokens!==void 0)Q.imageInputTokens=(Z.imageInputTokens??0)+($.imageInputTokens??0);if($.imageOutputTokens!==void 0||Z.imageOutputTokens!==void 0)Q.imageOutputTokens=(Z.imageOutputTokens??0)+($.imageOutputTokens??0);return Q}function t(Z){if(!Z.trim())return{};try{return JSON.parse(Z)}catch{}let $=[],Q=!1,B=!1;for(let G of Z){if(Q){if(B)B=!1;else if(G==="\\")B=!0;else if(G==='"')Q=!1;continue}if(G==='"')Q=!0;else if(G==="{")$.push("}");else if(G==="[")$.push("]");else if(G==="}"||G==="]")$.pop()}let X=Z;if(Q)X+='"';X=X.replace(/[,:]\s*$/,"");let Y=$.reverse().join("");try{return JSON.parse(X+Y)}catch{try{return JSON.parse(X.replace(/,?\s*"[^"]*"\s*$/,"")+Y)}catch{return{}}}}function s(Z){return{name:"output",schema:Z.toJSONSchema(),strict:o(Z)}}function a(Z,$){let Q=Z.safeParse(t($));if(Q.ok===!0)return{ok:!0,value:Q.value};return{ok:!1,error:{code:"invalid_output",message:`The model's structured answer did not match the output schema: ${Q.errors.join(", ")}`,retryable:!0}}}function r(Z){if(Z.length>0)Z[0];return Z}function h(Z,$,Q){let B=Z.content[Z.content.length-1];if(B&&B.type===$){B.text=(B.text??"")+Q;return}Z.content.push($==="text"?{type:"text",text:Q}:{type:"reasoning",text:Q})}function e(Z,$,Q){let B=Z.content[Z.content.length-1];if(B&&B.type==="reasoning"&&B.id===$){B.text=(B.text??"")+Q;return}Z.content.push($?{type:"reasoning",id:$,text:Q}:{type:"reasoning",text:Q})}import{createHmac as J1,hkdfSync as V1,randomBytes as sZ,timingSafeEqual as z1}from"crypto";var MZ="agt2",$Z="agt1",aZ=[MZ,$Z],NZ=86400000,H1=Date.now()+NZ;function rZ(Z){return Z<=H1}var eZ="gemi.ai.pending-call.v1",Z0="gemi.ai.nested-run.v1",W1="gemi.ai.execution-receipt.v1",q1="gemi.ai.signing",ZZ=new Map;function g(Z,$){let Q=RZ($),B=`${Z}\x00${Q}`,X=ZZ.get(B);if(!X){if(X=Buffer.from(V1("sha256",Q,q1,Z,32)),ZZ.size>64)ZZ.clear();ZZ.set(B,X)}return X}function RZ(Z){let $=Z??process.env.SECRET;if(!$)throw Error("Signing a pending tool call needs an app secret. Set SECRET in the environment.");return $}function R(Z){if(Z===null||typeof Z!=="object")return JSON.stringify(Z)??"null";if(Array.isArray(Z))return`[${Z.map(R).join(",")}]`;let $=Z;return`{${Object.keys($).filter((B)=>$[B]!==void 0).sort().map((B)=>`${JSON.stringify(B)}:${R($[B])}`).join(",")}}`}function K1(Z){return Z.map(($)=>`${$.length}:${$}`).join("")}function S(Z,$){return J1("sha256",Z).update(K1($)).digest()}function $0(Z,$){let Q=Buffer.from(Z.split(".")[4],"base64url");return Q.length===$.length&&z1(Q,$)}function _Z(Z){return R(Z??null)}function Q0(Z,$,Q){return[MZ,Z.runId,Z.toolCallId,Z.name,Z.kind,$,String(Q),R(Z.input),R(Z.path??[]),_Z(Z.subject)]}function F1(Z,$,Q){let B=[$Z,Z.runId,Z.toolCallId,Z.name,Z.kind,$,String(Q),R(Z.input)];if(Z.path&&Z.path.length>0)B.push(R(Z.path));return B}var B0=(Z)=>Buffer.from(Z,"utf8").toString("base64url"),L1=(Z)=>Buffer.from(Z,"base64url").toString("utf8");function X0(Z,$={}){let Q=g(eZ,$.secret),X=($.now??Date.now())+($.ttlMs??NZ),Y=sZ(12).toString("base64url"),G=S(Q,Q0(Z,Y,X)).toString("base64url");return[MZ,B0(Z.runId),Y,X.toString(36),G].join(".")}function IZ(Z){return BZ(Z,aZ)}function BZ(Z,$){let Q=Z.split(".");if(Q.length!==5||!$.includes(Q[0]))return null;let B=Number.parseInt(Q[3],36);if(!Number.isFinite(B))return null;try{return{runId:L1(Q[1]),nonce:Q[2],expiresAt:B,version:Q[0]}}catch{return null}}function Y0(Z,$,Q={}){let B=BZ(Z,aZ);if(!B)return{ok:!1,reason:"malformed"};if(B.version===$Z&&!rZ(B.expiresAt))return{ok:!1,reason:"forged"};let X=B.version===$Z?S(RZ(Q.secret),F1($,B.nonce,B.expiresAt)):S(g(eZ,Q.secret),Q0($,B.nonce,B.expiresAt));if(!$0(Z,X))return{ok:!1,reason:"forged"};if((Q.now??Date.now())>B.expiresAt)return{ok:!1,reason:"expired"};return{ok:!0,runId:B.runId,nonce:B.nonce,expiresAt:B.expiresAt}}var AZ="agn2",QZ="agn1",G0=[AZ,QZ];function J0(Z,$,Q){return[...V0(Z,$,Q,AZ),_Z(Z.subject)]}function V0(Z,$,Q,B=QZ){return[B,Z.runId,R(Z.path),Z.nestedRunId,$,String(Q),R([...Z.open].sort()),R(Z.input)]}function z0(Z,$={}){let Q=g(Z0,$.secret),X=($.now??Date.now())+($.ttlMs??NZ),Y=sZ(12).toString("base64url"),G=S(Q,J0(Z,Y,X)).toString("base64url");return[AZ,B0(Z.runId),Y,X.toString(36),G].join(".")}function H0(Z,$,Q={}){let B=BZ(Z,G0);if(!B)return{ok:!1,reason:"malformed"};if(B.version===QZ&&!rZ(B.expiresAt))return{ok:!1,reason:"forged"};let X={...$,runId:B.runId},Y=B.version===QZ?S(RZ(Q.secret),V0(X,B.nonce,B.expiresAt)):S(g(Z0,Q.secret),J0(X,B.nonce,B.expiresAt));if(!$0(Z,Y))return{ok:!1,reason:"forged"};if((Q.now??Date.now())>B.expiresAt)return{ok:!1,reason:"expired"};return{ok:!0,runId:B.runId,nonce:B.nonce,expiresAt:B.expiresAt}}function W0(Z,$,Q={}){let B=g(W1,Q.secret);return S(B,[Z,$.runId,$.toolCallId,$.name,$.kind,R($.input),R($.path??[]),_Z($.subject)]).toString("base64url")}function q0(Z,$){return F0($,IZ(Z))}function K0(Z,$){return F0($,BZ(Z,G0))}async function F0(Z,$){if(!$)return!1;return Z.consume($.nonce,$.expiresAt)}class L0 extends Error{status;body;requestId;constructor(Z,$,Q){super(`Provider request failed with status ${Z}: ${D1($)}`);this.name="ProviderHttpError",this.status=Z,this.body=$,this.requestId=Q}}class D0 extends Error{timeoutMs;constructor(Z){super(`Provider request timed out after ${Z}ms`);this.name="ProviderTimeoutError",this.timeoutMs=Z}}function D1(Z){let $=P0(Z);if($?.message)return $.message;if(typeof Z==="string")return Z.slice(0,500);return"no error body"}function P0(Z){if(!Z||typeof Z!=="object")return null;let $=Z,B=$.error&&typeof $.error==="object"?$.error:Z;if(typeof B.message!=="string"&&typeof B.code!=="string"&&typeof B.type!=="string")return null;let X=B.innererror?.code??B.code;return{message:B.message,type:B.type,code:X,param:B.param}}function x(Z){if(!Z||typeof Z!=="object")return{};let{status:$,requestId:Q}=Z;return{...typeof $==="number"&&$>=100&&$<=599?{status:$}:{},...typeof Q==="string"&&Q?{requestId:Q}:{}}}function T4(Z){if(Z instanceof D0)return{code:"provider_error",message:Z.message,retryable:!0};if(O1(Z))return{code:"aborted",message:"The request was aborted.",retryable:!1};if(Z instanceof L0)return P1(Z.status,P0(Z.body),Z.message);if(Z instanceof TypeError)return{code:"provider_error",message:`Could not reach the provider: ${Z.message}`,retryable:!0};if(Z instanceof Error)return{code:"provider_error",message:Z.message,retryable:!1};return{code:"unknown",message:String(Z),retryable:!1}}function P1(Z,$,Q){let B=$?.message??Q,X=($?.code??"").toLowerCase(),Y=($?.type??"").toLowerCase(),G=`${X} ${Y} ${B}`.toLowerCase();if(Z===429){let z=X==="insufficient_quota"||G.includes("quota");return{code:"rate_limited",message:B,retryable:!z}}if(Z>=500||Z===408||Z===409)return{code:"provider_error",message:B,retryable:!0};if(U1(G))return{code:"context_length_exceeded",message:B,retryable:!1};if(C1(G))return{code:"content_filtered",message:B,retryable:!1};if($?.param?.startsWith("tools")||G.includes("invalid schema for function"))return{code:"invalid_tool_input",message:B,retryable:!1};return{code:"provider_error",message:B,retryable:!1}}function U1(Z){return Z.includes("context_length_exceeded")||Z.includes("maximum context length")||Z.includes("context window")||Z.includes("reduce the length")}function C1(Z){return Z.includes("content_filter")||Z.includes("content_policy_violation")||Z.includes("responsibleaipolicyviolation")||Z.includes("content management policy")}function O1(Z){if(!Z||typeof Z!=="object")return!1;let $=Z;return $.name==="AbortError"||$.code==="ABORT_ERR"}function YZ(Z){let $=new Set;for(let Q of Z)for(let B of Q.content??[]){if(B.type!=="tool-call")continue;for(let X of B.attachments??[])if(X&&"shown"in X&&X.shown)$.add(X.shown.messageId)}return $}function GZ(Z){if(Z.length===0)return[];let $=YZ(Z),Q=[0];for(let B=1;B<Z.length;B++){let X=Z[B];if(X.role==="user"&&!$.has(X.id))Q.push(B)}return Q}function x4(Z){let $=GZ(Z);return $.map((Q,B)=>Z.slice(Q,$[B+1]??Z.length))}function j1(Z){try{return JSON.stringify(Z).length}catch{return 0}}var M1=4,N1=10,R1="[Earlier turns of this conversation are not shown.]";function u(Z,$={}){let Q=[...Z],B=GZ(Q),X=_1($),Y=XZ($.maxTurns)??1/0,G=Math.max(1,Math.floor(XZ($.step)??N1));if(B.length<=1||Y>=B.length&&X===1/0)return{messages:Q,start:0,omittedTurns:0,omittedMessages:0};let z=Array.from({length:Q.length+1},()=>0);if(X!==1/0)for(let D=Q.length-1;D>=0;D--)z[D]=z[D+1]+j1(Q[D]);let V=(D)=>B.length-D<=Y&&z[B[D]]<=X,J=-1;for(let D=0;D<B.length;D+=G)if(V(D)){J=D;break}if(J<0){for(let D=0;D<B.length;D++)if(V(D)){J=D;break}}if(J<0)J=B.length-1;if(J===0)return{messages:Q,start:0,omittedTurns:0,omittedMessages:0};let H=B[J],q=Q.slice(0,H),W=q.filter((D)=>D.role==="system"),F=I1(q,Q.slice(H)),K={turns:J,messages:q.length-W.length},L=typeof $.note==="function"?$.note(K):$.note===void 0?R1:$.note;if(L){let D=F[0];F[0]={...D,content:[{type:"text",text:L},...D.content]}}return{messages:[...W,...F],start:H,omittedTurns:K.turns,omittedMessages:K.messages}}function XZ(Z){return typeof Z==="number"&&Z>0?Z:void 0}function _1(Z){let $=XZ(Z.maxBytes)??1/0,Q=XZ(Z.maxTokens);return Math.min($,Q===void 0?1/0:Q*M1)}function U0(Z,$){let Q=Array.isArray(Z?.namespaces)?Z.namespaces:[],B=Array.isArray(Z?.loaded)?Z.loaded:[];return $.namespace?Q.includes($.namespace):B.includes(String($.name))}function kZ(Z){return Array.isArray(Z.toolSearches)?Z.toolSearches:[]}function I1(Z,$){let Q=[];for(let J of Z)for(let H of J.content??[])if(H.type==="tool-call")Q.push(...kZ(H));if(Q.length===0)return $;let B=[],X=new Set,Y;if($.forEach((J,H)=>{(J.content??[]).forEach((q,W)=>{if(q.type!=="tool-call"||q.partial)return;if(B.push(...kZ(q)),B.some((K)=>U0(K,q)))return;let F=Q.filter((K)=>U0(K,q));if(F.length===0)return;for(let K of F)X.add(K);Y??={message:H,part:W}})}),!Y)return $;let G=Q.filter((J)=>X.has(J)),z=[...$],V=z[Y.message];return z[Y.message]={...V,content:V.content.map((J,H)=>H===Y.part&&J.type==="tool-call"?{...J,toolSearches:[...G,...kZ(J)]}:J)},z}var A1=1000,k1=24000,T1=20000,S1=1e5,x1=120000,E1=["You keep a running summary of a conversation between a user and an AI assistant.","The assistant will continue the conversation with only your summary and the latest turns, so the summary has to carry everything from the earlier turns it may still need.","You are given the summary so far (possibly empty) and the turns that came after it. Answer the updated summary, which replaces the old one.","Keep: the user's goals, preferences and constraints; decisions made and why; facts, names, ids, numbers, dates, file names and URLs that may matter later; what tools were used and their important results; open questions and unfinished work.","Drop greetings, repetition and anything later turns superseded. Do not invent anything, and do not answer the user.","Write terse prose or bullet points, in the language of the conversation."].join(" "),f1="[Summary of the earlier turns of this conversation, which are not shown:]",b1=8;class M0{ttlMs;threads=new Map;lastSweep=0;constructor(Z=86400000){this.ttlMs=Z}async loadSummaries(Z){this.sweep();let $=this.threads.get(Z);if(!$)return[];return $.touchedAt=Date.now(),$.summaries.slice()}async saveSummary(Z,$){this.sweep();let Q=this.threads.get(Z)??{summaries:[],touchedAt:Date.now()};Q.summaries=w1(Q.summaries,$),Q.touchedAt=Date.now(),this.threads.set(Z,Q)}delete(Z){this.threads.delete(Z)}sweep(Z=Date.now()){if(Z-this.lastSweep<60000)return;this.lastSweep=Z;for(let[$,Q]of this.threads)if(Z-Q.touchedAt>this.ttlMs)this.threads.delete($)}}function w1(Z,$){return[$,...Z.filter((Q)=>Q.cutMessageId!==$.cutMessageId)].slice(0,b1)}var N0=new M0;function y4(Z){let $=Z;return typeof $?.loadSummaries==="function"&&typeof $?.saveSummary==="function"}function R0(Z,$,Q){let B=A(Q.maxSummaryTokens)??A1,X=(V)=>Math.max(1,V-B),Y={...$,...A($.maxTokens)?{maxTokens:X($.maxTokens)}:{},...A($.maxBytes)?{maxBytes:Math.max(1,$.maxBytes-B*xZ)}:{}},G=v1($,Q),z={...Y,note:!1,...G?{maxTokens:Math.min(Y.maxTokens??1/0,X(G))}:{}};return{plain:Y,cut:u(Z,z),maxSummaryTokens:B}}function v1(Z,$){if($.triggerTokens===!1)return;let Q=A($.triggerTokens||void 0);if(Q)return Q;if(A(Z.maxTokens)||A(Z.maxBytes))return;return S1}async function _0(Z){let{history:$,window:Q,compact:B}=Z,{plain:X,cut:Y,maxSummaryTokens:G}=R0($,Q,B);if(Y.omittedTurns===0)return Y.messages;let z=`${$[Y.start].id}:${Y.start}`,V=Z.memo?.get(z);if(V===void 0){try{V=await u1(Z,Y.start,G)}catch(F){if(Z.signal.aborted)throw F;V=null}if(!Z.signal.aborted)Z.memo?.set(z,V)}if(!V)return u($,X).messages;let J=$.length-Y.start,H=Y.messages.slice(0,Y.messages.length-J),q=Y.messages.slice(Y.messages.length-J),W=$[Y.start];return[...H,{id:`summary_${W.id}`,role:"user",content:[{type:"text",text:`${f1}
 ${V.text}`}],createdAt:W.createdAt},...q]}var C0="\x00next-turn";function I0(Z){let $=y1(Z).finally(()=>JZ.delete($));return JZ.add($),$}var JZ=new Set;async function y1(Z){try{let $={id:C0,role:"user",content:[{type:"text",text:""}],createdAt:new Date().toISOString()},Q=[...Z.history,$],B=[...Z.stored,$],{cut:X,maxSummaryTokens:Y}=R0(Q,Z.window,Z.compact);if(X.omittedTurns===0||Q[X.start].id===C0)return;let G=A0({...Z,history:Q,stored:B},X.start);if((await VZ(Z.store,Z.threadId)).some(G.matches))return;await k0(G,{...Z,history:Q,stored:B},X.start,Y).promise}catch{}}async function h4(){while(d.size>0||JZ.size>0)await Promise.allSettled([...JZ,...[...d.values()].map((Z)=>Z.promise)])}var d=new Map,E=new Map,h1=1000;function g1(Z,$){E.set(Z,O(E.get(Z)??j(),$));while(E.size>h1)E.delete(E.keys().next().value)}function O0(Z,$){let Q=E.get(Z);if(!Q)return;E.delete(Z),$(Q)}function A0(Z,$){let Q=Z.history[$].id,B=o1(Z.stored,$),X=B[$];return{key:`${Z.threadId}\x00${Q}\x00${X}`,fingerprints:B,matches:(Y)=>Y?.cutMessageId===Q&&Y.fingerprint===X}}async function u1(Z,$,Q){let B=A0(Z,$),X=(await VZ(Z.store,Z.threadId)).find(B.matches);if(X)return O0(B.key,Z.onUsage),X;let Y=k0(B,Z,$,Q);if(Y.owed)Z.onUsage(Y.owed),Y.owed=void 0;Y.payers.push(Z.onUsage);try{return await c1(Y.promise,Z.signal)}finally{Y.payers.splice(Y.payers.indexOf(Z.onUsage),1),O0(B.key,Z.onUsage)}}function k0(Z,$,Q,B){let X=d.get(Z.key);if(X)return X;let Y={promise:void 0,payers:[],owed:void 0},G=(z)=>{let V=Y.payers[0];if(V)V(z);else Y.owed=O(Y.owed??j(),z)};return Y.promise=(async()=>{let{store:z,threadId:V}=$,J=A($.compact.lockWaitMs)??T1,H=null;if(z.lockSummary){try{H=await z.lockSummary(V,$.history[Q].id,J+60000)}catch{H=null}if(!H)return p1($,Z.matches,J)}try{let q=await VZ(z,V),W=q.find(Z.matches);if(W)return W;return await m1($,q,Z.fingerprints,Q,B,G)}finally{if(H)await H().catch(()=>{})}})().catch(()=>null).finally(()=>{if(d.delete(Z.key),Y.owed)g1(Z.key,Y.owed);Y.owed=void 0}),d.set(Z.key,Y),Y}function c1(Z,$){if($.aborted)return Promise.reject($.reason);return new Promise((Q,B)=>{let X=()=>B($.reason);$.addEventListener("abort",X,{once:!0}),Z.then((Y)=>{$.removeEventListener("abort",X),Q(Y)},(Y)=>{$.removeEventListener("abort",X),B(Y)})})}async function VZ(Z,$){try{let Q=await Z.loadSummaries($);return Array.isArray(Q)?Q.filter(d1):[]}catch{return[]}}function d1(Z){let $=Z;return!!$&&typeof $.cutMessageId==="string"&&typeof $.text==="string"&&typeof $.fingerprint==="string"}async function p1(Z,$,Q){let B=Date.now()+Q;while(Date.now()<B){await new Promise((Y)=>setTimeout(Y,250));let X=(await VZ(Z.store,Z.threadId)).find($);if(X)return X}return null}async function m1(Z,$,Q,B,X,Y){let{history:G,compact:z}=Z,V=GZ(G),J=V.indexOf(B),H=new Map(V.map((_)=>[G[_].id,_])),q,W=0;for(let _ of $){let N=H.get(_.cutMessageId);if(N===void 0||N>=B||N<=W)continue;if(_.fingerprint!==Q[N])continue;q=_,W=N}let F=(A(z.chunkTokens)??k1)*xZ,K=i1(G,V,W,B,F),L=X*xZ,D=`${z.instructions??E1} Keep the summary under about ${Math.round(X*0.75)} words.`,U=q?.text??"",f=j();for(let _ of K){let N=await T0({provider:z.provider??Z.provider,instructions:D,prompt:`Summary so far:
 ${U||"(none yet: these are the first turns of the conversation)"}
 
@@ -17,6 +17,6 @@ data: ${JSON.stringify(z.event)}
 `)),X.touch()}}catch{}X.stop();try{G.close()}catch{}},cancel:()=>{B=!0,X.stop()}});return new Response(Y,{headers:{"Content-Type":"text/event-stream; charset=utf-8","Cache-Control":"no-cache, no-transform",Connection:"keep-alive","X-Accel-Buffering":"no"}})}result(Z){if(!Z?.throwOnError)return this.settled;return this.settled.then(($)=>{if($.error)throw new KZ({...$,error:$.error});return $})}stop(Z){if(this.ended||this.controller.signal.aborted)return;this.stopReason=Z?.reason,this.controller.abort()}expire(Z){if(this.ended||this.controller.signal.aborted)return;this.timedOutAfter=Z,this.stopReason=`The run reached its time limit of ${EZ(Z)} and was stopped.`,this.controller.abort(new DOMException(this.stopReason,"TimeoutError"))}async execute(){this.emit({type:"run-start",runId:this.runId,threadId:this.params.threadId});try{let $=await this.resolveToolSchemas(),Q=$?[]:await this.ingestTurn();if($)this.fail($),this.finishReason="error";else if(Q.length>0)this.finishReason="awaiting-input",this.emit({type:"awaiting-input",runId:this.runId,pending:Q});else await this.loop()}catch($){if($ instanceof M||this.controller.signal.aborted)await this.finalizeAborted();else this.fail(this.config.provider.normalizeError($),x($)),await this.finalizeMessage("error"),this.finishReason="error"}this.cancelDeadline(),this.emit({type:"usage",usage:this.usage}),this.emit({type:"run-end",runId:this.runId,finishReason:this.finishReason}),this.ended=!0,this.wake(),this.precompact();let Z=this.finishReason==="error"?this.failure:void 0;if(Z&&this.config.logErrors)this.logFailure(Z);return{runId:this.runId,messages:this.produced,finishReason:this.finishReason,usage:this.usage,output:this.output,...Z?{error:Z}:{}}}async resolveToolSchemas(){let Z=[...this.config.registry.values()].filter((V)=>!V.inputSchema);if(Z.length===0)return;let $={context:this.context,body:this.params.body??{},runId:this.runId,threadId:this.params.threadId,signal:this.controller.signal},Q=new Map,B=await Promise.all(Z.map(async(V)=>{try{let J=V.tool.inputSchema,H=await J($);hZ(H,`The tool "${V.tool.name}"`,"inputSchema"),Q.set(V.tool.name,H);return}catch(J){return`"${V.tool.name}": ${J instanceof Error?J.message:String(J)}`}}));if(this.controller.signal.aborted)throw new M;let X=B.filter((V)=>V!==void 0);if(X.length>0)return{code:"tool_error",message:`Could not resolve the input schema of ${X.join("; ")}`,retryable:!1};let Y=new Map;for(let[V,J]of this.config.registry)Y.set(V,Q.has(V)?{...J,inputSchema:Q.get(V)}:J);let G=(V)=>Q.has(V.name)?bZ(Y.get(V.name)):V,z=this.config.providerTools.map((V)=>("tools"in V)?{...V,tools:V.tools.map(G)}:G(V));this.config={...this.config,registry:Y,providerTools:z};return}fail(Z,$={}){let Q={...Z,...$};this.failure=Q,this.emit({type:"error",error:this.redact(Q,{source:"run",failure:Q})})}redact(Z,$){let Q=mZ(this.params.redactError,Z,$,(B)=>this.writeLog(`[gemi/ai] agent "${this.config.name}" redactError threw`,{error:B}));return lZ(Q,Z),Q}logFailure(Z){let $=`[gemi/ai] agent "${this.config.name}" run failed (${Z.code}${Z.status!==void 0?` ${Z.status}`:""}): ${Z.message}`;this.writeLog($,{error:Z})}logToolFailure(Z,$){let Q=$ instanceof Error?$.message:String($);this.writeLog(`[gemi/ai] agent "${this.config.name}" tool "${String(Z.name)}" threw: ${Q}`,{toolCallId:Z.toolCallId,error:$})}writeLog(Z,$){let Q={agent:this.config.name,runId:this.runId,...this.params.threadId?{threadId:this.params.threadId}:{},...this.depth>0?{chain:this.chain}:{},...$},B=!1;try{p.error(Z,Q),B=!0}catch{}if(!B||Bun.env.NODE_ENV==="development")console.error(Z,Q)}async loop(){let Z=Math.max(1,this.config.maxSteps);for(let $=1;$<=Z;$++){let Q=this.startMessage(),B=await this.runStep(Q,$);if(this.lastStep={reason:B.reason,usage:Q.usage},B.error){this.fail(B.error,B.detail),await this.finalizeMessage("error"),this.finishReason="error";return}let X=Q.content.filter((G)=>G.type==="tool-call");if(X.length===0){this.finishReason=B.reason,await this.finalizeMessage(B.reason);return}let Y=await this.runTools(Q,X,$);if(Y.length>0){this.finishReason="awaiting-input",await this.finalizeMessage("awaiting-input"),this.emit({type:"awaiting-input",runId:this.runId,pending:Y});return}if($===Z){this.finishReason="max-steps",await this.finalizeMessage("max-steps");return}await this.finalizeMessage(B.reason)}}startMessage(){let Z={id:`msg_${crypto.randomUUID()}`,role:"assistant",content:[],createdAt:new Date().toISOString()};return this.current=Z,this.history.push(Z),this.produced.push(Z),this.emit({type:"message-start",messageId:Z.id,role:"assistant"}),Z}async finalizeMessage(Z){let $=this.current;if(!$)return;this.current=null;let Q=this.outputTruncated;if(this.outputTruncated=!1,$.finishReason=Z,Q)$.outputTruncated=!0;for(let B of $.content)if(B.type==="text"||B.type==="reasoning"){if(typeof B.text==="string")B.text=r(B.text)}this.emit({type:"message-end",messageId:$.id,finishReason:Z,...Q?{outputTruncated:!0}:{},...$.usage?{usage:$.usage}:{}}),await this.report($),await this.reportDeferred()}async report(Z){if(!this.params.onMessage)return;try{await this.params.onMessage(Z)}catch{}}async runStep(Z,$){let Q=this.controller.signal,B=this.config.provider,X=await this.prepareRequest(Z,$);if("error"in X)return{reason:"error",error:X.error};let Y={reason:"stop"},G=new Map,z=[],V=()=>{if(z.length===0)return{};let F=z;return z=[],{toolSearches:F}},J="",q=B.stream({messages:X.messages,systemPrompt:X.instructions,tools:this.config.providerTools.length>0?this.config.providerTools:void 0,output:this.config.output?s(this.config.output):void 0,reasoning:this.config.reasoning,maxOutputTokens:this.config.maxOutputTokens,temperature:this.config.temperature,signal:Q})[Symbol.asyncIterator]();for(;;){let F=await T(Promise.resolve(q.next()),Q);if(F.done)break;let K=F.value;switch(K.type){case"text-delta":{h(Z,"text",K.delta),this.emit({type:"text-delta",messageId:Z.id,delta:K.delta});break}case"reasoning-delta":{e(Z,K.id,K.delta),this.emit({type:"reasoning-delta",messageId:Z.id,delta:K.delta,id:K.id});break}case"output-delta":{J+=K.delta,this.emit({type:"output-delta",messageId:Z.id,delta:K.delta,snapshot:t(J)});break}case"tool-search":{z.push({namespaces:K.namespaces,loaded:K.loaded,...K.arguments!==void 0?{arguments:K.arguments}:{}}),this.emit({type:"tool-search",loaded:K.loaded});break}case"tool-call-delta":{let L=G.get(K.toolCallId)??{name:K.name,args:""};L.args+=K.argsDelta,L.name=K.name||L.name,L.namespace=K.namespace||L.namespace,G.set(K.toolCallId,L),this.emit({type:"tool-call",messageId:Z.id,part:{type:"tool-call",toolCallId:K.toolCallId,name:L.name,input:t(L.args),partial:!0,...L.namespace?{namespace:L.namespace}:{}}});break}case"tool-call":{let L=K.namespace||G.get(K.toolCallId)?.namespace;G.delete(K.toolCallId);let D={type:"tool-call",toolCallId:K.toolCallId,name:K.name,input:h0(K.args),...L?{namespace:L}:{},...V()};Z.content.push(D),this.emit({type:"tool-call",messageId:Z.id,part:D});break}case"finish":{if(this.usage=O(this.usage,K.usage),Z.usage=O(Z.usage??j(),K.usage),!Y.error)Y={reason:K.reason};break}case"error":{Y={reason:"error",error:K.error,detail:x(K)};break}case"file-rejected":{this.markFileRejected(K.fileId,K.message,x(K));break}}}for(let[F,K]of G){let L={type:"tool-call",toolCallId:F,name:K.name,input:h0(K.args),...K.namespace?{namespace:K.namespace}:{},...V()};Z.content.push(L),this.emit({type:"tool-call",messageId:Z.id,part:L})}let W=Y.reason==="length";if(W)this.outputTruncated=!0;if(this.config.output&&J&&!Y.error&&!W){let F=a(this.config.output,J);if(F.ok===!0)this.output=F.value,Z.content.push({type:"output",value:F.value});else this.emit({type:"error",error:F.error})}return Y}compactJobParams(Z,$){let Q=this.config.contextWindow;if(!Q?.compact||!this.params.threadId||this.depth!==0)return;let B=Q.compact===!0?{}:Q.compact;return{history:Z,stored:this.history.filter((X)=>X!==$),window:Q,compact:B,threadId:this.params.threadId,provider:this.config.provider,store:B.store||this.params.summaryStore||N0}}precompact(){let Z=this.config.contextWindow;if(!Z?.compact||Z.compact!==!0&&Z.compact.background===!1)return;try{let $=this.compactJobParams(this.historyForProvider(void 0),void 0);if($)I0($)}catch{}}async prepareRequest(Z,$){let Q=this.historyForProvider(Z),B=this.config.contextWindow,X=this.compactJobParams(Q,Z),Y=!B?Q:X?await _0({...X,signal:this.controller.signal,onUsage:(z)=>{this.usage=O(this.usage,z)},memo:this.compactMemo}):u(Q,B).messages,G=await this.systemPrompt();for(let z of this.config.prepareStep){let V;try{V=await z({step:$,messages:[...Y],history:[...Q],instructions:G,usage:this.usage,...this.lastStep?.usage?{lastStepUsage:this.lastStep.usage}:{},...this.lastStep?{lastFinishReason:this.lastStep.reason}:{},runId:this.runId,threadId:this.params.threadId,agent:this.config.name,depth:this.depth,context:this.context,signal:this.controller.signal})}catch(J){if(J instanceof M||this.controller.signal.aborted)throw J;return{error:{code:"unknown",message:`prepareStep threw: ${J instanceof Error?J.message:String(J)}`,retryable:!1}}}if(!V)continue;if(V.messages!==void 0){if(!Array.isArray(V.messages))return{error:{code:"unknown",message:"prepareStep answered `messages` that is not an array.",retryable:!1}};Y=V.messages}if(V.instructions!==void 0)G=V.instructions||void 0}return{messages:Y,instructions:G}}async systemPrompt(){let Z=[this.config.instructions,this.params.instructions].filter(($)=>Boolean($&&$.trim()));return Z.length>0?Z.join(`
 
 `):void 0}async runTools(Z,$,Q){let B=[],X=[];for(let Y of $){let G=this.config.registry.get(String(Y.name));if(!G){this.addResult(Z,{type:"tool-result",toolCallId:Y.toolCallId,name:Y.name,status:"error",error:{code:"tool_error",message:`There is no tool named "${String(Y.name)}".`,toolCallId:Y.toolCallId,retryable:!0}});continue}let z=G.inputSchema.safeParse(Y.input);if(z.ok===!1){this.addResult(Z,{type:"tool-result",toolCallId:Y.toolCallId,name:Y.name,status:"error",error:{code:"invalid_tool_input",message:`Invalid arguments for "${String(Y.name)}": ${z.errors.join(", ")}`,toolCallId:Y.toolCallId,retryable:!0}});continue}Y.input=z.value;let V=y0(G.tool);if(V){if(this.onPending==="deny"){this.addResult(Z,this.deniedByPolicy(Y));continue}B.push({toolCallId:Y.toolCallId,name:Y.name,input:z.value,kind:V,signature:X0(this.claimsFor(Y.toolCallId,String(Y.name),V,z.value)),...this.pathPrefix.length>0?{path:[...this.pathPrefix]}:{}});continue}X.push(this.executeTool(G,Z.id,Y,z.value,Q).then(async(J)=>{this.addResult(Z,J),await this.settleShown(Y.toolCallId)}).catch((J)=>{if(J instanceof v){if(this.onPending==="deny"){this.addResult(Z,this.deniedByPolicy(Y));return}B.push(...J.pending);return}}))}return await T(Promise.all(X).then(()=>{return}),this.controller.signal),B}claimsFor(Z,$,Q,B){return{runId:this.signingRunId,toolCallId:Z,name:$,kind:Q,input:B,path:this.pathPrefix.length>0?[...this.pathPrefix]:void 0,subject:this.params.subject??null}}deniedByPolicy(Z){return{type:"tool-result",toolCallId:Z.toolCallId,name:Z.name,status:"denied",cause:"refused",reason:`"${String(Z.name)}" needs the user, and this run was started with onPending: "deny". Answer from what you already have.`}}async executeTool(Z,$,Q,B,X,Y){let G=Z.tool.timeoutMs;if(G===void 0)return this.runToolBody(Z,$,Q,B,X,Y,this.controller.signal,()=>!1);let z=new AbortController,V=this.controller.signal,J=()=>z.abort(V.reason);if(V.aborted)J();else V.addEventListener("abort",J,{once:!0});let H=!1,q=this.runToolBody(Z,$,Q,B,X,Y,z.signal,()=>H),W=()=>{},F=new Promise((K)=>{W=x0(G,()=>{let L=`"${String(Q.name)}" did not finish within ${EZ(G)} (timeoutMs: ${G}) and was cancelled.`;z.abort(new DOMException(L,"TimeoutError")),K({type:"tool-result",toolCallId:Q.toolCallId,name:Q.name,status:"error",error:{code:"timeout",message:L,toolCallId:Q.toolCallId,retryable:!0}})})});q.catch(()=>{});try{return await Promise.race([q,F])}finally{H=!0,W()}}async runToolBody(Z,$,Q,B,X,Y,G,z){let V=this.toolFiles(Q,G),J={context:this.context,body:this.params.body??{},runId:this.runId,threadId:this.params.threadId,toolCallId:Q.toolCallId,signal:G,step:X,depth:this.depth,resumed:Y!==void 0,attachments:V.attachments,generateImage:V.generateImage,editImage:V.editImage,turn:this.toolTurn($),runAgent:this.nestedRunner($,Q,G,Y),generate:(H)=>this.generateForTool(H,G,Q.toolCallId),jobs:d0({jobs:this.depth===0?this.params.jobs:void 0,threadId:this.params.threadId,runId:this.runId,toolCallId:Q.toolCallId,toolName:String(Q.name),depth:this.depth,async:Z.tool.async,attachments:this.params.attachments??null})};try{let H=Z.tool.execute(B,J),q;if(Q4(H)){let W=await H.next();while(!W.done){if(z())throw H.return(void 0).catch(()=>{}),new M;this.emit({type:"tool-progress",toolCallId:Q.toolCallId,data:W.value}),W=await H.next()}q=W.value}else q=await H;if(c0(q)){if(q.toolCallId!==Q.toolCallId)throw new P(`"${String(Q.name)}" returned the handle of a job another tool call started. Return the handle from this call's own ctx.jobs.`,{retryable:!1});return{type:"tool-result",toolCallId:Q.toolCallId,name:Q.name,status:"running",job:{id:q.id,...q.summary!==void 0?{summary:q.summary}:{}}}}return{type:"tool-result",toolCallId:Q.toolCallId,name:Q.name,status:"ok",output:q}}catch(H){if(H instanceof M||this.controller.signal.aborted)throw new M;if(H instanceof v)throw H;let q=H instanceof P;if(!q&&this.config.logErrors)this.logToolFailure(Q,H);let W={code:"tool_error",message:H instanceof Error?H.message:String(H),toolCallId:Q.toolCallId,retryable:q?H.retryable:!0};return{type:"tool-result",toolCallId:Q.toolCallId,name:Q.name,status:"error",error:this.redact(W,{source:"tool",toolName:String(Q.name),cause:H})}}}async generateForTool(Z,$,Q){let B=this.controller.signal;return m({...Z,signal:Z.signal?AbortSignal.any([$,Z.signal]):$},{origin:{agent:this.config.name,runId:this.runId,...this.params.threadId?{threadId:this.params.threadId}:{},toolCallId:Q},settled:(X)=>{if(this.usage=O(this.usage,X.usage),B.aborted)throw new M}})}nestedRunner(Z,$,Q,B){let X=new wZ(()=>$.nested,()=>$.nested=[]);return async(Y,G={})=>{let{at:z,recorded:V,write:J}=X.next();if(V){let H=Y4(V,Y,G);if(H)throw new P(`Nested run ${z} of "${String($.name)}" ${H}. `+"runAgent is memoized by call index, so a body whose runAgent calls depend on a condition that changed between turns cannot be resumed \u2014 the answer would be paired with a different sub-run. "+"Make the sequence of runAgent calls, and what each one is asked, the same every time this tool runs, or branch on ctx.resumed.");if(V.finishReason!=="awaiting-input")return{runId:V.runId,agent:V.agent,messages:V.messages,finishReason:V.finishReason??"stop",usage:V.usage??j(),output:f0(V.messages),nested:V}}return this.runNested(Z,$,Q,Y,G,J,V,B?.answers??[])}}async runNested(Z,$,Q,B,X,Y,G,z){let V=[...this.chain,B.name];if(this.chain.includes(B.name))throw new P(`"${B.name}" is already running further up this chain: ${V.join(" -> ")}. An agent cannot run itself, directly or through another agent.`);let J=this.depth+1;if(J>this.maxDepth)throw new P(`Nested agent runs are ${this.maxDepth} deep at most and this one would be ${J}: ${V.join(" -> ")}. Raise maxDepth on the agent at the root of the run if the tree is meant to be this deep.`);let H=X.label,q=[...this.pathPrefix,$.toolCallId],W=this.onPending==="deny"?"deny":X.onPending??"escalate",F=G!==void 0,K=F?HZ(G.messages):new Set,L=F?z.filter((C)=>{let I=v0(C.path,q);if(I===null)return!1;return K.has(I.length>0?I[0]:C.toolCallId)}):[],D=B.stream({messages:F?G.messages:X.messages??[],turn:F?{toolResults:L}:X.prompt?{text:X.prompt}:void 0,context:this.context,attachments:this.params.attachments,body:this.params.body,signal:Q,threadId:this.params.threadId,redactError:this.params.redactError,nonces:this.params.nonces,receipts:this.params.receipts,subject:this.params.subject,instructions:X.instructions,maxOutputTokens:X.maxOutputTokens,temperature:X.temperature,runId:F?G.runId:void 0,nesting:{depth:J,maxDepth:this.maxDepth,chain:V,signingRunId:this.signingRunId,signingPath:q,onPending:W}}),U=[],f=(C)=>this.emit({type:"nested-event",toolCallId:$.toolCallId,runId:D.runId,agent:B.name,label:H,event:C}),i=(async()=>{for await(let C of D){if(C.type==="awaiting-input")U=C.pending;if(f(C),C.type==="run-start"&&!F)for(let I of X.messages??[])f({type:"message",message:I});if(C.type==="error")this.emit({type:"error",error:C.error,nested:{toolCallId:$.toolCallId,runId:D.runId,agent:B.name}})}})(),_=(async()=>{let C=await D.result();await i;let I=F?E0(G.messages,C.messages):E0(X.messages??[],C.messages),dZ={runId:D.runId,agent:B.name,label:H,messages:I,finishReason:C.finishReason,usage:F?O(G.usage??j(),C.usage):C.usage,...C.finishReason==="awaiting-input"?{signature:z0({runId:this.signingRunId,path:q,nestedRunId:D.runId,open:[...HZ(I)],input:$.input,subject:this.params.subject??null})}:{}};return Y(dZ),this.usage=O(this.usage,C.usage),{result:C,record:dZ}})(),N=_.then(()=>{return},()=>{return});this.nestedSettling.add(N);let b,k;try{({result:b,record:k}=await _)}finally{this.nestedSettling.delete(N)}if(this.controller.signal.aborted)throw new M;if(b.finishReason==="awaiting-input"){if(U.length===0)throw new P(`"${B.name}" ended awaiting input but asked nothing, so there is no question to escalate.`);throw this.emit({type:"tool-call",messageId:Z,part:$,resent:!0}),new v({pending:U,path:q,nested:k})}return{runId:k.runId,agent:B.name,messages:k.messages,finishReason:b.finishReason,usage:k.usage??j(),output:b.output??f0(k.messages),...b.error?{error:b.error}:{},nested:k}}addResult(Z,$){Z.content.push($),this.emit({type:"tool-result",messageId:Z.id,part:$})}toolFiles(Z,$){let Q=this.params.attachments??null,B=new wZ(()=>Z.attachments,()=>Z.attachments=[],()=>({failed:!0})),X=()=>{if(!Q)throw new w("This request has no attachment scope, so a tool cannot store or read files on it. `attachmentScope()` returned null \u2014 put the chat route behind authentication, send a `threadId`, or override `attachmentScope()` on the controller.");return Q},Y=async(J,H,q)=>{let W=X(),F=H.mimeType||J.type||"",K=H.name??(J instanceof File?J.name:"attachment"),L;if(H.showModel){let U=this.config.provider;if(!U.capabilities.fileInput)throw new P(`"${String(Z.name)}" asked to show a file to ${U.model}, which does not accept file input. Drop \`showModel\` for this provider, or run this agent on a model that takes files \u2014 \`capabilities.fileInput\` is what says which do.`);L=await U.upload(new File([J],K,{type:F||void 0}))}return{attachment:await W.put(J,{name:K,mimeType:F,fileId:L}),...q?{generated:q}:{},...L?{shown:{fileId:L,messageId:`msg_${crypto.randomUUID()}`,createdAt:new Date().toISOString()}}:{}}},G=(J,H,q)=>{let W=J.generated?"image":"put";if(W===H)return;throw new P(`Attachment ${q} of "${String(Z.name)}" was ${W==="image"?"a generated image":"a stored file"} on the first attempt and is ${H==="image"?"a generated image":"a stored file"} now. ctx.attachments.put, ctx.generateImage and ctx.editImage share one memo indexed by call order within a tool call, so the sequence has to be the same every time this tool runs. Branch on ctx.resumed if it cannot be.`)},z=async(J,H,q)=>{let{at:W,recorded:F,write:K}=B.next();if(F&&"attachment"in F){if(G(F,"image",W),F.shown)this.queueShown(Z.toolCallId,F);return{attachment:F.attachment,size:F.generated.size,mimeType:F.attachment.mimeType,usage:F.generated.usage}}let L=await q();this.usage=O(this.usage,L.usage);let D=L.mimeType==="image/jpeg"?"jpg":"png",U=await Y(L.image,{name:H.name??`${J.name}.${D}`,mimeType:L.mimeType,...H.showModel?{showModel:!0}:{}},{size:L.size,usage:L.usage});if(K(U),U.shown)this.queueShown(Z.toolCallId,U);return{attachment:U.attachment,size:L.size,mimeType:L.mimeType,usage:L.usage}},V=async(J)=>typeof J==="string"?await X().file(J):J;return{generateImage:(J,H)=>z(J,H,()=>J.generate({...H,signal:$})),editImage:(J,H)=>z(J,H,async()=>{let{images:q,mask:W,...F}=H;return await J.edit({...F,images:await Promise.all(q.map(V)),...W?{mask:await V(W)}:{},signal:$})}),attachments:{get:(J)=>X().get(J),read:(J)=>X().read(J),file:(J)=>X().file(J),put:async(J,H={})=>{let{at:q,recorded:W,write:F}=B.next();if(W&&"attachment"in W){G(W,"put",q);let L=X4(W,J,H);if(L)throw new P(`Attachment ${q} of "${String(Z.name)}" ${L}. `+"ctx.attachments.put is memoized by call index within a tool call, so a body whose put calls depend on a condition that changed between turns cannot be replayed \u2014 the model would be shown a file under an id that names different bytes. "+"Make the sequence of put calls the same every time this tool runs, or branch on ctx.resumed.");if(W.shown)this.queueShown(Z.toolCallId,W);return W.attachment}let K=await Y(J,H);if(F(K),K.shown)this.queueShown(Z.toolCallId,K);return K.attachment}}}}toolTurn(Z){let $=this.history.findIndex((Y)=>Y.id===Z),Q=YZ(this.history),B;for(let Y=$-1;Y>=0;Y--){let G=this.history[Y];if(G.role!=="user"||Q.has(G.id))continue;B=G;break}let X=[];for(let Y of B?.content??[]){if(Y.type!=="file")continue;let G=Y.attachmentId;if(typeof G!=="string"||!G.startsWith(CZ))continue;if(!X.includes(G))X.push(G)}return Object.freeze({attachments:Object.freeze(X)})}queueShown(Z,$){let Q=$.shown;if(!Q)return;let B=this.shownQueue.get(Z)??[];if(B.some((X)=>X.id===Q.messageId))return;B.push({id:Q.messageId,role:"user",content:[{type:"file",fileId:Q.fileId,name:$.attachment.name,mimeType:$.attachment.mimeType,attachmentId:$.attachment.id}],createdAt:Q.createdAt,finishReason:"stop"}),this.shownQueue.set(Z,B)}async settleShown(Z){let $=this.shownQueue.get(Z);if(!$||$.length===0)return;if(this.shownQueue.delete(Z),this.ended||this.controller.signal.aborted)return;for(let Q of $){if(this.history.some((B)=>B.id===Q.id))continue;this.history.push(Q),this.produced.push(Q),this.emit({type:"message",message:Q}),this.unreported.add(Q)}}historyForProvider(Z){let $=this.history.filter((Y)=>Y!==Z),Q=YZ($),B=[];for(let Y of $){if(!Q.has(Y.id))continue;for(let G of Y.content)if(G.type==="file")B.push(G)}if(B.length<=w0)return $;let X=new Set(B.slice(0,B.length-w0));return $.map((Y)=>{if(!Y.content.some((G)=>G.type==="file"&&X.has(G)))return Y;return{...Y,content:Y.content.map((G)=>G.type==="file"&&X.has(G)?{type:"text",text:`[A ${G.mimeType||"file"} produced by a tool (attachment ${G.attachmentId}) was attached here and has been dropped from this request: only the most recent tool-produced file is kept attached, to keep the context bounded. Call the tool again if you need to look at it.]`}:G)}})}async ingestTurn(){let Z=this.params.turn,$=this.openCalls(),Q=[];if($.length>0){let B=new Set,X=new Set,Y=new Map;for(let G of Z?.toolResults??[]){let z=`${(G.path??[]).join("/")}#${G.toolCallId}`;if(X.has(z))continue;X.add(z);let V=(W)=>this.emit({type:"error",error:{code:"invalid_tool_result",message:W,toolCallId:G.toolCallId,retryable:!1}}),J=v0(G.path,this.pathPrefix);if(J===null){V(`The answer for "${G.toolCallId}" is addressed to a tool call this run is not inside.`);continue}if(J.length>0){let W=J[0],F=$.find((D)=>D.call.toolCallId===W);if(!F){V(`No pending tool call with id "${W}" to deliver a nested answer to.`);continue}let K=this.parkedBelow(F.call,J,G.toolCallId);if(K.ok===!1){let D=`The answer for "${G.toolCallId}" is addressed under "${W}", which`;V(K.reason==="unparked"?`${D} has no sub-agent run waiting on that question.`:K.reason==="expired"?`${D} parked a sub-agent run that has since expired. Ask again.`:`${D} carries a record of a parked sub-agent run the server did not sign.`);continue}let L=Y.get(W);if(!L){if(!await this.spend(K0,K.signature)){V(`The answer for "${G.toolCallId}" is addressed under "${W}", which has already been re-entered on that record. Ask again.`);continue}L=[],Y.set(W,L),B.add(W)}L.push(G);continue}let H=$.find((W)=>W.call.toolCallId===G.toolCallId);if(!H){V(`No pending tool call with id "${G.toolCallId}".`);continue}let q=await this.resolveAnswer(H,G,Q);if(q===null)continue;if(B.add(G.toolCallId),q!=="open")this.attachToHistory(H,q),await this.settleShown(G.toolCallId)}for(let[G,z]of Y){let V=$.find((H)=>H.call.toolCallId===G),J=await this.reenter(V,z,Q);if(J)this.attachToHistory(V,J),await this.settleShown(G)}for(let G of $){if(B.has(G.call.toolCallId))continue;this.attachToHistory(G,{type:"tool-result",toolCallId:G.call.toolCallId,name:G.call.name,status:"denied",cause:"refused"})}await this.reportDeferred()}if(Z&&(Z.text||Z.files&&Z.files.length>0)){let B={id:`msg_${crypto.randomUUID()}`,role:"user",content:[...Z.text?[{type:"text",text:Z.text}]:[],...(Z.files??[]).map((X)=>({type:"file",...X.fileId?{fileId:X.fileId}:{},name:X.name,mimeType:X.mimeType,...X.attachmentId?{attachmentId:X.attachmentId}:{}}))],createdAt:new Date().toISOString(),finishReason:"stop"};if(this.history.push(B),this.produced.push(B),this.depth>0)this.emit({type:"message",message:B});else if(Z.localId)this.emit({type:"message-id",localId:Z.localId,messageId:B.id,message:B});if(await this.report(B),this.params.onTurn)try{await this.params.onTurn(B)}catch{}}return Q}parkedBelow(Z,$,Q){let B=$.length>1?$[1]:Q,X=[...this.pathPrefix,Z.toolCallId],Y=(Z.nested??[]).find((z)=>z.finishReason==="awaiting-input"&&HZ(z.messages).has(B));if(!Y)return{ok:!1,reason:"unparked"};if(typeof Y.signature!=="string")return{ok:!1,reason:"unsigned"};let G=H0(Y.signature,{path:X,nestedRunId:Y.runId,open:[...HZ(Y.messages)],input:Z.input,subject:this.params.subject??null});if(G.ok===!1)return{ok:!1,reason:G.reason==="expired"?"expired":"unsigned"};return{ok:!0,signature:Y.signature}}async reenter(Z,$,Q){let B=String(Z.call.name),X=this.config.registry.get(B);if(!X||!X.tool.execute)return{type:"tool-result",toolCallId:Z.call.toolCallId,name:Z.call.name,status:"error",error:{code:"invalid_tool_result",message:`The tool "${B}" no longer exists, so the sub-agent's question cannot be delivered.`,toolCallId:Z.call.toolCallId,retryable:!1}};let Y=X.inputSchema.safeParse(Z.call.input);if(Y.ok===!1)return{type:"tool-result",toolCallId:Z.call.toolCallId,name:Z.call.name,status:"error",error:{code:"invalid_tool_input",message:`Invalid arguments for "${B}": ${Y.errors.join(", ")}`,toolCallId:Z.call.toolCallId,retryable:!0}};let G=this.amendCall(Z);G.input=Y.value;try{return await T(this.executeTool(X,Z.message.id,G,Y.value,0,{answers:$}),this.controller.signal)}catch(z){if(z instanceof v)return Q.push(...z.pending),null;throw z}}amendCall(Z){let $=this.amend(Z.message),Q=$.content.indexOf(Z.call),B={...Z.call,nested:(Z.call.nested??[]).map((X)=>({...X})),...Z.call.attachments?{attachments:Z.call.attachments.map((X)=>({...X}))}:{}};if(Q>=0)$.content[Q]=B;return this.unreported.add($),B}openCalls(){let Z=new Set;for(let Q of this.history)for(let B of Q.content)if(B.type==="tool-result")Z.add(B.toolCallId);let $=[];for(let Q of this.history)for(let B of Q.content)if(B.type==="tool-call"&&!Z.has(B.toolCallId))$.push({message:Q,call:B});return $}async spend(Z,$){try{return await Z($,this.params.nonces??DZ)}catch(Q){return this.writeLog(`[gemi/ai] agent "${this.config.name}" could not spend a nonce`,{error:Q}),!1}}async recordReceipt(Z,$){let Q=await $;try{await Z.store.complete(Z.id,Q,Z.expiresAt)}catch(B){this.writeLog(`[gemi/ai] agent "${this.config.name}" could not record a tool receipt`,{error:B})}return Q}async resolveAnswer(Z,$,Q){let B=Z.call,X=String(B.name),Y=this.config.registry.get(X),G=(q)=>{return this.emit({type:"error",error:{code:"invalid_tool_result",message:q,toolCallId:B.toolCallId,retryable:!1}}),null};if(!Y)return G(`The tool "${X}" no longer exists, so its answer cannot be checked.`);let z=y0(Y.tool);if(!z)return G(`"${X}" is a server tool with no pending question.`);if(typeof $.signature!=="string"||$.signature.length===0)return G(`The answer for "${X}" carried no signature.`);let V=IZ($.signature);if(!V)return G(`The signature for "${X}" is malformed.`);let J=Y0($.signature,{...this.claimsFor(B.toolCallId,X,z,B.input),runId:V.runId});if(J.ok===!1)return G(J.reason==="expired"?`The approval for "${X}" has expired. Ask again.`:`The answer for "${X}" does not match the call the server made.`);let H;if(this.params.receipts&&z==="approval"&&"approve"in $&&$.approve===!0){let q=this.params.receipts,W=W0(this.config.name,{...this.claimsFor(B.toolCallId,X,z,B.input),runId:V.runId}),F;try{F=await q.claim(W,V.expiresAt)}catch(K){return this.writeLog(`[gemi/ai] agent "${this.config.name}" could not claim a tool receipt`,{error:K}),G(`The approval for "${X}" could not be checked. Ask again.`)}if(F.status==="replay")return{...F.result,toolCallId:B.toolCallId,name:B.name};if(F.status==="blocked")return{type:"tool-result",toolCallId:B.toolCallId,name:B.name,status:"error",error:{code:"tool_error",message:`"${X}" was already approved and started, and its result is not recorded yet: it is still running, or it stopped before finishing. It was not run again.`,toolCallId:B.toolCallId,retryable:!1}};H={store:q,id:W,expiresAt:V.expiresAt}}if(!await this.spend(q0,$.signature))return await H?.store.release(H.id).catch((q)=>{this.writeLog(`[gemi/ai] agent "${this.config.name}" could not release a tool receipt`,{error:q})}),G(`The answer for "${X}" has already been used. Ask again.`);if("approve"in $){if(z!=="approval")return G(`"${X}" is answered by the client, not approved.`);if($.approve===!0){let q=this.amendCall(Z),W=this.executeTool(Y,Z.message.id,q,q.input,0);try{return await T(H?this.recordReceipt(H,W):W,this.controller.signal)}catch(F){if(F instanceof v)return Q.push(...F.pending),"open";throw F}}return{type:"tool-result",toolCallId:B.toolCallId,name:B.name,status:"denied",cause:"refused",reason:$.reason}}if("output"in $){if(z==="approval")return G(`"${X}" is approved, not answered: the server produces its result.`);let q=Y.tool.outputSchema,W=q?q.safeParse($.output):{ok:!0,value:$.output};if(W.ok===!1)return{type:"tool-result",toolCallId:B.toolCallId,name:B.name,status:"error",error:{code:"invalid_tool_result",message:`The answer for "${X}" did not match its output schema: ${W.errors.join(", ")}`,toolCallId:B.toolCallId,retryable:!0}};return{type:"tool-result",toolCallId:B.toolCallId,name:B.name,status:"ok",output:W.value}}return G(`The answer for "${X}" carried neither an approval nor an output.`)}attachToHistory(Z,$){let Q=this.amend(Z.message);Q.content.push($),this.unreported.add(Q),this.emit({type:"tool-result",messageId:Q.id,part:$})}markFileRejected(Z,$,Q){for(let G of this.history){if(!G.content.some((J)=>J.type==="file"&&J.fileId===Z&&!J.providerRejected))continue;let V=this.produced.includes(G)?G:this.amend(G);if(V.content=V.content.map((J)=>J.type==="file"&&J.fileId===Z&&!J.providerRejected?{...J,providerRejected:!0}:J),V!==this.current)this.unreported.add(V)}if(!this.config.logErrors)return;let B=`[gemi/ai] agent "${this.config.name}": the provider refused file ${Z}${Q.status!==void 0?` (${Q.status})`:""}; it was left out of the request and will not be sent again: ${$}`,X={agent:this.config.name,runId:this.runId,...this.params.threadId?{threadId:this.params.threadId}:{},fileId:Z,...Q},Y=!1;try{p.warning(B,X),Y=!0}catch{}if(!Y||Bun.env.NODE_ENV==="development")console.warn(B,X)}amend(Z){let $=this.amended.get(Z.id);if($)return $;let Q={...Z,content:[...Z.content]},B=this.history.indexOf(Z);if(B>=0)this.history[B]=Q;return this.produced.push(Q),this.amended.set(Z.id,Q),Q}async reportDeferred(){let Z=[...this.unreported];this.unreported.clear();for(let $ of Z)await this.report($)}async finalizeAborted(){if(this.nestedSettling.size>0)await Promise.all([...this.nestedSettling]);for(let $ of this.openCalls()){if($.message===this.current)continue;this.attachToHistory($,{type:"tool-result",toolCallId:$.call.toolCallId,name:$.call.name,status:"denied",cause:"stopped",reason:this.stopReason})}await this.reportDeferred();let Z=this.current;if(Z){let $=new Set(Z.content.filter((Q)=>Q.type==="tool-result").map((Q)=>Q.toolCallId));for(let Q of[...Z.content]){if(Q.type!=="tool-call"||$.has(Q.toolCallId))continue;delete Q.partial,this.addResult(Z,{type:"tool-result",toolCallId:Q.toolCallId,name:Q.name,status:"denied",cause:"stopped",reason:this.stopReason})}}if(this.timedOutAfter!==void 0){this.fail({code:"timeout",message:`The run did not finish within its time limit of ${EZ(this.timedOutAfter)} (maxRunDurationMs: ${this.timedOutAfter}) and was stopped.`,retryable:!0}),this.finishReason="error",await this.finalizeMessage("error");return}this.finishReason="aborted",await this.finalizeMessage("aborted")}}function y0(Z){if(Z.answeredBy==="client")return Z.inputSchema===vZ?"question":"client";return Z.requiresApproval?"approval":null}function h0(Z){if(!Z||!Z.trim())return{};try{return JSON.parse(Z)}catch{return Z}}function T0(Z){return m(Z)}async function m(Z,$={}){let Q=`gen_${crypto.randomUUID()}`,B=await J4(Z);if($.settled?.(B),!B.ok){if(Z.logErrors!==!1&&B.error.code!=="aborted")G4(Q,B.error,$.origin);if(Z.throwOnError)throw new KZ({runId:Q,messages:B.messages,finishReason:B.finishReason,usage:B.usage,error:B.error})}return B}function G4(Z,$,Q){let B=`[gemi/ai] generate() failed (${$.code}${$.status!==void 0?` ${$.status}`:""}): ${$.message}`,X={...Q,generateId:Z,error:$},Y=!1;try{p.error(B,X),Y=!0}catch{}if(!Y||Bun.env.NODE_ENV==="development")console.error(B,X)}async function J4(Z){let $=Z.messages??[];if($.length===0&&!Z.prompt)throw Error("generate() was given neither a `prompt` nor `messages`, so there is nothing to send the model.");let Q=[...$];if(Z.prompt)Q.push({id:`msg_${crypto.randomUUID()}`,role:"user",content:[{type:"text",text:Z.prompt}],createdAt:new Date().toISOString()});let B={id:`msg_${crypto.randomUUID()}`,role:"assistant",content:[],createdAt:new Date().toISOString()},X=Z.signal??new AbortController().signal,Y=j(),G="stop",z,V={},J="";try{let F=Z.provider.stream({messages:[...Q],systemPrompt:Z.instructions?.trim()?Z.instructions:void 0,output:s(Z.output),reasoning:Z.reasoning,maxOutputTokens:Z.maxOutputTokens,temperature:Z.temperature,signal:Z.signal})[Symbol.asyncIterator]();try{for(;;){let K=await T(Promise.resolve(F.next()),X);if(K.done)break;let L=K.value;switch(L.type){case"output-delta":J+=L.delta;break;case"text-delta":h(B,"text",L.delta);break;case"reasoning-delta":e(B,L.id,L.delta);break;case"finish":if(Y=O(Y,L.usage),!z)G=L.reason;break;case"error":G="error",z=L.error,V=x(L);break}}}finally{if(X.aborted)Promise.resolve(F.return?.()).catch(()=>{})}}catch(W){if(W instanceof M||X.aborted)G="aborted",z=V4(X);else G="error",z=Z.provider.normalizeError(W),V=x(W)}let H=!1,q;if(!z)if(G==="length")z={code:"invalid_output",message:"The model ran out of output tokens before finishing its structured answer, so it was cut off. Raise maxOutputTokens, or ask for a shorter answer.",retryable:!0};else if(!J.trim())z={code:"invalid_output",message:"The model finished without giving a structured answer.",retryable:!0};else{let W=a(Z.output,J);if(W.ok===!0)H=!0,q=W.value;else z=W.error}if(H)B.content.push({type:"output",value:q});else if(J)h(B,"text",J);for(let W of B.content)if((W.type==="text"||W.type==="reasoning")&&typeof W.text==="string")W.text=r(W.text);if(B.finishReason=G,B.usage=Y,Q.push(B),H)return{ok:!0,output:q,messages:Q,usage:Y,finishReason:G};return{ok:!1,error:{...z,...V},messages:Q,usage:Y,finishReason:G}}function V4(Z){return Z.reason?.name==="TimeoutError"?{code:"timeout",message:"The generation timed out.",retryable:!0}:{code:"aborted",message:"The generation was stopped.",retryable:!1}}var e0=Symbol.for("gemi.ai.JobHandle");class Z1{id;toolCallId;summary;deadlineAt;[e0]=!0;constructor(Z,$,Q,B){this.id=Z;this.toolCallId=$;this.summary=Q;this.deadlineAt=B}}function c0(Z){return typeof Z==="object"&&Z!==null&&Z[e0]===!0}class uZ extends P{code="jobs_require_thread";constructor(Z){super(Z,{retryable:!1});this.name="JobsRequireThreadError"}}var y=new jZ,z4=["running","ok","error"],cZ={get store(){return y},use(Z){y=Z},get(Z){return y.get(Z)},async settle(Z,$){return FZ(y,Z,$)},async fail(Z,$){return FZ(y,Z,{error:$})},async sweep(Z={}){let $=y,Q=Z.limit??100,B=await H4($),X=0;for(let Y of await $.overdue(B,Q))if(await W4($,Y))X++;return X}};async function H4(Z){return Z.now?await Z.now():Date.now()}function W4(Z,$){return Z.transition($.id,["running"],{state:"error",error:{code:"timeout",message:`The background job for "${$.toolName}" did not finish before its deadline, so it was given up on. Its result, if it ever arrives, is ignored.`,toolCallId:$.toolCallId,retryable:!0}})}async function FZ(Z,$,Q){let B=await Z.get($);if(!B||B.state!=="running")return!1;let X=Q.usage?O(B.usage??j(),Q.usage):void 0;if("error"in Q)return Z.transition($,["running"],{state:"error",error:q4(B,Q.error),...X?{usage:X}:{}});return Z.transition($,["running"],{state:"ok",output:$1(Q.output,B),...X?{usage:X}:{}})}function q4(Z,$){if(typeof $==="string")return{code:"tool_error",message:$,toolCallId:Z.toolCallId,retryable:!0};if($ instanceof Error){let Q={code:"tool_error",message:$.message,toolCallId:Z.toolCallId,retryable:$ instanceof P?$.retryable:!0};if(!($ instanceof P))console.error(`The background job ${Z.job??"(tracked)"} for "${Z.toolName}" failed.`,$);return n(Q,{source:"tool",toolName:Z.toolName,cause:$})}return{code:$.code??"tool_error",message:String($.message),toolCallId:Z.toolCallId,retryable:$.retryable??!0}}function $1(Z,$){if(Z===void 0)return null;try{return JSON.parse(JSON.stringify(Z))}catch(Q){throw Error(`The output of the background job for "${$.toolName}" is not JSON: ${String(Q)}`)}}var K4=3600000;function d0(Z){let $=null,Q=(B,X,Y={})=>{if(Z.async===void 0)throw new P(`"${Z.toolName}" called ctx.jobs, but the tool does not declare \`async\`. Add \`async: { deadlineMs }\` to its definition.`,{retryable:!1});if(!Z.jobs||!Z.threadId)throw new uZ(`"${Z.toolName}" can only run in the background on a conversation the server keeps (a turn with a threadId), and this one has none.`);if(Z.depth>0)throw new uZ(`"${Z.toolName}" can only run in the background from the top-level agent, not from a sub-agent.`);if($)throw new P(`"${Z.toolName}" started a background job already: a tool call has at most one.`,{retryable:!1});let G=Y.deadlineMs??Z.async.deadlineMs??K4;if(!Number.isFinite(G)||G<=0)throw new P(`A job's deadlineMs must be a positive number; got ${G}.`);let{jobs:z,threadId:V}=Z;return $=(async()=>{let J=cZ.store,H=(await J.listForThread(V,{limit:50})).find((F)=>F.toolCallId===Z.toolCallId);if(H)return o0(H);let q=async()=>{let F=await J.create({id:`ajob_${crypto.randomUUID()}`,threadId:V,runId:Z.runId,toolCallId:Z.toolCallId,toolName:Z.toolName,owner:z.owner,job:B?B.name:null,...Y.summary!==void 0?{summary:$1(Y.summary,Z)}:{},attachmentScope:Z.attachments?.scopeKey??null,deadlineMs:G});if(B)try{await F4(B,{jobId:F.id,args:X})}catch(K){if(J.transaction)throw K;throw await J.transition(F.id,["running"],{state:"error",error:{code:"tool_error",message:`The background job for "${Z.toolName}" could not be queued.`,toolCallId:Z.toolCallId,retryable:!0}}).catch(()=>{}),K}return F},W=J.transaction?await J.transaction(q):await q();return o0(W)})(),$};return{start:(B,X,Y)=>Q(B,X,Y),track:(B)=>Q(null,void 0,B)}}function o0(Z){return new Z1(Z.id,Z.toolCallId,Z.summary,Z.deadlineAt)}function F4(Z,$){if(Z.name==="unset"||!Z.name)throw Error("Cannot start an AgentJob with no `static name`.");return l(a0).push(Z,JSON.stringify([$]))}class L4 extends r0{attachments=oZ;attachmentStorage=s0;constructor(){super();let Z=this.run;this.run=($)=>this.$runEnvelope($,Z)}onDeadletter(Z,...$){let Q=$[0];if(!Q?.jobId)return;FZ(cZ.store,Q.jobId,{error:Z}).catch((B)=>{console.error(`Could not record the failure of background job ${Q.jobId}.`,B)})}async $runEnvelope(Z,$){let Q=cZ.store,B=await Q.get(Z.jobId);if(!B||B.state!=="running")return;let X=new Q1(B,this),Y;try{Y=await $.call(this,Z.args,X)}catch(G){throw await t0(Q,B.id,X.usage),G}if(this.$outcome)return await t0(Q,B.id,X.usage),Y;return await FZ(Q,B.id,{output:Y,usage:X.usage}),Y}}async function t0(Z,$,Q){if(Q.totalTokens===0&&Q.inputTokens===0&&Q.outputTokens===0)return;let B=await Z.get($);if(!B)return;await Z.transition($,z4,{usage:O(B.usage??j(),Q)}).catch(()=>{})}class Q1{id;threadId;toolCallId;toolName;owner;summary;signal=new AbortController().signal;usage=j();attachments;constructor(Z,$){this.id=Z.id,this.threadId=Z.threadId,this.toolCallId=Z.toolCallId,this.toolName=Z.toolName,this.owner=Z.owner,this.summary=Z.summary;let Q=Z.attachmentScope?new OZ($.attachments,$.attachmentStorage,{key:Z.attachmentScope}):null,B=()=>{if(!Q)throw new w("The run that started this job had no attachment scope, so the job cannot store or read files. See `attachmentScope()` on the controller.");return Q};this.attachments={put:(X,Y={})=>B().put(X,Y),get:(X)=>B().get(X),read:(X)=>B().read(X),file:(X)=>B().file(X)}}generate(Z){return m(Z,{origin:{threadId:this.threadId,toolCallId:this.toolCallId,jobId:this.id},settled:($)=>{this.usage=O(this.usage,$.usage)}})}async generateImage(Z,$){let{name:Q,...B}=$,X=await Z.generate({...B,signal:this.signal});return this.park(Z,X,Q)}async editImage(Z,$){let{name:Q,images:B,mask:X,...Y}=$,G=async(V)=>typeof V==="string"?await this.attachments.file(V):V,z=await Z.edit({...Y,images:await Promise.all(B.map(G)),...X?{mask:await G(X)}:{},signal:this.signal});return this.park(Z,z,Q)}async park(Z,$,Q){this.usage=O(this.usage,$.usage);let B=$.mimeType==="image/jpeg"?"jpg":"png";return{attachment:await this.attachments.put($.image,{name:Q??`${Z.name}.${B}`,mimeType:$.mimeType}),size:$.size,mimeType:$.mimeType,usage:$.usage}}}
-export{pZ as Vb,B1 as Wb,DZ as Xb,g as Yb,R as Zb,j as _b,O as $b,P as ac,n as bc,C4 as cc,PZ as dc,w as ec,CZ as fc,Y1 as gc,OZ as hc,G1 as ic,nZ as jc,oZ as kc,jZ as lc,Z1 as mc,c0 as nc,uZ as oc,cZ as pc,H4 as qc,W4 as rc,K4 as sc,d0 as tc,L4 as uc,L0 as vc,D0 as wc,x as xc,T4 as yc,YZ as zc,GZ as Ac,x4 as Bc,j1 as Cc,N1 as Dc,R1 as Ec,u as Fc,A1 as Gc,S1 as Hc,E1 as Ic,f1 as Jc,M0 as Kc,w1 as Lc,N0 as Mc,y4 as Nc,h4 as Oc,v as Pc,WZ as Qc,yZ as Rc,p0 as Sc,zZ as Tc,m0 as Uc,KZ as Vc,i0 as Wc,T0 as Xc,m as Yc};
+export{pZ as Wb,B1 as Xb,DZ as Yb,g as Zb,R as _b,j as $b,O as ac,P as bc,n as cc,C4 as dc,PZ as ec,w as fc,CZ as gc,Y1 as hc,OZ as ic,G1 as jc,nZ as kc,oZ as lc,jZ as mc,Z1 as nc,c0 as oc,uZ as pc,cZ as qc,H4 as rc,W4 as sc,K4 as tc,d0 as uc,L4 as vc,L0 as wc,D0 as xc,x as yc,T4 as zc,YZ as Ac,GZ as Bc,x4 as Cc,j1 as Dc,N1 as Ec,R1 as Fc,u as Gc,A1 as Hc,S1 as Ic,E1 as Jc,f1 as Kc,M0 as Lc,w1 as Mc,N0 as Nc,y4 as Oc,h4 as Pc,v as Qc,WZ as Rc,yZ as Sc,p0 as Tc,zZ as Uc,m0 as Vc,KZ as Wc,i0 as Xc,T0 as Yc,m as Zc};
 
-//# debugId=241298387D4B8B2664756E2164756E21
+//# debugId=B45F53446952E38764756E2164756E21