gemi 0.163.0 → 0.163.2

package/dist/{chunk-tx3t5qnt.js → chunk-c15xvw31.js}

@@ -1,5 +1,5 @@
 // @bun
-import{W as T,Y as m,Z as P,_ as u}from"./chunk-yb41jbdc.js";import{na as h,oa as v}from"./chunk-8x0q9h0j.js";import"./chunk-bwg7genv.js";import"./chunk-mvd4mc8p.js";import"./chunk-7txst143.js";import"./chunk-zzgzz4hb.js";import"./chunk-s0z61m9j.js";import"./chunk-a5qn2sq8.js";import{Ri as N}from"./chunk-kscwjycy.js";import{hl as y}from"./chunk-22jm6sn1.js";import{xl as S}from"./chunk-51fvpq55.js";import"./chunk-wgre66wq.js";import{join as XJ}from"path";import{createServer as KJ}from"vite";import{join as n}from"path";import{existsSync as i}from"fs";import{IncomingMessage as o,ServerResponse as a}from"http";import{Socket as t}from"net";function p(J){return J.replace(/\x1b\[[0-9;]*m/g,"").replace(/\[[0-9;]*m/g,"").replace(/\n\s*\n/g,`
+import{W as T,Y as m,Z as P,_ as u}from"./chunk-v5sqsxsf.js";import{na as h,oa as v}from"./chunk-8x0q9h0j.js";import"./chunk-bwg7genv.js";import"./chunk-mvd4mc8p.js";import"./chunk-7txst143.js";import"./chunk-zzgzz4hb.js";import"./chunk-s0z61m9j.js";import"./chunk-a5qn2sq8.js";import{Ri as N}from"./chunk-kscwjycy.js";import{hl as y}from"./chunk-22jm6sn1.js";import{xl as S}from"./chunk-51fvpq55.js";import"./chunk-wgre66wq.js";import{join as XJ}from"path";import{createServer as KJ}from"vite";import{join as n}from"path";import{existsSync as i}from"fs";import{IncomingMessage as o,ServerResponse as a}from"http";import{Socket as t}from"net";function p(J){return J.replace(/\x1b\[[0-9;]*m/g,"").replace(/\[[0-9;]*m/g,"").replace(/\n\s*\n/g,`
 `).split(`
 `).map((W)=>W.trim()).filter((W)=>W.length>0).join(`
 `).trim()}function C(J){return`

package/dist/{chunk-my8hz9k0.js → chunk-s8kenmvr.js}

@@ -1,5 +1,5 @@
 // @bun
-import{Dc as F9,Qc as N9,Yb as M9,ac as K3,bc as R9,fc as U9,kc as e,sd as B9,xc as J9}from"./chunk-y4bjsyt4.js";import{Bd as B3,Ed as p9,Fd as c9,Gd as H$,Id as _$,zd as p3}from"./chunk-z2btwd27.js";import{$d as u9,Ld as v9,Qd as h9,Sd as g9,Zd as x,_d as m9,be as d9,ce as P$}from"./chunk-nc1gstvq.js";import{fe as P}from"./chunk-fv1r0w0r.js";import{Ag as e9,Be as j$,Bg as $$,Cg as w3,Dg as a,Ee as V$,Ef as H3,Ff as g3,Gf as k,Gg as C$,Hg as L3,Ig as d3,Jf as K$,Kf as W$,Lf as X$,Nf as w,Ng as Y$,Oe as U$,Og as Q$,Pe as c3,Te as J3,Ue as X3,Ug as O$,_f as a3,jg as t3,kf as m3,lg as n,pg as o3,qg as o9,rg as a9,te as l,ue as G$,xe as k9,xg as f3,yf as Z3,yg as r9,zg as G3}from"./chunk-6atxvmvj.js";import{$h as m,Ci as H9,Gi as P3,Hi as F3,Ii as z3,Zh as c,oi as s3}from"./chunk-s7tn2t8x.js";import{Oi as l9}from"./chunk-kscwjycy.js";import{Zi as h}from"./chunk-p4ka241x.js";import{dj as u3}from"./chunk-hkp00b9x.js";import{gj as J$,hj as i3,kj as N3,lj as n3,oj as N$}from"./chunk-70kpm72z.js";import{Cj as n9,Hj as s9}from"./chunk-1btx3kkv.js";import{Xj as w9,Zj as u}from"./chunk-rh811v1f.js";import{_j as A}from"./chunk-wamxfhh6.js";import{ek as L$}from"./chunk-cd847h0t.js";import{Uk as l3}from"./chunk-h4h8m3yr.js";import{$k as U3,cl as y}from"./chunk-vqar6ysw.js";import{ll as h3}from"./chunk-yc2pnb1w.js";import{xl as t9}from"./chunk-51fvpq55.js";var S$="mcp",q$=/^[\x21\x23-\x5B\x5D-\x7E]+$/;class O extends e{status;constructor($,Z){super($);this.status=Z;this.name="McpToolError"}}class v extends Error{reason;constructor($,Z){super($);this.reason=Z;this.name="McpCallRefusedError"}}var r3=/^[A-Za-z0-9_-]{1,64}$/,T$=/:([A-Za-z_][A-Za-z0-9_]*)([?*+]?)/g,e3=4000,M=1e5,k$=/^(text\/|application\/([\w.+-]*\+)?(json|xml))/i,P9=new WeakMap;function K6($){return P9.get($)}class i{router;dispatcher;static token="router.mcp";plans=new Map;scopeTools=new Map;files;featureOn;constructor($,Z,z={}){this.router=$;this.dispatcher=Z;this.files=y$(z.files),this.featureOn=z.featureOn??X3;for(let[G,W]of Object.entries($.routes??{}))this.plans.set(G,M$(W)?this.planNative(G,W):this.plan(G,W));this.resolveScopes()}list($,Z){if(D3($),$.kind==="local")return this.descriptors(Z);let z=[];for(let[G,W]of this.plans){if(!W.remote||!this.grants($.principal,G))continue;if(W9(W.remote,Z))z.push(W.remote)}return z}async available($,Z){let z=[];for(let G of this.list($,Z))if(await this.isOn(G))z.push(G);return z}descriptors($){let Z=[];for(let{descriptor:z}of this.plans.values())if(W9(z,$))Z.push(z);return Z}get maxFileBytes(){return this.files.maxBytes}scopes(){return[...this.scopeTools].map(([$,{description:Z}])=>({name:$,description:Z}))}scopesFor($){return[...this.scopeTools].filter(([,{tools:Z}])=>Z.has($)).map(([Z])=>Z)}async execute($,Z,z,G,W={}){D3($);let X=this.plans.get(Z);if(X&&!await this.isOn(X.descriptor)){if($.kind==="remote")throw new v(`There is no tool named "${Z}".`,"unknown-tool");throw new O(`There is no tool named "${Z}".`,404)}if($.kind==="remote"){if(!X?.remote||!this.grants($.principal,Z))throw new v(`There is no tool named "${Z}".`,"unknown-tool");if(X.descriptor.requiresApproval&&W.approved!==!0&&!W3(X))throw new v(`"${Z}" needs the user's approval, and this call does not have it.`,"approval-required");G=void 0}if(!X)throw Error(`McpRegistry: there is no tool named "${Z}".`);if(X.kind==="tool")return await this.executeNative(X,$,z,G,W);let Y=X,K=$.kind==="remote"?Y.remote:Y.descriptor,Q=K.inputSchema.safeParse(z);if(Q.ok===!1)throw new O(`Invalid arguments for "${Z}": ${Q.errors.join(", ")}`);let V=Q.value,H={caller:$,req:$.req,tool:K,input:V,ctx:G},J=await this.fillPath(Y,H),{path:I}=this.dispatcher.getRouteHandlerAndParams(new Request(`http://gemi.internal/api${J}`));if(I!==K.url)throw new O(`"${Z}" has nothing at ${J}.`,404);let U={};for(let _ of Y.jsonKeys)if(V[_]!==void 0)U[_]=V[_];let F,B="";if(Y.fileFields.length>0)F=await this.formData(Y,U,H);else if(K.method==="GET")B=c$(U);else if(Y.jsonKeys.length>0)F=U;let T=this.router.credentials?await this.bind(Y,"the credentials",()=>this.router.credentials(H)):void 0,j={...T?{credentials:T}:{},...W.signal?{signal:W.signal}:{},...W.progress?{progress:W.progress}:{},...$.kind==="remote"?{identity:{user:$.principal.user,grant:{via:$.principal.via,id:$.principal.id,scopes:$.principal.scopes,...$.principal.clientId?{clientId:$.principal.clientId}:{}}}}:{}},C;try{let _=B?`${J}?${B}`:J;C=Object.keys(j).length>0?await this.dispatcher.dispatchAs($.req,K.method,_,F,j):await this.dispatcher.dispatchAs($.req,K.method,_,F)}catch(_){throw console.error(`[gemi/mcp] Dispatching "${Z}" failed:`,_),new O(`"${Z}" failed on the server.`,500)}if(!Y.result&&!K.outputSchema)return await V9(Z,C);return await this.project(Y,H,C)}async isOn($){return $.feature===void 0||await this.featureOn($.feature)===!0}plan($,Z){if(!r3.test($))throw Error(`McpRouter: "${$}" is not a valid tool name. A routes key is the tool's name as a model and an MCP client see it, used verbatim \u2014 letters, digits, "_" and "-", at most 64.`);let z=`McpRouter: "${$}" (${Z?.method} ${Z?.url})`;if(!(Z instanceof Object)||Z.__internal_brand!=="McpRoute")throw Error(`McpRouter: "${$}" is not a route or a tool. Declare it with this.fromApiRoute(...) or this.fromTool(...).`);let{method:G,url:W,meta:X}=Z;if(X.feature!==void 0&&(typeof X.feature!=="string"||X.feature===""))throw Error(`${z}: feature must be a feature key from app/features.`);if(W.startsWith("/__gemi__"))throw Error(`${z} is a framework route, not an app route.`);let Y=this.dispatcher.flatRoutes[W]?.[G];if(!Y)throw Error(`${z} names no route of this app. Expose a route by the path and verb it is mounted at.`);let K=[...W.matchAll(T$)].map(([,N,S])=>({name:N,modifier:S})),Q=X.params??{};for(let N of K)if(!(N.name in Q))throw Error(`${z}: the path param "${N.name}" must be bound or declared "input".`);for(let[N,S]of Object.entries(Q)){if(!K.some((g)=>g.name===N))throw Error(`${z}: "${N}" in params is not a param of the url.`);if(Y9(S))g$(z,`params.${N}`,S);else X9(z,`params.${N}`,S)}let V=[],H;if(X.input){if(H=X.input.toJSONSchema(),H.type!=="object"||!H.properties)throw Error(`${z}: input must be an s.object(...), the fields of the request body.`);V=Object.keys(H.properties)}let J=Object.entries(X.files??{}).map(([N,S])=>({name:N,binder:S}));for(let N of J)X9(z,`files.${N.name}`,N.binder);if(X.result!==void 0&&typeof X.result!=="function")throw Error(`${z}: result must be a function.`);if(X.output!==void 0&&typeof X.output?.safeParse!=="function")throw Error(`${z}: output must be a schema, built with s.`);if(X.title!==void 0&&(typeof X.title!=="string"||X.title===""))throw Error(`${z}: title must be a non-empty string.`);let I=K9(z,G,X.annotations);if(J.length>0&&G==="GET")throw Error(`${z}: a GET has no body to carry a file.`);let U={},F=(N,S)=>{if(N in U)throw Error(`${z}: "${N}" is the input key of two params or files, and the model can only send one.`);U[N]=S},B=new Map,T=new Map;for(let N of K){let S=Q[N.name];if(S==="input"){let g=c.string().describe(`The ":${N.name}" segment of the url.`);F(N.name,N.modifier==="?"||N.modifier==="*"?g.optional():g)}else if(Y9(S)){let g=S.as??N.name;F(g,S.input),T.set(N.name,{key:g,param:S})}else B.set(N.name,S)}let j={};for(let N of J)if(N.binder==="input")F(N.name,c.string().describe("The id of an attachment the user uploaded or a tool produced (gemi_att_\u2026), whose file is sent as this field.")),j[N.name]=this.remoteFileSchema();let C=[...Object.keys(U),...J.map((N)=>N.name)];for(let N of new Set(C))if(V.includes(N))throw Error(`${z}: "${N}" is both an input field and a param or file, and the model can only send one.`);let _=Object.freeze({kind:"route",name:$,description:X.description,method:G,url:W,inputSchema:Q9(X.input,H,c.object(U)),...X.output?{outputSchema:X.output}:{},...X.title?{title:X.title}:{},annotations:I,tags:Object.freeze([...X.tags??[]]),requiresApproval:X.requiresApproval===!0,...X.feature!==void 0?{feature:X.feature}:{},...Y.source?{source:Y.source}:{}}),r=!J.every((N)=>N.binder==="input")?null:J.length===0?_:Object.freeze({..._,inputSchema:Q9(X.input,H,c.object(d$(U,Object.keys(j))),j)});return{kind:"route",descriptor:_,remote:r,params:K,paramBinders:B,modelParams:T,fileFields:J,jsonKeys:V,...X.result?{result:X.result}:{}}}remoteFileSchema(){let{maxBytes:$,fetch:Z}=this.files,z={name:{type:"string",description:"The file's name, like report.pdf."},mimeType:{type:"string",description:"The file's media type, like application/pdf."},data:{type:"string",contentEncoding:"base64",description:`The file's bytes, base64-encoded (RFC 4648, standard alphabet). At most ${$} bytes decoded.`}};if(Z)z.url={type:"string",format:"uri",description:"An https URL the server downloads the file from, instead of data."};let G={type:"object",description:Z?"A file, sent as base64 in data or fetched from url: exactly one of the two.":"A file, sent as base64 in data.",properties:z,required:["name","mimeType"],additionalProperties:!1},W=Object.keys(z),X=(Y)=>{if(typeof Y!=="object"||Y===null||Array.isArray(Y))return{ok:!1,errors:["a file must be an object"]};let K=[],Q={};for(let V of Object.keys(Y))if(!W.includes(V))K.push(`a file has no field "${V}"`);for(let V of W){let H=Y[V];if(H===void 0||H===null){if(V==="name"||V==="mimeType")K.push(`a file needs "${V}"`);continue}if(typeof H!=="string")K.push(`a file's "${V}" must be a string`);else Q[V]=H}return K.length>0?{ok:!1,errors:K}:{ok:!0,value:Q}};return{toJSONSchema:()=>G,safeParse:X,parse(Y){let K=X(Y);if(K.ok===!1)throw Error(K.errors.join(", "));return K.value}}}planNative($,Z){if(!r3.test($))throw Error(`McpRouter: "${$}" is not a valid tool name. A routes key is the tool's name as a model and an MCP client see it, used verbatim \u2014 letters, digits, "_" and "-", at most 64.`);let z=`McpRouter: "${$}" (a native tool)`,{tool:G,meta:W={}}=Z;if(!(G instanceof Object)||typeof G.name!=="string")throw Error(`${z} is not an AgentTool. Pass one built with AgentTool.create(...).`);if(G.answeredBy==="client"||typeof G.execute!=="function")throw Error(`${z}: "${G.name}" is answered by the client, and only a tool the server runs can be called through the registry.`);if(typeof G.inputSchema==="function")throw Error(`${z}: "${G.name}" resolves its input schema per run, and the registry lists one schema to every caller. Give it a fixed inputSchema.`);if(typeof G.inputSchema?.safeParse!=="function")throw Error(`${z}: its inputSchema must be a schema, built with s.`);if(typeof W!=="object"||W===null)throw Error(`${z}: the meta must be an object.`);if(W.description!==void 0&&(typeof W.description!=="string"||W.description.trim()===""))throw Error(`${z}: description must be a non-empty string.`);if(W.title!==void 0&&(typeof W.title!=="string"||W.title===""))throw Error(`${z}: title must be a non-empty string.`);if(W.tags!==void 0&&(!Array.isArray(W.tags)||W.tags.some((Q)=>typeof Q!=="string")))throw Error(`${z}: tags must be an array of strings.`);if(W.requiresApproval===!1&&G.requiresApproval)throw Error(`${z}: "${G.name}" requires approval, and requiresApproval: false would run it without asking. Leave it out, or register a tool that does not ask.`);let X=W.remote;if(X!==void 0){if(typeof X!=="object"||X===null||typeof X.context!=="function")throw Error(`${z}: remote must be { context(call) }, building the AgentContext a remote call runs with.`);if(X.progress!==void 0&&typeof X.progress!=="function")throw Error(`${z}: remote.progress must be a function.`)}let Y=W.description??G.description;if(typeof Y!=="string"||Y.trim()==="")throw Error(`${z} needs a description: the tool's own, or the meta's.`);let K=Object.freeze({kind:"tool",name:$,description:Y,inputSchema:G.inputSchema,...G.outputSchema?{outputSchema:G.outputSchema}:{},...W.title?{title:W.title}:{},annotations:K9(z,void 0,W.annotations),tags:Object.freeze([...W.tags??[]]),requiresApproval:G.requiresApproval||W.requiresApproval===!0});return{kind:"tool",descriptor:K,remote:X?K:null,tool:G,meta:W}}async approvalRequired($,Z,z,G={}){let W=this.plans.get(Z);if(!W)return!0;if(!W3(W))return W.descriptor.requiresApproval;let X=W;if($.kind!=="remote"||!X.meta.remote)return!0;let Y=X.descriptor.inputSchema.safeParse(z);if(Y.ok===!1)return!0;let K={caller:$,req:$.req,tool:X.descriptor,input:Y.value},Q;try{Q=await this.bind(X,"the remote context",()=>X.meta.remote.context(K))}catch{return!0}if(typeof Q!=="object"||Q===null)return!0;let V=G.signal??new AbortController().signal;return G9(X,Y.value,z9(Z9(X,Q,V)))}nativeApproval($){let Z=this.plans.get($);if(Z?.kind!=="tool")throw Error(`McpRegistry: there is no native tool named "${$}".`);return W3(Z)??Z.descriptor.requiresApproval}nativeTool($){let Z=this.plans.get($);if(Z?.kind!=="tool")throw Error(`McpRegistry: there is no native tool named "${$}".`);return Z.tool}startNative($,Z,z,G){let W=this.plans.get(Z);if(W?.kind!=="tool")throw Error(`McpRegistry: there is no native tool named "${Z}".`);if($===void 0)return W.tool.execute(z,G);if(D3($),$.kind!=="local")throw Error("McpRegistry: startNative is for a local caller. A remote call goes through execute().");let X=W.descriptor.inputSchema.safeParse(z);if(X.ok===!1)throw new O(`Invalid arguments for "${Z}": ${X.errors.join(", ")}`);return this.runNative(W,{caller:$,req:$.req,tool:W.descriptor,input:X.value},G)}runNative($,Z,z){let G={...z};return P9.set(G,{...Z,ctx:G}),$.tool.execute(Z.input,G)}async executeNative($,Z,z,G,W){let{name:X}=$.descriptor,Y=$.descriptor.inputSchema.safeParse(z);if(Y.ok===!1)throw new O(`Invalid arguments for "${X}": ${Y.errors.join(", ")}`);let K={caller:Z,req:Z.req,tool:$.descriptor,input:Y.value},Q=(_,_3)=>{if(!W.progress)return;let r;try{r=$.meta.remote?.progress?$.meta.remote.progress(_,_3):E$(_,_3)}catch(N){console.error(`[gemi/mcp] The progress mapping of "${X}" failed:`,N);return}if(r)W.progress(r)};if(Z.kind==="local"){if(!G)throw Error(`McpRegistry: "${X}" is a native tool, which runs with the tool context of an agent call, and none was passed to execute().`);return await $9(this.runNative($,{...K,ctx:G},G),Q)}let V=$.meta.remote,H=await this.bind($,"the remote context",()=>V.context(K));if(typeof H!=="object"||H===null)throw console.error(`[gemi/mcp] The remote context of "${X}" is not an object:`,H),new O(`"${X}" failed on the server.`,500);let J=$.tool.timeoutMs,I=[...W.signal?[W.signal]:[],...J!==void 0?[AbortSignal.timeout(J)]:[]],U=I.length===0?new AbortController().signal:I.length===1?I[0]:AbortSignal.any(I),F=Z9($,H,U);if(!W.approved&&W3($)&&await G9($,K.input,z9(F)))throw new v(`"${X}" needs the user's approval, and this call does not have it.`,"approval-required");let B;try{B=await $9(this.runNative($,{...K,ctx:F},F),Q,U)}catch(_){if(U.aborted&&_===U.reason){if(W.signal?.aborted)throw new O(`"${X}" was cancelled.`,499);throw new O(`"${X}" did not finish within ${J} ms.`,504)}if(_ instanceof O)throw _;if(_ instanceof e||_ instanceof v)throw new O(_.message);throw console.error(`[gemi/mcp] "${X}" failed for a remote caller:`,_),new O(`"${X}" failed on the server.`,500)}let T=(_)=>{return console.error(`[gemi/mcp] "${X}" ${_}`),new O(`"${X}" failed on the server.`,500)};if(J9(B))throw T("answered a job handle, and a remote call has no background jobs.");let j=B;if($.descriptor.outputSchema){let _=$.descriptor.outputSchema.safeParse(j);if(_.ok===!1)throw T(`answered what its output schema refuses: ${_.errors.join(", ")}`);j=_.value}if(j===void 0)return null;if(typeof j==="string")return j.length>M?`${j.slice(0,M)}\u2026 [cut at ${M} of ${j.length} characters]`:j;let C=JSON.stringify(j);if(C!==void 0&&C.length>M)return`${C.slice(0,M)}\u2026 [cut at ${M} of ${C.length} characters]`;return j}async fillPath($,Z){let{input:z,req:G}=Z,W=$.descriptor.url;for(let X of $.params){let Y=$.paramBinders.get(X.name),K=$.modelParams.get(X.name),Q;if(Y||K){if(Q=K?await this.bind($,`the param "${X.name}"`,()=>K.param.bind(z[K.key],G,Z),{refusals:!0}):await this.bind($,`the param "${X.name}"`,()=>Y(G,Z)),Q===void 0||Q===null||Q==="")throw console.error(`[gemi/mcp] The ${K?"resolver":"binder"} for "${X.name}" of "${$.descriptor.name}" returned ${JSON.stringify(Q)}.`),new O(`"${$.descriptor.name}" failed on the server.`,500)}else Q=z[X.name];let V=`:${X.name}${X.modifier}`;if(Q===void 0||Q===null||Q===""){if(X.modifier!=="?"&&X.modifier!=="*")throw new O(`"${X.name}" of "${$.descriptor.name}" must not be empty.`);W=W.replace(`/${V}`,"");continue}W=W.replace(V,p$($.descriptor.name,X,String(Q)))}return W}async formData($,Z,z){let{input:G,ctx:W}=z,X=$.descriptor.name;if(z.caller.kind==="remote"){let K=new FormData;for(let[Q,V]of Object.entries(Z))O3(K,Q,V);for(let Q of $.fileFields)K.append(Q.name,await this.remoteFile(X,Q.name,G[Q.name]));return K}if(!W)throw Error(`McpRegistry: "${X}" sends a file, which is resolved through the tool context's attachments, and none was passed to execute().`);let Y=new FormData;for(let[K,Q]of Object.entries(Z))O3(Y,K,Q);for(let K of $.fileFields){let Q=K.binder==="input"?G[K.name]:await this.bind($,`the file "${K.name}"`,()=>K.binder(W,z));if(typeof Q!=="string"||Q==="")throw new O(`"${X}" needs a file for "${K.name}", and this turn has none. Ask the user to attach one.`);Y.append(K.name,await W.attachments.file(Q))}return Y}async remoteFile($,Z,z){let G=(H)=>new O(`"${Z}" of "${$}" ${H}`,400),W=z,{maxBytes:X,fetch:Y}=this.files;if(!f$(W.name))throw G("needs a name of 1 to 255 characters, without control characters or slashes.");if(!w$.test(W.mimeType))throw G(`has a mimeType that is not a media type: "${W.mimeType.slice(0,100)}".`);let K=typeof W.data==="string",Q=typeof W.url==="string";if(K===Q)throw G(Y?"needs exactly one of data or url.":"needs its bytes, base64, in data.");if(K){let H=W.data.replace(/\s+/g,"");if(Math.floor(H.length*3/4)-h$(H)>X)throw G(`is larger than the ${X} bytes a file may be.`);if(H.length%4!==0||!v$.test(H))throw G("has data that is not base64 (RFC 4648, standard alphabet, padded).");return new File([Buffer.from(H,"base64")],W.name,{type:W.mimeType})}if(!Y)throw G("cannot be fetched from a URL here. Send its bytes, base64, in data.");let V;try{V=new URL(W.url)}catch{throw G("has a url that is not a URL.")}if(V.protocol!=="https:")throw G("can only be fetched from an https URL.");try{let H=await H9(V.href,{...Y,maxSize:Math.min(Y.maxSize??X,X),redirect:"follow"});if(!H.ok)throw G(`could not be fetched: ${V.host} answered ${H.status}.`);let J=await H.arrayBuffer();return new File([J],W.name,{type:W.mimeType})}catch(H){if(H instanceof O)throw H;throw G(`could not be fetched from ${V.host}: ${H instanceof Error?H.message:"failed"}.`)}}grants($,Z){for(let z of $.scopes??[])if(this.scopeTools.get(z)?.tools.has(Z))return!0;return!1}resolveScopes(){let $=this.router.scopes;if($===void 0){this.scopeTools.set(S$,{description:"Use this app's tools as you",tools:new Set(this.plans.keys())});return}if(typeof $!=="object"||$===null)throw Error("McpRouter: scopes must be an object of scope names.");let Z=new Set([...this.plans.values()].flatMap(({descriptor:z})=>z.tags));for(let[z,G]of Object.entries($)){let W=`McpRouter: scope "${z}"`;if(!q$.test(z))throw Error(`${W} is not a valid OAuth scope: printable ASCII, no spaces or quotes.`);if(typeof G?.description!=="string"||G.description==="")throw Error(`${W} needs a description: it is what a consent screen shows.`);let X=new Set;for(let Y of G.tags??[]){if(!Z.has(Y))throw Error(`${W} names the tag "${Y}", which no tool has.`);for(let[K,{descriptor:Q}]of this.plans)if(Q.tags.includes(Y))X.add(K)}for(let Y of G.names??[]){if(!this.plans.has(Y))throw Error(`${W} names "${Y}", which is no tool.`);X.add(Y)}if(X.size===0)throw Error(`${W} reaches no tool. Give it tags or names.`);this.scopeTools.set(z,{description:G.description,tools:X})}}async project($,Z,z){let{name:G,outputSchema:W}=$.descriptor;if(z.status<200||z.status>=300)return await V9(G,z);let X=(J,I)=>{if(I===void 0)console.error(`[gemi/mcp] "${G}" ${J}`);else console.error(`[gemi/mcp] "${G}" ${J}`,I);return new O(`"${G}" failed on the server.`,500)},Y=z.headers.get("Content-Type"),K=await z.text(),Q=null;if(K!=="")try{Q=JSON.parse(K)}catch{throw X(`answered ${Y??"a body with no content-type"} that is not JSON, and its result or output needs JSON.`)}let V=Q;if($.result)try{V=await $.result(Q,Z)}catch(J){throw X("failed in its result projection:",J)}if(W){let J=W.safeParse(V);if(J.ok===!1)throw X(`answered what its output schema refuses: ${J.errors.join(", ")}`);V=J.value}if(V===void 0)return null;let H=JSON.stringify(V);if(H!==void 0&&H.length>M)return`${H.slice(0,M)}\u2026 [cut at ${M} of ${H.length} characters]`;return V}async bind($,Z,z,G={}){try{return await z()}catch(W){if(G.refusals&&W instanceof e)throw W;throw console.error(`[gemi/mcp] Binding ${Z} of "${$.descriptor.name}" failed:`,W),new O(`"${$.descriptor.name}" failed on the server.`,500)}}}function M$($){return $ instanceof Object&&$.__internal_brand==="McpTool"}function R$($){return typeof $==="object"&&$!==null&&typeof $.next==="function"&&Symbol.asyncIterator in $}async function $9($,Z,z){let G;if(z)G=new Promise((X,Y)=>{if(z.aborted)Y(z.reason);else z.addEventListener("abort",()=>Y(z.reason),{once:!0})}),G.catch(()=>{});let W=(X)=>G?Promise.race([X,G]):X;if(!R$($))return await W(Promise.resolve($));try{let X=0,Y=await W($.next());while(!Y.done)Z(Y.value,++X),Y=await W($.next());return Y.value}catch(X){throw $.return(void 0).catch(()=>{}),X}}function E$($,Z){if(typeof $==="string")return{progress:Z,message:$};if(typeof $==="object"&&$!==null){let{progress:z,total:G,message:W}=$;if(typeof z==="number"&&Number.isFinite(z))return{progress:z,...typeof G==="number"?{total:G}:{},...typeof W==="string"?{message:W}:{}};if(typeof W==="string")return{progress:Z,message:W}}return{progress:Z}}function Z9($,Z,z){let G=$.descriptor.name,W=`mcp_${crypto.randomUUID()}`,X=`mcp_call_${crypto.randomUUID()}`,Y=(Q)=>async()=>{throw new e(`"${G}" was called by a remote MCP client, which has no ${Q}.`,{retryable:!1})},K={put:Y("attachment store"),get:Y("attachment store"),read:Y("attachment store"),file:Y("attachment store")};return{context:Z,body:{},runId:W,toolCallId:X,signal:z,step:1,depth:0,resumed:!1,attachments:K,turn:Object.freeze({attachments:Object.freeze([])}),runAgent:Y("agent run to nest a sub-agent in"),generateImage:Y("attachment store to put an image in"),editImage:Y("attachment store to put an image in"),generate:(Q)=>B9({...Q,signal:Q.signal?AbortSignal.any([z,Q.signal]):z},{origin:{mcp:G,runId:W,toolCallId:X}}),jobs:F9({jobs:void 0,threadId:void 0,runId:W,toolCallId:X,toolName:G,depth:0,async:$.tool.async,attachments:null}),memory:N9(),meter:U9().meter}}function W3($){if($.kind!=="tool"||$.meta.requiresApproval===!0)return;return $.tool.approvalPredicate}function z9($){return{context:$.context,body:$.body,runId:$.runId,threadId:$.threadId,toolCallId:$.toolCallId,step:$.step,depth:$.depth,signal:$.signal}}async function G9($,Z,z){try{return await $.tool.approvalPredicate(Z,z)!==!1}catch(G){return console.error(`[gemi/mcp] The requiresApproval of "${$.descriptor.name}" threw, so the call asks the user:`,G),!0}}function D3($){if($?.kind==="local"&&$.req)return;if($?.kind==="remote"&&$.req&&$.principal?.user&&typeof $.principal.id==="string"&&Array.isArray($.principal.scopes))return;throw Error('McpRegistry: a caller is { kind: "local", req } or { kind: "remote", req, principal }, with the principal a caller resolver verified.')}function W9($,Z){if(Z?.names&&!Z.names.includes($.name))return!1;if(Z?.tags&&!$.tags.some((z)=>Z.tags.includes(z)))return!1;return!0}var b$=10485760;function y$($){let Z=$?.maxBytes??b$;if(!Number.isSafeInteger(Z)||Z<=0)throw Error("McpRegistry: files.maxBytes must be a positive whole number of bytes.");let z=$?.fetchUrls===!0?{}:typeof $?.fetchUrls==="object"&&$.fetchUrls!==null?$.fetchUrls:null;return{maxBytes:Z,fetch:z}}function f$($){if($.length===0||$.length>255)return!1;for(let Z of $){let z=Z.codePointAt(0);if(z<32||z===127||Z==="/"||Z==="\\")return!1}return!0}var w$=/^[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]{0,126}\/[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]{0,126}(\s*;.{0,200})?$/,v$=/^[A-Za-z0-9+/]*={0,2}$/;function h$($){return $.endsWith("==")?2:$.endsWith("=")?1:0}function X9($,Z,z){if(z!=="input"&&typeof z!=="function")throw Error(`${$}: ${Z} must be a function or "input".`)}function Y9($){return $ instanceof Object&&$.__internal_brand==="McpModelParam"}function g$($,Z,z){if(z.as!==void 0&&(typeof z.as!=="string"||z.as===""))throw Error(`${$}: ${Z}.as must be a non-empty string.`);let G=z.input;if(typeof G?.safeParse!=="function"||typeof G.toJSONSchema!=="function")throw Error(`${$}: ${Z}.input must be a schema, built with s.`);if(typeof z.bind!=="function")throw Error(`${$}: ${Z}.bind must be a function.`)}var m$=new Set(["readOnlyHint","destructiveHint","idempotentHint","openWorldHint"]);function u$($){switch($){case"GET":return{readOnlyHint:!0};case"DELETE":return{destructiveHint:!0};case"PUT":return{idempotentHint:!0};default:return{}}}function K9($,Z,z){if(z!==void 0&&(typeof z!=="object"||z===null))throw Error(`${$}: annotations must be an object of hints.`);let G=Z?u$(Z):{};for(let[W,X]of Object.entries(z??{})){if(!m$.has(W))throw Error(`${$}: "${W}" is not a tool annotation. Use readOnlyHint, destructiveHint, idempotentHint or openWorldHint.`);if(X===void 0)continue;if(typeof X!=="boolean")throw Error(`${$}: annotations.${W} must be true or false.`);G[W]=X}if(G.readOnlyHint===!0&&(G.destructiveHint||G.idempotentHint))throw Error(`${$} is read-only${z?.readOnlyHint?"":` (a ${Z})`} and also ${G.destructiveHint?"destructive":"idempotent"}, which only a tool that is not read-only can be. Set readOnlyHint: false if it changes something.`);return Object.freeze(G)}function Q9($,Z,z,G={}){let W=z.toJSONSchema(),X=Object.fromEntries(Object.entries(G).map(([Q,V])=>[Q,V.toJSONSchema()])),Y={...Z??{},type:"object",properties:{...Z?.properties??{},...W.properties,...X},required:[...Z?.required??[],...W.required??[],...Object.keys(G)],additionalProperties:!1},K=(Q)=>{if(typeof Q!=="object"||Q===null||Array.isArray(Q))return{ok:!1,errors:["expected an object"]};let V=[],H={};if($){let I=$.safeParse(Q);if(I.ok===!1)V.push(...I.errors);else H={...I.value}}let J=z.safeParse(Q);if(J.ok===!1)V.push(...J.errors);else H={...H,...J.value};for(let[I,U]of Object.entries(G)){let F=Q[I];if(F===void 0){V.push(`"${I}" is required`);continue}let B=U.safeParse(F);if(B.ok===!1)V.push(...B.errors.map((T)=>`${I}: ${T}`));else H[I]=B.value}return V.length>0?{ok:!1,errors:V}:{ok:!0,value:H}};return{toJSONSchema:()=>Y,safeParse:K,parse(Q){let V=K(Q);if(V.ok===!1)throw Error(V.errors.join(", "));return V.value}}}function d$($,Z){return Object.fromEntries(Object.entries($).filter(([z])=>!Z.includes(z)))}function p$($,Z,z){let G=Z.modifier==="*"||Z.modifier==="+"?z.split("/"):[z];if(G.some((W)=>W==="."||W===".."))throw new O(`"${z}" is not a valid value for "${Z.name}" of "${$}".`);return G.map(encodeURIComponent).join("/")}function O3($,Z,z){if(z===void 0||z===null)return;if(Array.isArray(z)){for(let G of z)O3($,Z,G);return}$.append(Z,typeof z==="object"?JSON.stringify(z):String(z))}function c$($){let Z=new URLSearchParams,z=(G,W)=>{if(W===void 0||W===null)return;if(Array.isArray(W)){for(let X of W)z(G,X);return}Z.append(G,typeof W==="object"?JSON.stringify(W):String(W))};for(let[G,W]of Object.entries($))z(G,W);return Z.toString()}async function V9($,Z){if(Z.status>=200&&Z.status<300){let G=Z.headers.get("Content-Type");if(G&&!k$.test(G)){let X=(await Z.arrayBuffer()).byteLength;return`"${$}" answered with ${X} bytes of ${G}, which is not shown.`}let W=await Z.text();if(W==="")return null;if(W.length>M)return`${W.slice(0,M)}\u2026 [cut at ${M} of ${W.length} characters]`;try{return JSON.parse(W)}catch{return W}}let z=await Z.text();if(Z.status>=400&&Z.status<500){let G=z.length>e3?`${z.slice(0,e3)}\u2026`:z;throw new O(`"${$}" was refused with ${Z.status}${G?`: ${G}`:"."}`,Z.status)}if(Z.status<500)console.error(`[gemi/mcp] "${$}" answered ${Z.status}${Z.headers.get("Location")?` to ${Z.headers.get("Location")}`:""}, which a tool call cannot follow.`);throw new O(`"${$}" failed on the server.`,Z.status)}import{createHash as i$,randomBytes as l$,timingSafeEqual as n$}from"crypto";function j3($){let Z=$.headers.get("authorization");if(!Z)return null;let z=/^Bearer[ ]+([\x21-\x7e]+)$/i.exec(Z.trim());return z?z[1]:null}class s${options;name="api-key";constructor($){this.options=$;if(typeof $?.prefix!=="string"||!/^[A-Za-z0-9_-]{3,32}$/.test($.prefix))throw Error('McpApiKeyResolver: prefix is required: 3 to 32 letters, digits, _ or -, like "myapp_mcp_".');if(typeof $.verify!=="function")throw Error("McpApiKeyResolver: verify must be a function that looks a key up.")}static generate($){return`${$}${l$(32).toString("base64url")}`}static hash($){return i$("sha256").update($).digest("hex")}static hashesMatch($,Z){let z=Buffer.from($),G=Buffer.from(Z);return z.length===G.length&&n$(z,G)}async resolve($){let Z=j3($);if(!Z?.startsWith(this.options.prefix))return null;let z=await this.options.verify(Z,$);if(!z)return{ok:!1,error:"invalid_token",description:"The API key is not valid."};if(!z.user||typeof z.id!=="string"||z.id===""||!Array.isArray(z.scopes))throw Error("McpApiKeyResolver: verify must answer { user, id, scopes } for a key it knows, or null.");return{ok:!0,principal:{user:z.user,via:this.name,id:z.id,scopes:[...z.scopes]}}}}import{createHash as E9,randomBytes as D9}from"crypto";async function A3($,Z){let z=t$();if(!z)return null;let G=await z.consume($,Z);return G.allowed?null:Math.max(1,Math.ceil(G.retryAfter/1000))}function t$(){try{let $=y();return $.bound(l)?$.make(l):null}catch{return null}}var x3=["2026-07-28"],Y3=["2025-11-25","2025-06-18","2025-03-26"],C3=[...x3,...Y3],S3="io.modelcontextprotocol/protocolVersion",q3="io.modelcontextprotocol/clientCapabilities";var T3="io.modelcontextprotocol/serverInfo",D={ParseError:-32700,InvalidRequest:-32600,MethodNotFound:-32601,InvalidParams:-32602,InternalError:-32603,HeaderMismatch:-32020,MissingRequiredClientCapability:-32021,UnsupportedProtocolVersion:-32022};class L extends Error{code;data;status;constructor($,Z,z,G=200){super(Z);this.code=$;this.data=z;this.status=G;this.name="JsonRpcError"}}function R($,Z){return{jsonrpc:"2.0",id:$,error:{code:Z.code,message:Z.message,...Z.data!==void 0?{data:Z.data}:{}}}}function I9($){if(Array.isArray($))throw new L(D.InvalidRequest,"Batched requests are not supported.",void 0,400);if(typeof $!=="object"||$===null||$.jsonrpc!=="2.0")throw new L(D.InvalidRequest,"Not a JSON-RPC 2.0 message.",void 0,400);let Z=$,z=Z.id,G=typeof z==="string"||typeof z==="number"&&Number.isFinite(z);if(typeof Z.method==="string"){if(Z.params!==void 0&&(typeof Z.params!=="object"||Z.params===null||Array.isArray(Z.params)))throw new L(D.InvalidRequest,"params must be an object.",void 0,400);if(z===void 0)return{kind:"notification",message:Z};if(!G)throw new L(D.InvalidRequest,"id must be a string or a number.",void 0,400);return{kind:"request",message:Z}}if(G&&(("result"in Z)||("error"in Z)))return{kind:"response",message:Z};throw new L(D.InvalidRequest,"Not a JSON-RPC request, notification or response.",void 0,400)}function k3($,Z){let z=$.outputSchema?.toJSONSchema(),G={...$.annotations,...$.title&&!Z?{title:$.title}:{}};return{name:$.name,...$.title?{title:$.title}:{},description:$.description,inputSchema:$.inputSchema.toJSONSchema(),...z&&(Z||z.type==="object")?{outputSchema:z}:{},...Object.keys(G).length>0?{annotations:G}:{}}}function q($){return typeof $==="object"&&$!==null&&!Array.isArray($)}function L9($){let Z=/^=\?base64\?([A-Za-z0-9+/]*={0,2})\?=$/.exec($);if(!Z)return $;try{let z=Buffer.from(Z[1],"base64");return new TextDecoder("utf-8",{fatal:!0}).decode(z)}catch{return null}}import{createHmac as o$,timingSafeEqual as a$}from"crypto";function M3($,Z,z){let G=Buffer.from(JSON.stringify(z)).toString("base64url");return`${Z}.${G}.${_9($,Z,G).toString("base64url")}`}function R3($,Z,z,G=Date.now()){if(typeof z!=="string"||z.length>8192)return null;let W=z.split(".");if(W.length!==3||W[0]!==Z)return null;let[,X,Y]=W,K=Buffer.from(Y,"base64url"),Q=_9($,Z,X);if(K.length!==Q.length||!a$(K,Q))return null;let V;try{V=JSON.parse(Buffer.from(X,"base64url").toString("utf8"))}catch{return null}if(typeof V!=="object"||V===null)return null;if(typeof V.exp!=="number"||V.exp<=G)return null;return V}function _9($,Z,z){return o$("sha256",K3($)).update(`${Z}.${z}`).digest()}var E3="gemi.mcp.request-state.v1",O9="gemi.mcp.session.v1",r$=86400000,j9=600000,A9="gemi_approval",b3=2000,e$={limit:600,window:60},$2={limit:30,window:60};class $3{registry;static token="router.mcp.http";endpoint;resolvers;context;allowedOrigins;rateLimit;maxBodyBytes;serverInfo;instructions;nonces;approvalTimeoutMs;onCall;feature;featureOn;pending=new Map;inflight=new Map;constructor($,Z,z={}){this.registry=$;if(typeof Z.url!=="string")throw Error(`route.mcp.remote.url is required: the endpoint's canonical URL, like "https://example.com/mcp".`);this.endpoint=G2(Z.url);let G=Z.resolvers??[];if(!Array.isArray(G)||G.length===0)throw Error("route.mcp.remote is enabled without a caller resolver. Configure route.mcp.remote.resolvers \u2014 an McpOAuthServer, an McpApiKeyResolver, or your own \u2014 or leave the endpoint off. Without one every request would be refused, or answered as nobody.");for(let W of G)if(typeof W?.resolve!=="function"||typeof W.name!=="string"||W.name==="")throw Error("route.mcp.remote.resolvers: each resolver needs a name and a resolve().");if(this.resolvers=G,K3(E3),this.context={resource:this.resource,registry:$},this.allowedOrigins=new Set((Z.allowedOrigins??[]).map((W)=>{if(new URL(W).origin!==W)throw Error(`route.mcp.remote.allowedOrigins: "${W}" is not an origin (scheme://host[:port]).`);return W})),this.allowedOrigins.add(this.endpoint.origin),this.rateLimit=Z.rateLimit===!1?!1:Z.rateLimit??e$,this.maxBodyBytes=Z.maxBodyBytes??Math.ceil($.maxFileBytes*1.4)+1048576,this.serverInfo={name:Z.server?.name??"gemi",version:Z.server?.version??"1.0.0"},this.instructions=Z.server?.instructions,this.nonces=Z.nonces??new M9,this.approvalTimeoutMs=Z.approvalTimeoutMs??j9,Z.onCall!==void 0&&typeof Z.onCall!=="function")throw Error("route.mcp.remote.onCall must be a function.");if(this.onCall=Z.onCall,Z.feature!==void 0){if(typeof Z.feature!=="string"||Z.feature==="")throw Error("route.mcp.remote.feature must be a feature key from app/features.");this.feature=Z.feature}this.featureOn=z.featureOn??X3;for(let W of G)W.boot?.(this.context)}get resource(){return this.endpoint.href.replace(/\/$/,"")}async handle($){let Z=new URL($.url);if(Z.host!==this.endpoint.host)return null;if(this.feature!==void 0){if(!this.ownsPath(Z.pathname))return null;if(await this.featureOn(this.feature)!==!0)return null}for(let W of this.resolvers){let X=await W.handle?.($,this.context);if(X)return X}if(Z.pathname!==this.endpoint.pathname)return null;let z=$.headers.get("origin");if(z!==null&&!this.allowedOrigins.has(z))return f(R(null,new L(D.InvalidRequest,"Origin not allowed.")),403);let G=z?z2(z):{};if($.method==="OPTIONS")return new Response(null,{status:204,headers:{...G,"Access-Control-Allow-Methods":"POST","Access-Control-Allow-Headers":"Authorization, Content-Type, Accept, MCP-Protocol-Version, Mcp-Session-Id, Mcp-Method, Mcp-Name, Last-Event-ID","Access-Control-Max-Age":"600"}});if($.method!=="POST")return x9(new Response(null,{status:405,headers:{Allow:"POST, OPTIONS"}}),G);return x9(await this.post($),G)}ownsPath($){let Z=this.endpoint.pathname.replace(/\/$/,"");return $===this.endpoint.pathname||$===Z||$.startsWith(`${Z}/`)||$.startsWith("/.well-known/")}async post($){let Z=null;for(let Y of this.resolvers){let K=await Y.resolve($,this.context);if(K===null)continue;if(K.ok===!1)return await this.failedAttempt($)??this.unauthorized(K.description);Z={...K.principal,via:Y.name};break}if(!Z)return(j3($)!==null?await this.failedAttempt($):null)??this.unauthorized();let z=await this.spend(Z);if(z)return z;let G=$.headers.get("content-type")??"";if(!/^application\/json\s*(;|$)/i.test(G))return new Response("Content-Type must be application/json.",{status:415});let W;try{W=JSON.parse(await Z2($,this.maxBodyBytes))}catch(Y){if(Y instanceof V3)return f(R(null,new L(D.InvalidRequest,`The request is larger than ${this.maxBodyBytes} bytes.`)),413);return f(R(null,new L(D.ParseError,"Parse error.")),400)}let X=new m($,{},"api",this.endpoint.pathname);return await h.run(X,async()=>{try{return await this.dispatch($,X,Z,W)}catch(Y){if(Y instanceof L){let K=q(W)&&(typeof W.id==="string"||typeof W.id==="number")?W.id:null;return f(R(K,Y),Y.status)}return console.error("[gemi/mcp] The MCP endpoint failed:",Y),f(R(null,new L(D.InternalError,"Internal error.")),500)}},{user:Z.user})}async dispatch($,Z,z,G){let W=I9(G),X={kind:"remote",req:Z,principal:z};if(W.kind==="response"){let F=this.session($,z),B=this.pending.get(String(W.message.id));if(B&&B.session===F.id)this.pending.delete(String(W.message.id)),B.resolve(W.message);return new Response(null,{status:202})}let{message:Y}=W,K=Y.params??{},Q=q(K._meta)?K._meta:{};if(typeof Q[S3]==="string"){if(this.checkModernHeaders($,Y,Q[S3]),W.kind==="notification")return new Response(null,{status:202});return await this.respond(Y,async(F,B)=>this.modern({principal:z,caller:X,message:Y,params:K,era:{modern:!0},stream:F,signal:B}),S9(K),$.signal)}if(Y.method==="initialize"){if(W.kind!=="request")throw new L(D.InvalidRequest,"initialize is a request.",void 0,400);return this.initialize(W.message,K,z)}let V=this.session($,z),H=$.headers.get("mcp-protocol-version");if(H!==null&&H!==V.state.v)throw new L(D.InvalidRequest,`MCP-Protocol-Version ${H} is not the session's ${V.state.v}.`,void 0,400);if(W.kind==="notification"){if(Y.method==="notifications/cancelled"){let F=K.requestId;this.inflight.get(`${V.id}:${String(F)}`)?.abort()}return new Response(null,{status:202})}let J=`${V.id}:${String(Y.id)}`,I=new AbortController;this.inflight.set(J,I);let U=AbortSignal.any([I.signal,$.signal]);try{return await this.respond(Y,async(F,B)=>this.legacy({principal:z,caller:X,message:Y,params:K,era:{modern:!1,session:V.state,sessionId:V.id},stream:F,signal:B}),S9(K)||X2(this.registry,Y,V.state),U,()=>this.inflight.delete(J))}catch(F){throw this.inflight.delete(J),F}}async modern($){switch($.message.method){case"server/discover":return this.complete({supportedVersions:C3,capabilities:{tools:{}},...this.instructions?{instructions:this.instructions}:{},ttlMs:60000,cacheScope:"private"});case"tools/list":return this.complete({tools:(await this.registry.available($.caller)).map((Z)=>k3(Z,!0)),ttlMs:60000,cacheScope:"private"});case"tools/call":return await this.callTool($);default:throw new L(D.MethodNotFound,`Method not found: ${$.message.method}`,void 0,404)}}async legacy($){switch($.message.method){case"ping":return{};case"tools/list":return{tools:(await this.registry.available($.caller)).map((Z)=>k3(Z,!1))};case"tools/call":return await this.callTool($);default:throw new L(D.MethodNotFound,`Method not found: ${$.message.method}`)}}complete($){return{resultType:"complete",...$,_meta:{[T3]:this.serverInfo}}}initialize($,Z,z){let G=Z.protocolVersion,W=Y3.includes(G)?G:Y3[0],X=q(Z.capabilities)?Z.capabilities:{},Y={v:W,e:C9(X.elicitation),p:Q3(z),exp:Date.now()+r$},K=M3(O9,"gms1",Y);return f({jsonrpc:"2.0",id:$.id,result:{protocolVersion:W,capabilities:{tools:{listChanged:!1}},serverInfo:this.serverInfo,...this.instructions?{instructions:this.instructions}:{}}},200,{"Mcp-Session-Id":K})}session($,Z){let z=$.headers.get("mcp-session-id");if(!z)throw new L(D.InvalidRequest,"Missing Mcp-Session-Id. Send initialize first, or a request carrying io.modelcontextprotocol/protocolVersion in _meta.",void 0,400);let G=R3(O9,"gms1",z);if(!G||G.p!==Q3(Z))throw new L(D.InvalidRequest,"Session not found.",void 0,404);return{id:z,state:G}}checkModernHeaders($,Z,z){if(!x3.includes(z))throw new L(D.UnsupportedProtocolVersion,"Unsupported protocol version",{supported:C3,requested:z},400);let G=(Y)=>new L(D.HeaderMismatch,`Header mismatch: ${Y}`,void 0,400);if($.headers.get("mcp-protocol-version")!==z)throw G("MCP-Protocol-Version does not match the protocol version in _meta.");if($.headers.get("mcp-method")!==Z.method)throw G("Mcp-Method does not match the method.");let W=Z.params??{},X=Z.method==="tools/call"||Z.method==="prompts/get"?W.name:Z.method==="resources/read"?W.uri:void 0;if(X!==void 0){let Y=$.headers.get("mcp-name");if(Y===null||L9(Y)!==X)throw G("Mcp-Name does not match the request's name.")}}async callTool($){let Z=$.params.name;if(typeof Z!=="string")throw new L(D.InvalidParams,"tools/call needs a tool name.");let z=$.params.arguments??{};if(!this.onCall)return await this.runTool($,Z,z,{approved:!1});let G=performance.now(),W={approved:!1};try{let X=await this.runTool($,Z,z,W);if(!W.pending)await this.report($,Z,z,W,G);return X}catch(X){if(!W.outcome){if(W.outcome="error",W.message=X instanceof L?X.message:"Internal error.",!(X instanceof L))W.error=X}throw await this.report($,Z,z,W,G),X}}async report($,Z,z,G,W){let{principal:X}=$;try{await this.onCall({user:X.user,via:X.via,credentialId:X.id,clientId:X.clientId??null,scopes:X.scopes,tool:Z,arguments:z,outcome:G.outcome??"ok",...G.reason!==void 0?{reason:G.reason}:{},...G.message!==void 0?{message:G.message}:{},...G.status!==void 0?{status:G.status}:{},...G.error!==void 0?{error:G.error}:{},approved:G.approved,durationMs:Math.round((performance.now()-W)*1000)/1000,req:$.caller.req})}catch(Y){console.error(`[gemi/mcp] route.mcp.remote.onCall failed for "${Z}":`,Y)}}async runTool($,Z,z,G){let{caller:W,principal:X}=$,Y=(U,F)=>{G.outcome="denied",G.reason=U,G.message=F},K=(U,F,B)=>{if(G.outcome="error",G.message=U,F!==void 0)G.status=F;if(B!==void 0)G.error=B},Q=(await this.registry.available(W,{names:[Z]}))[0];if(!Q)throw Y("unknown-tool",`Unknown tool: ${Z}`),new L(D.InvalidParams,`Unknown tool: ${Z}`);if(Q.requiresApproval){let U=Q.inputSchema.safeParse(z);if(U.ok===!1){let B=`Invalid arguments for "${Z}": ${U.errors.join(", ")}`;return K(B),this.toolResult($,{content:[{type:"text",text:B}],isError:!0})}if($.era.modern&&q($.params.inputResponses)&&$.params.requestState!==void 0||await this.registry.approvalRequired(W,Z,z,{signal:$.signal})){let B=await this.approval($,Q,z,Y,G);if(B.kind==="answer")return B.result;G.approved=!0}}let V=Y2($),H;try{H=await this.registry.execute(W,Z,z,void 0,{approved:G.approved,signal:$.signal,...V?{progress:V}:{}})}catch(U){if(U instanceof O){if(U.status===401||U.status===403)Y("forbidden",U.message),G.status=U.status;else K(U.message,U.status);return this.toolResult($,{content:[{type:"text",text:U.message}],isError:!0})}if(U instanceof v){let B=U.reason==="unknown-tool"?`Unknown tool: ${Z}`:U.message;throw Y(U.reason,B),new L(D.InvalidParams,B)}console.error(`[gemi/mcp] "${Z}" failed for ${X.via}:${X.id}:`,U);let F=`"${Z}" failed on the server.`;return K(F,void 0,U),this.toolResult($,{content:[{type:"text",text:F}],isError:!0})}let J=typeof H==="string"?H:JSON.stringify(H??null),I=Q.outputSchema&&($.era.modern||q(H))?{structuredContent:H}:{};return G.outcome="ok",this.toolResult($,{content:[{type:"text",text:J}],...I,isError:!1})}toolResult($,Z){return $.era.modern?this.complete(Z):Z}async approval($,Z,z,G,W){let X=K2(Z,z),Y=(I,U="approval-declined")=>{return G(U,I),{kind:"answer",result:this.toolResult($,{content:[{type:"text",text:I}],isError:!0})}},K=(I,U)=>{return G(I,U.message),U};if($.era.modern){let I=q($.params._meta)?$.params._meta:{},U=q(I[q3])?I[q3]:{},F=q($.params.inputResponses)?$.params.inputResponses:null,B=$.params.requestState,T=W2(z);if(F&&B!==void 0){let C=R3(E3,"grs1",B);if(!C||C.p!==Q3($.principal)||C.t!==Z.name||C.a!==T)throw K("approval-invalid",new L(D.InvalidParams,"requestState is not valid for this call."));if(!await this.spendNonce(C.n,C.exp))throw K("approval-replayed",new L(D.InvalidParams,"requestState has already been used."));return q9(F[A9])?{kind:"approved"}:Y(`The user did not approve "${Z.name}", and it did not run.`)}if(!C9(U.elicitation))throw K("approval-unavailable",new L(D.MissingRequiredClientCapability,`"${Z.name}" needs the user's approval, and this client cannot ask for it (elicitation).`,{requiredCapabilities:{elicitation:{form:{}}}},400));let j={p:Q3($.principal),t:Z.name,a:T,n:D9(16).toString("base64url"),exp:Date.now()+j9};return W.pending=!0,{kind:"answer",result:{resultType:"input_required",inputRequests:{[A9]:{method:"elicitation/create",params:{mode:"form",...X}}},requestState:M3(E3,"grs1",j),_meta:{[T3]:this.serverInfo}}}}let Q=$.era;if(!Q.session.e||!$.stream)return Y(`"${Z.name}" needs the user's approval, and this client cannot ask for it (elicitation). It did not run.`,"approval-unavailable");let V=`gemi-approval-${D9(12).toString("base64url")}`,H=Q.sessionId,J=await new Promise((I)=>{let U=setTimeout(()=>{this.pending.delete(V),I(null)},this.approvalTimeoutMs),F=(B)=>{clearTimeout(U),I(B)};this.pending.set(V,{session:H,resolve:F}),$.signal.addEventListener("abort",()=>{this.pending.delete(V),F(null)}),$.stream.send({jsonrpc:"2.0",id:V,method:"elicitation/create",params:Q.session.v==="2025-11-25"?{mode:"form",...X}:X})});return J&&!J.error&&q9(J.result)?{kind:"approved"}:Y(`The user did not approve "${Z.name}", and it did not run.`)}async spendNonce($,Z){try{return await this.nonces.consume($,Z)}catch(z){return console.error("[gemi/mcp] Spending an approval failed:",z),!1}}async respond($,Z,z,G,W){if(!z)try{let Q=await Z(null,G);return f({jsonrpc:"2.0",id:$.id,result:Q},200)}finally{W?.()}let X=new AbortController,Y=AbortSignal.any([X.signal,G]),K=new b9(()=>X.abort());return(async()=>{try{let Q=await Z(K,Y);K.send({jsonrpc:"2.0",id:$.id,result:Q})}catch(Q){if(Q instanceof L)K.send(R($.id,Q));else console.error("[gemi/mcp] The MCP endpoint failed:",Q),K.send(R($.id,new L(D.InternalError,"Internal error.")))}finally{W?.(),K.close()}})(),new Response(K.readable,{status:200,headers:{"Content-Type":"text/event-stream","Cache-Control":"no-store","X-Accel-Buffering":"no"}})}unauthorized($){let Z=this.resolvers.map((G)=>G.challenge?.(this.context)).find(Boolean)??'Bearer realm="mcp"',z=$?`${Z}, error="invalid_token", error_description="${$.replace(/["\\]/g,"")}"`:Z;return f(R(null,new L(D.InvalidRequest,"Unauthorized.")),401,{"WWW-Authenticate":z})}async failedAttempt($){let Z=k9(new m($,{},"api",this.endpoint.pathname)),z=await A3(`mcp-auth-failed:${Z}`,$2);return z===null?null:T9(z)}async spend($){if(!this.rateLimit)return null;let Z=await A3(`mcp-endpoint:${$.via}:${$.id}`,this.rateLimit);return Z===null?null:T9(Z)}}class b9{readable;controller;closed=!1;encoder=new TextEncoder;constructor($){this.readable=new ReadableStream({start:(Z)=>{this.controller=Z},cancel:()=>{this.closed=!0,$()}})}send($){if(this.closed)return;this.controller.enqueue(this.encoder.encode(`event: message
+import{Dc as F9,Qc as N9,Yb as M9,ac as K3,bc as R9,fc as U9,kc as e,sd as B9,xc as J9}from"./chunk-y4bjsyt4.js";import{Bd as B3,Ed as p9,Fd as c9,Gd as H$,Id as _$,zd as p3}from"./chunk-z2btwd27.js";import{$d as u9,Ld as v9,Qd as h9,Sd as g9,Zd as x,_d as m9,be as d9,ce as P$}from"./chunk-nc1gstvq.js";import{fe as P}from"./chunk-fv1r0w0r.js";import{Ag as e9,Be as j$,Bg as $$,Cg as w3,Dg as a,Ee as V$,Ef as H3,Ff as g3,Gf as k,Gg as C$,Hg as L3,Ig as d3,Jf as K$,Kf as W$,Lf as X$,Nf as w,Ng as Y$,Oe as U$,Og as Q$,Pe as c3,Te as J3,Ue as X3,Ug as O$,_f as a3,jg as t3,kf as m3,lg as n,pg as o3,qg as o9,rg as a9,te as l,ue as G$,xe as k9,xg as f3,yf as Z3,yg as r9,zg as G3}from"./chunk-1kt3p3dg.js";import{$h as m,Ci as H9,Gi as P3,Hi as F3,Ii as z3,Zh as c,oi as s3}from"./chunk-s7tn2t8x.js";import{Oi as l9}from"./chunk-kscwjycy.js";import{Zi as h}from"./chunk-p4ka241x.js";import{dj as u3}from"./chunk-hkp00b9x.js";import{gj as J$,hj as i3,kj as N3,lj as n3,oj as N$}from"./chunk-70kpm72z.js";import{Cj as n9,Hj as s9}from"./chunk-1btx3kkv.js";import{Xj as w9,Zj as u}from"./chunk-rh811v1f.js";import{_j as A}from"./chunk-wamxfhh6.js";import{ek as L$}from"./chunk-cd847h0t.js";import{Uk as l3}from"./chunk-h4h8m3yr.js";import{$k as U3,cl as y}from"./chunk-vqar6ysw.js";import{ll as h3}from"./chunk-yc2pnb1w.js";import{xl as t9}from"./chunk-51fvpq55.js";var S$="mcp",q$=/^[\x21\x23-\x5B\x5D-\x7E]+$/;class O extends e{status;constructor($,Z){super($);this.status=Z;this.name="McpToolError"}}class v extends Error{reason;constructor($,Z){super($);this.reason=Z;this.name="McpCallRefusedError"}}var r3=/^[A-Za-z0-9_-]{1,64}$/,T$=/:([A-Za-z_][A-Za-z0-9_]*)([?*+]?)/g,e3=4000,M=1e5,k$=/^(text\/|application\/([\w.+-]*\+)?(json|xml))/i,P9=new WeakMap;function K6($){return P9.get($)}class i{router;dispatcher;static token="router.mcp";plans=new Map;scopeTools=new Map;files;featureOn;constructor($,Z,z={}){this.router=$;this.dispatcher=Z;this.files=y$(z.files),this.featureOn=z.featureOn??X3;for(let[G,W]of Object.entries($.routes??{}))this.plans.set(G,M$(W)?this.planNative(G,W):this.plan(G,W));this.resolveScopes()}list($,Z){if(D3($),$.kind==="local")return this.descriptors(Z);let z=[];for(let[G,W]of this.plans){if(!W.remote||!this.grants($.principal,G))continue;if(W9(W.remote,Z))z.push(W.remote)}return z}async available($,Z){let z=[];for(let G of this.list($,Z))if(await this.isOn(G))z.push(G);return z}descriptors($){let Z=[];for(let{descriptor:z}of this.plans.values())if(W9(z,$))Z.push(z);return Z}get maxFileBytes(){return this.files.maxBytes}scopes(){return[...this.scopeTools].map(([$,{description:Z}])=>({name:$,description:Z}))}scopesFor($){return[...this.scopeTools].filter(([,{tools:Z}])=>Z.has($)).map(([Z])=>Z)}async execute($,Z,z,G,W={}){D3($);let X=this.plans.get(Z);if(X&&!await this.isOn(X.descriptor)){if($.kind==="remote")throw new v(`There is no tool named "${Z}".`,"unknown-tool");throw new O(`There is no tool named "${Z}".`,404)}if($.kind==="remote"){if(!X?.remote||!this.grants($.principal,Z))throw new v(`There is no tool named "${Z}".`,"unknown-tool");if(X.descriptor.requiresApproval&&W.approved!==!0&&!W3(X))throw new v(`"${Z}" needs the user's approval, and this call does not have it.`,"approval-required");G=void 0}if(!X)throw Error(`McpRegistry: there is no tool named "${Z}".`);if(X.kind==="tool")return await this.executeNative(X,$,z,G,W);let Y=X,K=$.kind==="remote"?Y.remote:Y.descriptor,Q=K.inputSchema.safeParse(z);if(Q.ok===!1)throw new O(`Invalid arguments for "${Z}": ${Q.errors.join(", ")}`);let V=Q.value,H={caller:$,req:$.req,tool:K,input:V,ctx:G},J=await this.fillPath(Y,H),{path:I}=this.dispatcher.getRouteHandlerAndParams(new Request(`http://gemi.internal/api${J}`));if(I!==K.url)throw new O(`"${Z}" has nothing at ${J}.`,404);let U={};for(let _ of Y.jsonKeys)if(V[_]!==void 0)U[_]=V[_];let F,B="";if(Y.fileFields.length>0)F=await this.formData(Y,U,H);else if(K.method==="GET")B=c$(U);else if(Y.jsonKeys.length>0)F=U;let T=this.router.credentials?await this.bind(Y,"the credentials",()=>this.router.credentials(H)):void 0,j={...T?{credentials:T}:{},...W.signal?{signal:W.signal}:{},...W.progress?{progress:W.progress}:{},...$.kind==="remote"?{identity:{user:$.principal.user,grant:{via:$.principal.via,id:$.principal.id,scopes:$.principal.scopes,...$.principal.clientId?{clientId:$.principal.clientId}:{}}}}:{}},C;try{let _=B?`${J}?${B}`:J;C=Object.keys(j).length>0?await this.dispatcher.dispatchAs($.req,K.method,_,F,j):await this.dispatcher.dispatchAs($.req,K.method,_,F)}catch(_){throw console.error(`[gemi/mcp] Dispatching "${Z}" failed:`,_),new O(`"${Z}" failed on the server.`,500)}if(!Y.result&&!K.outputSchema)return await V9(Z,C);return await this.project(Y,H,C)}async isOn($){return $.feature===void 0||await this.featureOn($.feature)===!0}plan($,Z){if(!r3.test($))throw Error(`McpRouter: "${$}" is not a valid tool name. A routes key is the tool's name as a model and an MCP client see it, used verbatim \u2014 letters, digits, "_" and "-", at most 64.`);let z=`McpRouter: "${$}" (${Z?.method} ${Z?.url})`;if(!(Z instanceof Object)||Z.__internal_brand!=="McpRoute")throw Error(`McpRouter: "${$}" is not a route or a tool. Declare it with this.fromApiRoute(...) or this.fromTool(...).`);let{method:G,url:W,meta:X}=Z;if(X.feature!==void 0&&(typeof X.feature!=="string"||X.feature===""))throw Error(`${z}: feature must be a feature key from app/features.`);if(W.startsWith("/__gemi__"))throw Error(`${z} is a framework route, not an app route.`);let Y=this.dispatcher.flatRoutes[W]?.[G];if(!Y)throw Error(`${z} names no route of this app. Expose a route by the path and verb it is mounted at.`);let K=[...W.matchAll(T$)].map(([,N,S])=>({name:N,modifier:S})),Q=X.params??{};for(let N of K)if(!(N.name in Q))throw Error(`${z}: the path param "${N.name}" must be bound or declared "input".`);for(let[N,S]of Object.entries(Q)){if(!K.some((g)=>g.name===N))throw Error(`${z}: "${N}" in params is not a param of the url.`);if(Y9(S))g$(z,`params.${N}`,S);else X9(z,`params.${N}`,S)}let V=[],H;if(X.input){if(H=X.input.toJSONSchema(),H.type!=="object"||!H.properties)throw Error(`${z}: input must be an s.object(...), the fields of the request body.`);V=Object.keys(H.properties)}let J=Object.entries(X.files??{}).map(([N,S])=>({name:N,binder:S}));for(let N of J)X9(z,`files.${N.name}`,N.binder);if(X.result!==void 0&&typeof X.result!=="function")throw Error(`${z}: result must be a function.`);if(X.output!==void 0&&typeof X.output?.safeParse!=="function")throw Error(`${z}: output must be a schema, built with s.`);if(X.title!==void 0&&(typeof X.title!=="string"||X.title===""))throw Error(`${z}: title must be a non-empty string.`);let I=K9(z,G,X.annotations);if(J.length>0&&G==="GET")throw Error(`${z}: a GET has no body to carry a file.`);let U={},F=(N,S)=>{if(N in U)throw Error(`${z}: "${N}" is the input key of two params or files, and the model can only send one.`);U[N]=S},B=new Map,T=new Map;for(let N of K){let S=Q[N.name];if(S==="input"){let g=c.string().describe(`The ":${N.name}" segment of the url.`);F(N.name,N.modifier==="?"||N.modifier==="*"?g.optional():g)}else if(Y9(S)){let g=S.as??N.name;F(g,S.input),T.set(N.name,{key:g,param:S})}else B.set(N.name,S)}let j={};for(let N of J)if(N.binder==="input")F(N.name,c.string().describe("The id of an attachment the user uploaded or a tool produced (gemi_att_\u2026), whose file is sent as this field.")),j[N.name]=this.remoteFileSchema();let C=[...Object.keys(U),...J.map((N)=>N.name)];for(let N of new Set(C))if(V.includes(N))throw Error(`${z}: "${N}" is both an input field and a param or file, and the model can only send one.`);let _=Object.freeze({kind:"route",name:$,description:X.description,method:G,url:W,inputSchema:Q9(X.input,H,c.object(U)),...X.output?{outputSchema:X.output}:{},...X.title?{title:X.title}:{},annotations:I,tags:Object.freeze([...X.tags??[]]),requiresApproval:X.requiresApproval===!0,...X.feature!==void 0?{feature:X.feature}:{},...Y.source?{source:Y.source}:{}}),r=!J.every((N)=>N.binder==="input")?null:J.length===0?_:Object.freeze({..._,inputSchema:Q9(X.input,H,c.object(d$(U,Object.keys(j))),j)});return{kind:"route",descriptor:_,remote:r,params:K,paramBinders:B,modelParams:T,fileFields:J,jsonKeys:V,...X.result?{result:X.result}:{}}}remoteFileSchema(){let{maxBytes:$,fetch:Z}=this.files,z={name:{type:"string",description:"The file's name, like report.pdf."},mimeType:{type:"string",description:"The file's media type, like application/pdf."},data:{type:"string",contentEncoding:"base64",description:`The file's bytes, base64-encoded (RFC 4648, standard alphabet). At most ${$} bytes decoded.`}};if(Z)z.url={type:"string",format:"uri",description:"An https URL the server downloads the file from, instead of data."};let G={type:"object",description:Z?"A file, sent as base64 in data or fetched from url: exactly one of the two.":"A file, sent as base64 in data.",properties:z,required:["name","mimeType"],additionalProperties:!1},W=Object.keys(z),X=(Y)=>{if(typeof Y!=="object"||Y===null||Array.isArray(Y))return{ok:!1,errors:["a file must be an object"]};let K=[],Q={};for(let V of Object.keys(Y))if(!W.includes(V))K.push(`a file has no field "${V}"`);for(let V of W){let H=Y[V];if(H===void 0||H===null){if(V==="name"||V==="mimeType")K.push(`a file needs "${V}"`);continue}if(typeof H!=="string")K.push(`a file's "${V}" must be a string`);else Q[V]=H}return K.length>0?{ok:!1,errors:K}:{ok:!0,value:Q}};return{toJSONSchema:()=>G,safeParse:X,parse(Y){let K=X(Y);if(K.ok===!1)throw Error(K.errors.join(", "));return K.value}}}planNative($,Z){if(!r3.test($))throw Error(`McpRouter: "${$}" is not a valid tool name. A routes key is the tool's name as a model and an MCP client see it, used verbatim \u2014 letters, digits, "_" and "-", at most 64.`);let z=`McpRouter: "${$}" (a native tool)`,{tool:G,meta:W={}}=Z;if(!(G instanceof Object)||typeof G.name!=="string")throw Error(`${z} is not an AgentTool. Pass one built with AgentTool.create(...).`);if(G.answeredBy==="client"||typeof G.execute!=="function")throw Error(`${z}: "${G.name}" is answered by the client, and only a tool the server runs can be called through the registry.`);if(typeof G.inputSchema==="function")throw Error(`${z}: "${G.name}" resolves its input schema per run, and the registry lists one schema to every caller. Give it a fixed inputSchema.`);if(typeof G.inputSchema?.safeParse!=="function")throw Error(`${z}: its inputSchema must be a schema, built with s.`);if(typeof W!=="object"||W===null)throw Error(`${z}: the meta must be an object.`);if(W.description!==void 0&&(typeof W.description!=="string"||W.description.trim()===""))throw Error(`${z}: description must be a non-empty string.`);if(W.title!==void 0&&(typeof W.title!=="string"||W.title===""))throw Error(`${z}: title must be a non-empty string.`);if(W.tags!==void 0&&(!Array.isArray(W.tags)||W.tags.some((Q)=>typeof Q!=="string")))throw Error(`${z}: tags must be an array of strings.`);if(W.requiresApproval===!1&&G.requiresApproval)throw Error(`${z}: "${G.name}" requires approval, and requiresApproval: false would run it without asking. Leave it out, or register a tool that does not ask.`);let X=W.remote;if(X!==void 0){if(typeof X!=="object"||X===null||typeof X.context!=="function")throw Error(`${z}: remote must be { context(call) }, building the AgentContext a remote call runs with.`);if(X.progress!==void 0&&typeof X.progress!=="function")throw Error(`${z}: remote.progress must be a function.`)}let Y=W.description??G.description;if(typeof Y!=="string"||Y.trim()==="")throw Error(`${z} needs a description: the tool's own, or the meta's.`);let K=Object.freeze({kind:"tool",name:$,description:Y,inputSchema:G.inputSchema,...G.outputSchema?{outputSchema:G.outputSchema}:{},...W.title?{title:W.title}:{},annotations:K9(z,void 0,W.annotations),tags:Object.freeze([...W.tags??[]]),requiresApproval:G.requiresApproval||W.requiresApproval===!0});return{kind:"tool",descriptor:K,remote:X?K:null,tool:G,meta:W}}async approvalRequired($,Z,z,G={}){let W=this.plans.get(Z);if(!W)return!0;if(!W3(W))return W.descriptor.requiresApproval;let X=W;if($.kind!=="remote"||!X.meta.remote)return!0;let Y=X.descriptor.inputSchema.safeParse(z);if(Y.ok===!1)return!0;let K={caller:$,req:$.req,tool:X.descriptor,input:Y.value},Q;try{Q=await this.bind(X,"the remote context",()=>X.meta.remote.context(K))}catch{return!0}if(typeof Q!=="object"||Q===null)return!0;let V=G.signal??new AbortController().signal;return G9(X,Y.value,z9(Z9(X,Q,V)))}nativeApproval($){let Z=this.plans.get($);if(Z?.kind!=="tool")throw Error(`McpRegistry: there is no native tool named "${$}".`);return W3(Z)??Z.descriptor.requiresApproval}nativeTool($){let Z=this.plans.get($);if(Z?.kind!=="tool")throw Error(`McpRegistry: there is no native tool named "${$}".`);return Z.tool}startNative($,Z,z,G){let W=this.plans.get(Z);if(W?.kind!=="tool")throw Error(`McpRegistry: there is no native tool named "${Z}".`);if($===void 0)return W.tool.execute(z,G);if(D3($),$.kind!=="local")throw Error("McpRegistry: startNative is for a local caller. A remote call goes through execute().");let X=W.descriptor.inputSchema.safeParse(z);if(X.ok===!1)throw new O(`Invalid arguments for "${Z}": ${X.errors.join(", ")}`);return this.runNative(W,{caller:$,req:$.req,tool:W.descriptor,input:X.value},G)}runNative($,Z,z){let G={...z};return P9.set(G,{...Z,ctx:G}),$.tool.execute(Z.input,G)}async executeNative($,Z,z,G,W){let{name:X}=$.descriptor,Y=$.descriptor.inputSchema.safeParse(z);if(Y.ok===!1)throw new O(`Invalid arguments for "${X}": ${Y.errors.join(", ")}`);let K={caller:Z,req:Z.req,tool:$.descriptor,input:Y.value},Q=(_,_3)=>{if(!W.progress)return;let r;try{r=$.meta.remote?.progress?$.meta.remote.progress(_,_3):E$(_,_3)}catch(N){console.error(`[gemi/mcp] The progress mapping of "${X}" failed:`,N);return}if(r)W.progress(r)};if(Z.kind==="local"){if(!G)throw Error(`McpRegistry: "${X}" is a native tool, which runs with the tool context of an agent call, and none was passed to execute().`);return await $9(this.runNative($,{...K,ctx:G},G),Q)}let V=$.meta.remote,H=await this.bind($,"the remote context",()=>V.context(K));if(typeof H!=="object"||H===null)throw console.error(`[gemi/mcp] The remote context of "${X}" is not an object:`,H),new O(`"${X}" failed on the server.`,500);let J=$.tool.timeoutMs,I=[...W.signal?[W.signal]:[],...J!==void 0?[AbortSignal.timeout(J)]:[]],U=I.length===0?new AbortController().signal:I.length===1?I[0]:AbortSignal.any(I),F=Z9($,H,U);if(!W.approved&&W3($)&&await G9($,K.input,z9(F)))throw new v(`"${X}" needs the user's approval, and this call does not have it.`,"approval-required");let B;try{B=await $9(this.runNative($,{...K,ctx:F},F),Q,U)}catch(_){if(U.aborted&&_===U.reason){if(W.signal?.aborted)throw new O(`"${X}" was cancelled.`,499);throw new O(`"${X}" did not finish within ${J} ms.`,504)}if(_ instanceof O)throw _;if(_ instanceof e||_ instanceof v)throw new O(_.message);throw console.error(`[gemi/mcp] "${X}" failed for a remote caller:`,_),new O(`"${X}" failed on the server.`,500)}let T=(_)=>{return console.error(`[gemi/mcp] "${X}" ${_}`),new O(`"${X}" failed on the server.`,500)};if(J9(B))throw T("answered a job handle, and a remote call has no background jobs.");let j=B;if($.descriptor.outputSchema){let _=$.descriptor.outputSchema.safeParse(j);if(_.ok===!1)throw T(`answered what its output schema refuses: ${_.errors.join(", ")}`);j=_.value}if(j===void 0)return null;if(typeof j==="string")return j.length>M?`${j.slice(0,M)}\u2026 [cut at ${M} of ${j.length} characters]`:j;let C=JSON.stringify(j);if(C!==void 0&&C.length>M)return`${C.slice(0,M)}\u2026 [cut at ${M} of ${C.length} characters]`;return j}async fillPath($,Z){let{input:z,req:G}=Z,W=$.descriptor.url;for(let X of $.params){let Y=$.paramBinders.get(X.name),K=$.modelParams.get(X.name),Q;if(Y||K){if(Q=K?await this.bind($,`the param "${X.name}"`,()=>K.param.bind(z[K.key],G,Z),{refusals:!0}):await this.bind($,`the param "${X.name}"`,()=>Y(G,Z)),Q===void 0||Q===null||Q==="")throw console.error(`[gemi/mcp] The ${K?"resolver":"binder"} for "${X.name}" of "${$.descriptor.name}" returned ${JSON.stringify(Q)}.`),new O(`"${$.descriptor.name}" failed on the server.`,500)}else Q=z[X.name];let V=`:${X.name}${X.modifier}`;if(Q===void 0||Q===null||Q===""){if(X.modifier!=="?"&&X.modifier!=="*")throw new O(`"${X.name}" of "${$.descriptor.name}" must not be empty.`);W=W.replace(`/${V}`,"");continue}W=W.replace(V,p$($.descriptor.name,X,String(Q)))}return W}async formData($,Z,z){let{input:G,ctx:W}=z,X=$.descriptor.name;if(z.caller.kind==="remote"){let K=new FormData;for(let[Q,V]of Object.entries(Z))O3(K,Q,V);for(let Q of $.fileFields)K.append(Q.name,await this.remoteFile(X,Q.name,G[Q.name]));return K}if(!W)throw Error(`McpRegistry: "${X}" sends a file, which is resolved through the tool context's attachments, and none was passed to execute().`);let Y=new FormData;for(let[K,Q]of Object.entries(Z))O3(Y,K,Q);for(let K of $.fileFields){let Q=K.binder==="input"?G[K.name]:await this.bind($,`the file "${K.name}"`,()=>K.binder(W,z));if(typeof Q!=="string"||Q==="")throw new O(`"${X}" needs a file for "${K.name}", and this turn has none. Ask the user to attach one.`);Y.append(K.name,await W.attachments.file(Q))}return Y}async remoteFile($,Z,z){let G=(H)=>new O(`"${Z}" of "${$}" ${H}`,400),W=z,{maxBytes:X,fetch:Y}=this.files;if(!f$(W.name))throw G("needs a name of 1 to 255 characters, without control characters or slashes.");if(!w$.test(W.mimeType))throw G(`has a mimeType that is not a media type: "${W.mimeType.slice(0,100)}".`);let K=typeof W.data==="string",Q=typeof W.url==="string";if(K===Q)throw G(Y?"needs exactly one of data or url.":"needs its bytes, base64, in data.");if(K){let H=W.data.replace(/\s+/g,"");if(Math.floor(H.length*3/4)-h$(H)>X)throw G(`is larger than the ${X} bytes a file may be.`);if(H.length%4!==0||!v$.test(H))throw G("has data that is not base64 (RFC 4648, standard alphabet, padded).");return new File([Buffer.from(H,"base64")],W.name,{type:W.mimeType})}if(!Y)throw G("cannot be fetched from a URL here. Send its bytes, base64, in data.");let V;try{V=new URL(W.url)}catch{throw G("has a url that is not a URL.")}if(V.protocol!=="https:")throw G("can only be fetched from an https URL.");try{let H=await H9(V.href,{...Y,maxSize:Math.min(Y.maxSize??X,X),redirect:"follow"});if(!H.ok)throw G(`could not be fetched: ${V.host} answered ${H.status}.`);let J=await H.arrayBuffer();return new File([J],W.name,{type:W.mimeType})}catch(H){if(H instanceof O)throw H;throw G(`could not be fetched from ${V.host}: ${H instanceof Error?H.message:"failed"}.`)}}grants($,Z){for(let z of $.scopes??[])if(this.scopeTools.get(z)?.tools.has(Z))return!0;return!1}resolveScopes(){let $=this.router.scopes;if($===void 0){this.scopeTools.set(S$,{description:"Use this app's tools as you",tools:new Set(this.plans.keys())});return}if(typeof $!=="object"||$===null)throw Error("McpRouter: scopes must be an object of scope names.");let Z=new Set([...this.plans.values()].flatMap(({descriptor:z})=>z.tags));for(let[z,G]of Object.entries($)){let W=`McpRouter: scope "${z}"`;if(!q$.test(z))throw Error(`${W} is not a valid OAuth scope: printable ASCII, no spaces or quotes.`);if(typeof G?.description!=="string"||G.description==="")throw Error(`${W} needs a description: it is what a consent screen shows.`);let X=new Set;for(let Y of G.tags??[]){if(!Z.has(Y))throw Error(`${W} names the tag "${Y}", which no tool has.`);for(let[K,{descriptor:Q}]of this.plans)if(Q.tags.includes(Y))X.add(K)}for(let Y of G.names??[]){if(!this.plans.has(Y))throw Error(`${W} names "${Y}", which is no tool.`);X.add(Y)}if(X.size===0)throw Error(`${W} reaches no tool. Give it tags or names.`);this.scopeTools.set(z,{description:G.description,tools:X})}}async project($,Z,z){let{name:G,outputSchema:W}=$.descriptor;if(z.status<200||z.status>=300)return await V9(G,z);let X=(J,I)=>{if(I===void 0)console.error(`[gemi/mcp] "${G}" ${J}`);else console.error(`[gemi/mcp] "${G}" ${J}`,I);return new O(`"${G}" failed on the server.`,500)},Y=z.headers.get("Content-Type"),K=await z.text(),Q=null;if(K!=="")try{Q=JSON.parse(K)}catch{throw X(`answered ${Y??"a body with no content-type"} that is not JSON, and its result or output needs JSON.`)}let V=Q;if($.result)try{V=await $.result(Q,Z)}catch(J){throw X("failed in its result projection:",J)}if(W){let J=W.safeParse(V);if(J.ok===!1)throw X(`answered what its output schema refuses: ${J.errors.join(", ")}`);V=J.value}if(V===void 0)return null;let H=JSON.stringify(V);if(H!==void 0&&H.length>M)return`${H.slice(0,M)}\u2026 [cut at ${M} of ${H.length} characters]`;return V}async bind($,Z,z,G={}){try{return await z()}catch(W){if(G.refusals&&W instanceof e)throw W;throw console.error(`[gemi/mcp] Binding ${Z} of "${$.descriptor.name}" failed:`,W),new O(`"${$.descriptor.name}" failed on the server.`,500)}}}function M$($){return $ instanceof Object&&$.__internal_brand==="McpTool"}function R$($){return typeof $==="object"&&$!==null&&typeof $.next==="function"&&Symbol.asyncIterator in $}async function $9($,Z,z){let G;if(z)G=new Promise((X,Y)=>{if(z.aborted)Y(z.reason);else z.addEventListener("abort",()=>Y(z.reason),{once:!0})}),G.catch(()=>{});let W=(X)=>G?Promise.race([X,G]):X;if(!R$($))return await W(Promise.resolve($));try{let X=0,Y=await W($.next());while(!Y.done)Z(Y.value,++X),Y=await W($.next());return Y.value}catch(X){throw $.return(void 0).catch(()=>{}),X}}function E$($,Z){if(typeof $==="string")return{progress:Z,message:$};if(typeof $==="object"&&$!==null){let{progress:z,total:G,message:W}=$;if(typeof z==="number"&&Number.isFinite(z))return{progress:z,...typeof G==="number"?{total:G}:{},...typeof W==="string"?{message:W}:{}};if(typeof W==="string")return{progress:Z,message:W}}return{progress:Z}}function Z9($,Z,z){let G=$.descriptor.name,W=`mcp_${crypto.randomUUID()}`,X=`mcp_call_${crypto.randomUUID()}`,Y=(Q)=>async()=>{throw new e(`"${G}" was called by a remote MCP client, which has no ${Q}.`,{retryable:!1})},K={put:Y("attachment store"),get:Y("attachment store"),read:Y("attachment store"),file:Y("attachment store")};return{context:Z,body:{},runId:W,toolCallId:X,signal:z,step:1,depth:0,resumed:!1,attachments:K,turn:Object.freeze({attachments:Object.freeze([])}),runAgent:Y("agent run to nest a sub-agent in"),generateImage:Y("attachment store to put an image in"),editImage:Y("attachment store to put an image in"),generate:(Q)=>B9({...Q,signal:Q.signal?AbortSignal.any([z,Q.signal]):z},{origin:{mcp:G,runId:W,toolCallId:X}}),jobs:F9({jobs:void 0,threadId:void 0,runId:W,toolCallId:X,toolName:G,depth:0,async:$.tool.async,attachments:null}),memory:N9(),meter:U9().meter}}function W3($){if($.kind!=="tool"||$.meta.requiresApproval===!0)return;return $.tool.approvalPredicate}function z9($){return{context:$.context,body:$.body,runId:$.runId,threadId:$.threadId,toolCallId:$.toolCallId,step:$.step,depth:$.depth,signal:$.signal}}async function G9($,Z,z){try{return await $.tool.approvalPredicate(Z,z)!==!1}catch(G){return console.error(`[gemi/mcp] The requiresApproval of "${$.descriptor.name}" threw, so the call asks the user:`,G),!0}}function D3($){if($?.kind==="local"&&$.req)return;if($?.kind==="remote"&&$.req&&$.principal?.user&&typeof $.principal.id==="string"&&Array.isArray($.principal.scopes))return;throw Error('McpRegistry: a caller is { kind: "local", req } or { kind: "remote", req, principal }, with the principal a caller resolver verified.')}function W9($,Z){if(Z?.names&&!Z.names.includes($.name))return!1;if(Z?.tags&&!$.tags.some((z)=>Z.tags.includes(z)))return!1;return!0}var b$=10485760;function y$($){let Z=$?.maxBytes??b$;if(!Number.isSafeInteger(Z)||Z<=0)throw Error("McpRegistry: files.maxBytes must be a positive whole number of bytes.");let z=$?.fetchUrls===!0?{}:typeof $?.fetchUrls==="object"&&$.fetchUrls!==null?$.fetchUrls:null;return{maxBytes:Z,fetch:z}}function f$($){if($.length===0||$.length>255)return!1;for(let Z of $){let z=Z.codePointAt(0);if(z<32||z===127||Z==="/"||Z==="\\")return!1}return!0}var w$=/^[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]{0,126}\/[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]{0,126}(\s*;.{0,200})?$/,v$=/^[A-Za-z0-9+/]*={0,2}$/;function h$($){return $.endsWith("==")?2:$.endsWith("=")?1:0}function X9($,Z,z){if(z!=="input"&&typeof z!=="function")throw Error(`${$}: ${Z} must be a function or "input".`)}function Y9($){return $ instanceof Object&&$.__internal_brand==="McpModelParam"}function g$($,Z,z){if(z.as!==void 0&&(typeof z.as!=="string"||z.as===""))throw Error(`${$}: ${Z}.as must be a non-empty string.`);let G=z.input;if(typeof G?.safeParse!=="function"||typeof G.toJSONSchema!=="function")throw Error(`${$}: ${Z}.input must be a schema, built with s.`);if(typeof z.bind!=="function")throw Error(`${$}: ${Z}.bind must be a function.`)}var m$=new Set(["readOnlyHint","destructiveHint","idempotentHint","openWorldHint"]);function u$($){switch($){case"GET":return{readOnlyHint:!0};case"DELETE":return{destructiveHint:!0};case"PUT":return{idempotentHint:!0};default:return{}}}function K9($,Z,z){if(z!==void 0&&(typeof z!=="object"||z===null))throw Error(`${$}: annotations must be an object of hints.`);let G=Z?u$(Z):{};for(let[W,X]of Object.entries(z??{})){if(!m$.has(W))throw Error(`${$}: "${W}" is not a tool annotation. Use readOnlyHint, destructiveHint, idempotentHint or openWorldHint.`);if(X===void 0)continue;if(typeof X!=="boolean")throw Error(`${$}: annotations.${W} must be true or false.`);G[W]=X}if(G.readOnlyHint===!0&&(G.destructiveHint||G.idempotentHint))throw Error(`${$} is read-only${z?.readOnlyHint?"":` (a ${Z})`} and also ${G.destructiveHint?"destructive":"idempotent"}, which only a tool that is not read-only can be. Set readOnlyHint: false if it changes something.`);return Object.freeze(G)}function Q9($,Z,z,G={}){let W=z.toJSONSchema(),X=Object.fromEntries(Object.entries(G).map(([Q,V])=>[Q,V.toJSONSchema()])),Y={...Z??{},type:"object",properties:{...Z?.properties??{},...W.properties,...X},required:[...Z?.required??[],...W.required??[],...Object.keys(G)],additionalProperties:!1},K=(Q)=>{if(typeof Q!=="object"||Q===null||Array.isArray(Q))return{ok:!1,errors:["expected an object"]};let V=[],H={};if($){let I=$.safeParse(Q);if(I.ok===!1)V.push(...I.errors);else H={...I.value}}let J=z.safeParse(Q);if(J.ok===!1)V.push(...J.errors);else H={...H,...J.value};for(let[I,U]of Object.entries(G)){let F=Q[I];if(F===void 0){V.push(`"${I}" is required`);continue}let B=U.safeParse(F);if(B.ok===!1)V.push(...B.errors.map((T)=>`${I}: ${T}`));else H[I]=B.value}return V.length>0?{ok:!1,errors:V}:{ok:!0,value:H}};return{toJSONSchema:()=>Y,safeParse:K,parse(Q){let V=K(Q);if(V.ok===!1)throw Error(V.errors.join(", "));return V.value}}}function d$($,Z){return Object.fromEntries(Object.entries($).filter(([z])=>!Z.includes(z)))}function p$($,Z,z){let G=Z.modifier==="*"||Z.modifier==="+"?z.split("/"):[z];if(G.some((W)=>W==="."||W===".."))throw new O(`"${z}" is not a valid value for "${Z.name}" of "${$}".`);return G.map(encodeURIComponent).join("/")}function O3($,Z,z){if(z===void 0||z===null)return;if(Array.isArray(z)){for(let G of z)O3($,Z,G);return}$.append(Z,typeof z==="object"?JSON.stringify(z):String(z))}function c$($){let Z=new URLSearchParams,z=(G,W)=>{if(W===void 0||W===null)return;if(Array.isArray(W)){for(let X of W)z(G,X);return}Z.append(G,typeof W==="object"?JSON.stringify(W):String(W))};for(let[G,W]of Object.entries($))z(G,W);return Z.toString()}async function V9($,Z){if(Z.status>=200&&Z.status<300){let G=Z.headers.get("Content-Type");if(G&&!k$.test(G)){let X=(await Z.arrayBuffer()).byteLength;return`"${$}" answered with ${X} bytes of ${G}, which is not shown.`}let W=await Z.text();if(W==="")return null;if(W.length>M)return`${W.slice(0,M)}\u2026 [cut at ${M} of ${W.length} characters]`;try{return JSON.parse(W)}catch{return W}}let z=await Z.text();if(Z.status>=400&&Z.status<500){let G=z.length>e3?`${z.slice(0,e3)}\u2026`:z;throw new O(`"${$}" was refused with ${Z.status}${G?`: ${G}`:"."}`,Z.status)}if(Z.status<500)console.error(`[gemi/mcp] "${$}" answered ${Z.status}${Z.headers.get("Location")?` to ${Z.headers.get("Location")}`:""}, which a tool call cannot follow.`);throw new O(`"${$}" failed on the server.`,Z.status)}import{createHash as i$,randomBytes as l$,timingSafeEqual as n$}from"crypto";function j3($){let Z=$.headers.get("authorization");if(!Z)return null;let z=/^Bearer[ ]+([\x21-\x7e]+)$/i.exec(Z.trim());return z?z[1]:null}class s${options;name="api-key";constructor($){this.options=$;if(typeof $?.prefix!=="string"||!/^[A-Za-z0-9_-]{3,32}$/.test($.prefix))throw Error('McpApiKeyResolver: prefix is required: 3 to 32 letters, digits, _ or -, like "myapp_mcp_".');if(typeof $.verify!=="function")throw Error("McpApiKeyResolver: verify must be a function that looks a key up.")}static generate($){return`${$}${l$(32).toString("base64url")}`}static hash($){return i$("sha256").update($).digest("hex")}static hashesMatch($,Z){let z=Buffer.from($),G=Buffer.from(Z);return z.length===G.length&&n$(z,G)}async resolve($){let Z=j3($);if(!Z?.startsWith(this.options.prefix))return null;let z=await this.options.verify(Z,$);if(!z)return{ok:!1,error:"invalid_token",description:"The API key is not valid."};if(!z.user||typeof z.id!=="string"||z.id===""||!Array.isArray(z.scopes))throw Error("McpApiKeyResolver: verify must answer { user, id, scopes } for a key it knows, or null.");return{ok:!0,principal:{user:z.user,via:this.name,id:z.id,scopes:[...z.scopes]}}}}import{createHash as E9,randomBytes as D9}from"crypto";async function A3($,Z){let z=t$();if(!z)return null;let G=await z.consume($,Z);return G.allowed?null:Math.max(1,Math.ceil(G.retryAfter/1000))}function t$(){try{let $=y();return $.bound(l)?$.make(l):null}catch{return null}}var x3=["2026-07-28"],Y3=["2025-11-25","2025-06-18","2025-03-26"],C3=[...x3,...Y3],S3="io.modelcontextprotocol/protocolVersion",q3="io.modelcontextprotocol/clientCapabilities";var T3="io.modelcontextprotocol/serverInfo",D={ParseError:-32700,InvalidRequest:-32600,MethodNotFound:-32601,InvalidParams:-32602,InternalError:-32603,HeaderMismatch:-32020,MissingRequiredClientCapability:-32021,UnsupportedProtocolVersion:-32022};class L extends Error{code;data;status;constructor($,Z,z,G=200){super(Z);this.code=$;this.data=z;this.status=G;this.name="JsonRpcError"}}function R($,Z){return{jsonrpc:"2.0",id:$,error:{code:Z.code,message:Z.message,...Z.data!==void 0?{data:Z.data}:{}}}}function I9($){if(Array.isArray($))throw new L(D.InvalidRequest,"Batched requests are not supported.",void 0,400);if(typeof $!=="object"||$===null||$.jsonrpc!=="2.0")throw new L(D.InvalidRequest,"Not a JSON-RPC 2.0 message.",void 0,400);let Z=$,z=Z.id,G=typeof z==="string"||typeof z==="number"&&Number.isFinite(z);if(typeof Z.method==="string"){if(Z.params!==void 0&&(typeof Z.params!=="object"||Z.params===null||Array.isArray(Z.params)))throw new L(D.InvalidRequest,"params must be an object.",void 0,400);if(z===void 0)return{kind:"notification",message:Z};if(!G)throw new L(D.InvalidRequest,"id must be a string or a number.",void 0,400);return{kind:"request",message:Z}}if(G&&(("result"in Z)||("error"in Z)))return{kind:"response",message:Z};throw new L(D.InvalidRequest,"Not a JSON-RPC request, notification or response.",void 0,400)}function k3($,Z){let z=$.outputSchema?.toJSONSchema(),G={...$.annotations,...$.title&&!Z?{title:$.title}:{}};return{name:$.name,...$.title?{title:$.title}:{},description:$.description,inputSchema:$.inputSchema.toJSONSchema(),...z&&(Z||z.type==="object")?{outputSchema:z}:{},...Object.keys(G).length>0?{annotations:G}:{}}}function q($){return typeof $==="object"&&$!==null&&!Array.isArray($)}function L9($){let Z=/^=\?base64\?([A-Za-z0-9+/]*={0,2})\?=$/.exec($);if(!Z)return $;try{let z=Buffer.from(Z[1],"base64");return new TextDecoder("utf-8",{fatal:!0}).decode(z)}catch{return null}}import{createHmac as o$,timingSafeEqual as a$}from"crypto";function M3($,Z,z){let G=Buffer.from(JSON.stringify(z)).toString("base64url");return`${Z}.${G}.${_9($,Z,G).toString("base64url")}`}function R3($,Z,z,G=Date.now()){if(typeof z!=="string"||z.length>8192)return null;let W=z.split(".");if(W.length!==3||W[0]!==Z)return null;let[,X,Y]=W,K=Buffer.from(Y,"base64url"),Q=_9($,Z,X);if(K.length!==Q.length||!a$(K,Q))return null;let V;try{V=JSON.parse(Buffer.from(X,"base64url").toString("utf8"))}catch{return null}if(typeof V!=="object"||V===null)return null;if(typeof V.exp!=="number"||V.exp<=G)return null;return V}function _9($,Z,z){return o$("sha256",K3($)).update(`${Z}.${z}`).digest()}var E3="gemi.mcp.request-state.v1",O9="gemi.mcp.session.v1",r$=86400000,j9=600000,A9="gemi_approval",b3=2000,e$={limit:600,window:60},$2={limit:30,window:60};class $3{registry;static token="router.mcp.http";endpoint;resolvers;context;allowedOrigins;rateLimit;maxBodyBytes;serverInfo;instructions;nonces;approvalTimeoutMs;onCall;feature;featureOn;pending=new Map;inflight=new Map;constructor($,Z,z={}){this.registry=$;if(typeof Z.url!=="string")throw Error(`route.mcp.remote.url is required: the endpoint's canonical URL, like "https://example.com/mcp".`);this.endpoint=G2(Z.url);let G=Z.resolvers??[];if(!Array.isArray(G)||G.length===0)throw Error("route.mcp.remote is enabled without a caller resolver. Configure route.mcp.remote.resolvers \u2014 an McpOAuthServer, an McpApiKeyResolver, or your own \u2014 or leave the endpoint off. Without one every request would be refused, or answered as nobody.");for(let W of G)if(typeof W?.resolve!=="function"||typeof W.name!=="string"||W.name==="")throw Error("route.mcp.remote.resolvers: each resolver needs a name and a resolve().");if(this.resolvers=G,K3(E3),this.context={resource:this.resource,registry:$},this.allowedOrigins=new Set((Z.allowedOrigins??[]).map((W)=>{if(new URL(W).origin!==W)throw Error(`route.mcp.remote.allowedOrigins: "${W}" is not an origin (scheme://host[:port]).`);return W})),this.allowedOrigins.add(this.endpoint.origin),this.rateLimit=Z.rateLimit===!1?!1:Z.rateLimit??e$,this.maxBodyBytes=Z.maxBodyBytes??Math.ceil($.maxFileBytes*1.4)+1048576,this.serverInfo={name:Z.server?.name??"gemi",version:Z.server?.version??"1.0.0"},this.instructions=Z.server?.instructions,this.nonces=Z.nonces??new M9,this.approvalTimeoutMs=Z.approvalTimeoutMs??j9,Z.onCall!==void 0&&typeof Z.onCall!=="function")throw Error("route.mcp.remote.onCall must be a function.");if(this.onCall=Z.onCall,Z.feature!==void 0){if(typeof Z.feature!=="string"||Z.feature==="")throw Error("route.mcp.remote.feature must be a feature key from app/features.");this.feature=Z.feature}this.featureOn=z.featureOn??X3;for(let W of G)W.boot?.(this.context)}get resource(){return this.endpoint.href.replace(/\/$/,"")}async handle($){let Z=new URL($.url);if(Z.host!==this.endpoint.host)return null;if(this.feature!==void 0){if(!this.ownsPath(Z.pathname))return null;if(await this.featureOn(this.feature)!==!0)return null}for(let W of this.resolvers){let X=await W.handle?.($,this.context);if(X)return X}if(Z.pathname!==this.endpoint.pathname)return null;let z=$.headers.get("origin");if(z!==null&&!this.allowedOrigins.has(z))return f(R(null,new L(D.InvalidRequest,"Origin not allowed.")),403);let G=z?z2(z):{};if($.method==="OPTIONS")return new Response(null,{status:204,headers:{...G,"Access-Control-Allow-Methods":"POST","Access-Control-Allow-Headers":"Authorization, Content-Type, Accept, MCP-Protocol-Version, Mcp-Session-Id, Mcp-Method, Mcp-Name, Last-Event-ID","Access-Control-Max-Age":"600"}});if($.method!=="POST")return x9(new Response(null,{status:405,headers:{Allow:"POST, OPTIONS"}}),G);return x9(await this.post($),G)}ownsPath($){let Z=this.endpoint.pathname.replace(/\/$/,"");return $===this.endpoint.pathname||$===Z||$.startsWith(`${Z}/`)||$.startsWith("/.well-known/")}async post($){let Z=null;for(let Y of this.resolvers){let K=await Y.resolve($,this.context);if(K===null)continue;if(K.ok===!1)return await this.failedAttempt($)??this.unauthorized(K.description);Z={...K.principal,via:Y.name};break}if(!Z)return(j3($)!==null?await this.failedAttempt($):null)??this.unauthorized();let z=await this.spend(Z);if(z)return z;let G=$.headers.get("content-type")??"";if(!/^application\/json\s*(;|$)/i.test(G))return new Response("Content-Type must be application/json.",{status:415});let W;try{W=JSON.parse(await Z2($,this.maxBodyBytes))}catch(Y){if(Y instanceof V3)return f(R(null,new L(D.InvalidRequest,`The request is larger than ${this.maxBodyBytes} bytes.`)),413);return f(R(null,new L(D.ParseError,"Parse error.")),400)}let X=new m($,{},"api",this.endpoint.pathname);return await h.run(X,async()=>{try{return await this.dispatch($,X,Z,W)}catch(Y){if(Y instanceof L){let K=q(W)&&(typeof W.id==="string"||typeof W.id==="number")?W.id:null;return f(R(K,Y),Y.status)}return console.error("[gemi/mcp] The MCP endpoint failed:",Y),f(R(null,new L(D.InternalError,"Internal error.")),500)}},{user:Z.user})}async dispatch($,Z,z,G){let W=I9(G),X={kind:"remote",req:Z,principal:z};if(W.kind==="response"){let F=this.session($,z),B=this.pending.get(String(W.message.id));if(B&&B.session===F.id)this.pending.delete(String(W.message.id)),B.resolve(W.message);return new Response(null,{status:202})}let{message:Y}=W,K=Y.params??{},Q=q(K._meta)?K._meta:{};if(typeof Q[S3]==="string"){if(this.checkModernHeaders($,Y,Q[S3]),W.kind==="notification")return new Response(null,{status:202});return await this.respond(Y,async(F,B)=>this.modern({principal:z,caller:X,message:Y,params:K,era:{modern:!0},stream:F,signal:B}),S9(K),$.signal)}if(Y.method==="initialize"){if(W.kind!=="request")throw new L(D.InvalidRequest,"initialize is a request.",void 0,400);return this.initialize(W.message,K,z)}let V=this.session($,z),H=$.headers.get("mcp-protocol-version");if(H!==null&&H!==V.state.v)throw new L(D.InvalidRequest,`MCP-Protocol-Version ${H} is not the session's ${V.state.v}.`,void 0,400);if(W.kind==="notification"){if(Y.method==="notifications/cancelled"){let F=K.requestId;this.inflight.get(`${V.id}:${String(F)}`)?.abort()}return new Response(null,{status:202})}let J=`${V.id}:${String(Y.id)}`,I=new AbortController;this.inflight.set(J,I);let U=AbortSignal.any([I.signal,$.signal]);try{return await this.respond(Y,async(F,B)=>this.legacy({principal:z,caller:X,message:Y,params:K,era:{modern:!1,session:V.state,sessionId:V.id},stream:F,signal:B}),S9(K)||X2(this.registry,Y,V.state),U,()=>this.inflight.delete(J))}catch(F){throw this.inflight.delete(J),F}}async modern($){switch($.message.method){case"server/discover":return this.complete({supportedVersions:C3,capabilities:{tools:{}},...this.instructions?{instructions:this.instructions}:{},ttlMs:60000,cacheScope:"private"});case"tools/list":return this.complete({tools:(await this.registry.available($.caller)).map((Z)=>k3(Z,!0)),ttlMs:60000,cacheScope:"private"});case"tools/call":return await this.callTool($);default:throw new L(D.MethodNotFound,`Method not found: ${$.message.method}`,void 0,404)}}async legacy($){switch($.message.method){case"ping":return{};case"tools/list":return{tools:(await this.registry.available($.caller)).map((Z)=>k3(Z,!1))};case"tools/call":return await this.callTool($);default:throw new L(D.MethodNotFound,`Method not found: ${$.message.method}`)}}complete($){return{resultType:"complete",...$,_meta:{[T3]:this.serverInfo}}}initialize($,Z,z){let G=Z.protocolVersion,W=Y3.includes(G)?G:Y3[0],X=q(Z.capabilities)?Z.capabilities:{},Y={v:W,e:C9(X.elicitation),p:Q3(z),exp:Date.now()+r$},K=M3(O9,"gms1",Y);return f({jsonrpc:"2.0",id:$.id,result:{protocolVersion:W,capabilities:{tools:{listChanged:!1}},serverInfo:this.serverInfo,...this.instructions?{instructions:this.instructions}:{}}},200,{"Mcp-Session-Id":K})}session($,Z){let z=$.headers.get("mcp-session-id");if(!z)throw new L(D.InvalidRequest,"Missing Mcp-Session-Id. Send initialize first, or a request carrying io.modelcontextprotocol/protocolVersion in _meta.",void 0,400);let G=R3(O9,"gms1",z);if(!G||G.p!==Q3(Z))throw new L(D.InvalidRequest,"Session not found.",void 0,404);return{id:z,state:G}}checkModernHeaders($,Z,z){if(!x3.includes(z))throw new L(D.UnsupportedProtocolVersion,"Unsupported protocol version",{supported:C3,requested:z},400);let G=(Y)=>new L(D.HeaderMismatch,`Header mismatch: ${Y}`,void 0,400);if($.headers.get("mcp-protocol-version")!==z)throw G("MCP-Protocol-Version does not match the protocol version in _meta.");if($.headers.get("mcp-method")!==Z.method)throw G("Mcp-Method does not match the method.");let W=Z.params??{},X=Z.method==="tools/call"||Z.method==="prompts/get"?W.name:Z.method==="resources/read"?W.uri:void 0;if(X!==void 0){let Y=$.headers.get("mcp-name");if(Y===null||L9(Y)!==X)throw G("Mcp-Name does not match the request's name.")}}async callTool($){let Z=$.params.name;if(typeof Z!=="string")throw new L(D.InvalidParams,"tools/call needs a tool name.");let z=$.params.arguments??{};if(!this.onCall)return await this.runTool($,Z,z,{approved:!1});let G=performance.now(),W={approved:!1};try{let X=await this.runTool($,Z,z,W);if(!W.pending)await this.report($,Z,z,W,G);return X}catch(X){if(!W.outcome){if(W.outcome="error",W.message=X instanceof L?X.message:"Internal error.",!(X instanceof L))W.error=X}throw await this.report($,Z,z,W,G),X}}async report($,Z,z,G,W){let{principal:X}=$;try{await this.onCall({user:X.user,via:X.via,credentialId:X.id,clientId:X.clientId??null,scopes:X.scopes,tool:Z,arguments:z,outcome:G.outcome??"ok",...G.reason!==void 0?{reason:G.reason}:{},...G.message!==void 0?{message:G.message}:{},...G.status!==void 0?{status:G.status}:{},...G.error!==void 0?{error:G.error}:{},approved:G.approved,durationMs:Math.round((performance.now()-W)*1000)/1000,req:$.caller.req})}catch(Y){console.error(`[gemi/mcp] route.mcp.remote.onCall failed for "${Z}":`,Y)}}async runTool($,Z,z,G){let{caller:W,principal:X}=$,Y=(U,F)=>{G.outcome="denied",G.reason=U,G.message=F},K=(U,F,B)=>{if(G.outcome="error",G.message=U,F!==void 0)G.status=F;if(B!==void 0)G.error=B},Q=(await this.registry.available(W,{names:[Z]}))[0];if(!Q)throw Y("unknown-tool",`Unknown tool: ${Z}`),new L(D.InvalidParams,`Unknown tool: ${Z}`);if(Q.requiresApproval){let U=Q.inputSchema.safeParse(z);if(U.ok===!1){let B=`Invalid arguments for "${Z}": ${U.errors.join(", ")}`;return K(B),this.toolResult($,{content:[{type:"text",text:B}],isError:!0})}if($.era.modern&&q($.params.inputResponses)&&$.params.requestState!==void 0||await this.registry.approvalRequired(W,Z,z,{signal:$.signal})){let B=await this.approval($,Q,z,Y,G);if(B.kind==="answer")return B.result;G.approved=!0}}let V=Y2($),H;try{H=await this.registry.execute(W,Z,z,void 0,{approved:G.approved,signal:$.signal,...V?{progress:V}:{}})}catch(U){if(U instanceof O){if(U.status===401||U.status===403)Y("forbidden",U.message),G.status=U.status;else K(U.message,U.status);return this.toolResult($,{content:[{type:"text",text:U.message}],isError:!0})}if(U instanceof v){let B=U.reason==="unknown-tool"?`Unknown tool: ${Z}`:U.message;throw Y(U.reason,B),new L(D.InvalidParams,B)}console.error(`[gemi/mcp] "${Z}" failed for ${X.via}:${X.id}:`,U);let F=`"${Z}" failed on the server.`;return K(F,void 0,U),this.toolResult($,{content:[{type:"text",text:F}],isError:!0})}let J=typeof H==="string"?H:JSON.stringify(H??null),I=Q.outputSchema&&($.era.modern||q(H))?{structuredContent:H}:{};return G.outcome="ok",this.toolResult($,{content:[{type:"text",text:J}],...I,isError:!1})}toolResult($,Z){return $.era.modern?this.complete(Z):Z}async approval($,Z,z,G,W){let X=K2(Z,z),Y=(I,U="approval-declined")=>{return G(U,I),{kind:"answer",result:this.toolResult($,{content:[{type:"text",text:I}],isError:!0})}},K=(I,U)=>{return G(I,U.message),U};if($.era.modern){let I=q($.params._meta)?$.params._meta:{},U=q(I[q3])?I[q3]:{},F=q($.params.inputResponses)?$.params.inputResponses:null,B=$.params.requestState,T=W2(z);if(F&&B!==void 0){let C=R3(E3,"grs1",B);if(!C||C.p!==Q3($.principal)||C.t!==Z.name||C.a!==T)throw K("approval-invalid",new L(D.InvalidParams,"requestState is not valid for this call."));if(!await this.spendNonce(C.n,C.exp))throw K("approval-replayed",new L(D.InvalidParams,"requestState has already been used."));return q9(F[A9])?{kind:"approved"}:Y(`The user did not approve "${Z.name}", and it did not run.`)}if(!C9(U.elicitation))throw K("approval-unavailable",new L(D.MissingRequiredClientCapability,`"${Z.name}" needs the user's approval, and this client cannot ask for it (elicitation).`,{requiredCapabilities:{elicitation:{form:{}}}},400));let j={p:Q3($.principal),t:Z.name,a:T,n:D9(16).toString("base64url"),exp:Date.now()+j9};return W.pending=!0,{kind:"answer",result:{resultType:"input_required",inputRequests:{[A9]:{method:"elicitation/create",params:{mode:"form",...X}}},requestState:M3(E3,"grs1",j),_meta:{[T3]:this.serverInfo}}}}let Q=$.era;if(!Q.session.e||!$.stream)return Y(`"${Z.name}" needs the user's approval, and this client cannot ask for it (elicitation). It did not run.`,"approval-unavailable");let V=`gemi-approval-${D9(12).toString("base64url")}`,H=Q.sessionId,J=await new Promise((I)=>{let U=setTimeout(()=>{this.pending.delete(V),I(null)},this.approvalTimeoutMs),F=(B)=>{clearTimeout(U),I(B)};this.pending.set(V,{session:H,resolve:F}),$.signal.addEventListener("abort",()=>{this.pending.delete(V),F(null)}),$.stream.send({jsonrpc:"2.0",id:V,method:"elicitation/create",params:Q.session.v==="2025-11-25"?{mode:"form",...X}:X})});return J&&!J.error&&q9(J.result)?{kind:"approved"}:Y(`The user did not approve "${Z.name}", and it did not run.`)}async spendNonce($,Z){try{return await this.nonces.consume($,Z)}catch(z){return console.error("[gemi/mcp] Spending an approval failed:",z),!1}}async respond($,Z,z,G,W){if(!z)try{let Q=await Z(null,G);return f({jsonrpc:"2.0",id:$.id,result:Q},200)}finally{W?.()}let X=new AbortController,Y=AbortSignal.any([X.signal,G]),K=new b9(()=>X.abort());return(async()=>{try{let Q=await Z(K,Y);K.send({jsonrpc:"2.0",id:$.id,result:Q})}catch(Q){if(Q instanceof L)K.send(R($.id,Q));else console.error("[gemi/mcp] The MCP endpoint failed:",Q),K.send(R($.id,new L(D.InternalError,"Internal error.")))}finally{W?.(),K.close()}})(),new Response(K.readable,{status:200,headers:{"Content-Type":"text/event-stream","Cache-Control":"no-store","X-Accel-Buffering":"no"}})}unauthorized($){let Z=this.resolvers.map((G)=>G.challenge?.(this.context)).find(Boolean)??'Bearer realm="mcp"',z=$?`${Z}, error="invalid_token", error_description="${$.replace(/["\\]/g,"")}"`:Z;return f(R(null,new L(D.InvalidRequest,"Unauthorized.")),401,{"WWW-Authenticate":z})}async failedAttempt($){let Z=k9(new m($,{},"api",this.endpoint.pathname)),z=await A3(`mcp-auth-failed:${Z}`,$2);return z===null?null:T9(z)}async spend($){if(!this.rateLimit)return null;let Z=await A3(`mcp-endpoint:${$.via}:${$.id}`,this.rateLimit);return Z===null?null:T9(Z)}}class b9{readable;controller;closed=!1;encoder=new TextEncoder;constructor($){this.readable=new ReadableStream({start:(Z)=>{this.controller=Z},cancel:()=>{this.closed=!0,$()}})}send($){if(this.closed)return;this.controller.enqueue(this.encoder.encode(`event: message
 data: ${JSON.stringify($)}
 
 `))}close(){if(this.closed)return;this.closed=!0,this.controller.close()}}class V3 extends Error{}async function Z2($,Z){let z=Number($.headers.get("content-length"));if(Number.isFinite(z)&&z>Z)throw new V3;if(!$.body)return"";let G=$.body.getReader(),W=[],X=0;for(;;){let{done:Y,value:K}=await G.read();if(Y)break;if(X+=K.byteLength,X>Z)throw await G.cancel(),new V3;W.push(K)}return Buffer.concat(W).toString("utf8")}function f($,Z,z={}){return new Response(JSON.stringify($),{status:Z,headers:{"Content-Type":"application/json","Cache-Control":"no-store",...z}})}function x9($,Z){for(let[z,G]of Object.entries(Z))$.headers.set(z,G);return $}function z2($){return{"Access-Control-Allow-Origin":$,"Access-Control-Expose-Headers":"Mcp-Session-Id, WWW-Authenticate",Vary:"Origin"}}function G2($){let Z;try{Z=new URL($)}catch{throw Error(`route.mcp.remote.url: "${$}" is not a URL.`)}let z=Z.hostname==="localhost"||Z.hostname==="127.0.0.1"||Z.hostname==="[::1]";if(Z.protocol!=="https:"&&!(Z.protocol==="http:"&&z))throw Error("route.mcp.remote.url must be https (http only on localhost): tokens travel to it.");if(Z.search||Z.hash||Z.username||Z.password)throw Error("route.mcp.remote.url must have no query, fragment or credentials.");if(Z.pathname==="/"||Z.pathname.endsWith("/"))throw Error('route.mcp.remote.url needs a path of its own, like "/mcp", without a trailing slash.');return Z}function Q3($){return E9("sha256").update(`${$.via}\x00${$.id}\x00${$.user?.id}`).digest("base64url").slice(0,32)}function W2($){return E9("sha256").update(R9($??{})).digest("base64url")}function C9($){if(!q($))return!1;if(Object.keys($).length===0)return!0;return"form"in $}function S9($){let Z=q($._meta)?$._meta:{};return typeof Z.progressToken==="string"||typeof Z.progressToken==="number"}function X2($,Z,z){if(Z.method!=="tools/call"||!z.e)return!1;let G=Z.params?.name;return typeof G==="string"&&$.descriptors({names:[G]})[0]?.requiresApproval===!0}function Y2($){let z=(q($.params._meta)?$.params._meta:{}).progressToken;if(!$.stream||typeof z!=="string"&&typeof z!=="number")return;let G=-1/0;return(W)=>{if(typeof W?.progress!=="number"||!Number.isFinite(W.progress)||W.progress<=G)return;G=W.progress,$.stream.send({jsonrpc:"2.0",method:"notifications/progress",params:{progressToken:z,progress:W.progress,...typeof W.total==="number"?{total:W.total}:{},...typeof W.message==="string"?{message:W.message.slice(0,1000)}:{}}})}}function K2($,Z){let z=JSON.stringify(Z??{},null,1),G=z.length>b3?`${z.slice(0,b3)}\u2026 (${z.length-b3} more characters not shown)`:z;return{message:`Allow "${$.title??$.name}" to run? ${$.description}

package/dist/{chunk-yb41jbdc.js → chunk-v5sqsxsf.js}

@@ -1,6 +1,6 @@
 // @bun
-import{Ca as f}from"./chunk-s0z61m9j.js";import{createElement as v}from"react";function q(i,t){let e=Object.keys(t).sort((s,r)=>r.length-s.length).map((s)=>s.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")),p=new RegExp(e.join("|"),"g");return i.replace(p,(s)=>t[s])}async function Y(i,t,e=[],p){let s=[...e.map((n)=>`${i}/views/${n}.tsx`),p?`${i}/views/${p}.tsx`:`${i}/views/RootLayout.tsx`],r=new Set;for(let n of s){let u=t.moduleGraph.getModulesByFile(n);if(u)for(let d of u)r.add(d)}let b=[],l=[],g={};for(let n of r)if(n)for(let u of n.importedModules){if(u.file.includes("module.css"))g[u.file]=u.ssrTransformResult.map.sourcesContent.join("");if(u.file.includes(".css"))l.push(u.file)}for(let n of l){let u=await t.transformRequest(n+"?direct"),d=n.includes("module.css"),j="";if(d)j=q(g[n],u.default);b.push({isDev:!0,id:n,content:d?j:u.code})}return b.map((n,u)=>{return v("style",{key:u,type:"text/css","data-vite-dev-id":n.id,dangerouslySetInnerHTML:{__html:n.content}})})}async function Z(i=[]){return i.map((t,e)=>{return v("style",{key:e,id:t?.id,type:"text/css",dangerouslySetInnerHTML:{__html:t.content}})})}import{existsSync as y}from"fs";import{basename as z}from"path";import{networkInterfaces as $}from"os";var a={name:"gemi",version:"0.163.0",private:!1,license:"MIT",author:"Enes Tufekci <enes@gemijs.dev>",repository:{type:"git",url:"git+https://github.com/nstfkc/gemi.git",directory:"packages/gemi"},bin:{gemi:"./dist/bin/gemi.js","gemi-orm-generator":"./dist/bin/orm-generator.js"},files:["dist/**/*","ide/typescript-plugin/package.json","skills/**/*"],module:!0,exports:{"./http":"./http/index.ts","./client":"./client/index.ts","./ai":"./ai/index.ts","./ai/client":"./ai/client/index.ts","./ai/voice":"./ai/voice/index.ts","./testing":"./testing/index.ts","./app":"./app/index.ts","./facades":"./facades/index.ts","./email":"./email/index.ts","./vite":"./dist/vite/index.mjs","./kernel":"./kernel/index.ts","./services":"./services/index.ts","./i18n":"./i18n/index.ts","./dictionary":"./i18n/dictionaryRuntime.ts","./server":"./server/index.ts","./config":"./config/index.ts","./container":"./container/index.ts","./foundation":"./foundation/index.ts","./database":"./database/index.ts","./orm":"./orm/index.ts","./support":"./support/index.ts","./probe":"./probe/index.ts","./console/run":"./console/run.ts","./queue/work":"./services/queue/work.ts","./stats/route-table":"./stats/route-table.ts","./ide/typescript-plugin":"./ide/typescript-plugin/index.ts","./bun/preload":"./bun/preload.ts","./bun/plugin":"./bun/plugin.ts","./vitest":"./vitest/index.ts"},scripts:{lint:"oxlint",typecheck:"tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.browser.json && tsc --noEmit -p ide/typescript-plugin/tsconfig.json",build:"NODE_ENV=production bun run build:core && bun run build:bin && bun run build:types && bun run build:client && bun run build:plugin && bun run build:ts-plugin && bun run build:client-types && bun run build:augmentation","build:core":"bun ./scripts/build.ts","build:bin":"bun build --outdir=./dist/bin --target=bun --external=vite --external=react-dom --external=react/jsx-runtime --external=bun --external=sharp --external=@azure/storage-blob --external=typescript --sourcemap ./bin/gemi.ts ./bin/orm-generator.ts && bun ./scripts/prepare-bin.ts","build:client":"rm -rf dist/client dist/testing dist/ai/client dist/ai/voice dist/chunks && vite build -c vite.client.config.mts","build:plugin":"vite build -c vite.plugin.config.mts","build:ts-plugin":"bun ./scripts/build-ts-plugin.ts","build:types":"tsc -p tsconfig.build.json","build:client-types":"tsc -p tsconfig.browser.json",test:"bun --bun x vitest","test:types":"vitest run --typecheck.only","test:live":"bun --bun x vitest run ai/live","test:packaging":"bun --bun x vitest run --config vitest.packaging.config.ts","build:publish":"bun scripts/build-publish.ts",prepublishOnly:"echo 'Do not publish from this directory \u2014 its exports point at TS source. Run: bun run build:publish, then publish from .publish/' && exit 1","build:augmentation":"bun ./scripts/wire-augmentation.ts"},dependencies:{"@aws-sdk/client-s3":"^3.629.0","@aws-sdk/s3-request-presigner":"^3.629.0","ast-types":"^0.14.2",commander:"^12.1.0",history:"^5.3.0","jsx-email":"2.0.0-rc2.1","magic-string":"^0.30.17",open:"^10.1.0","react-error-boundary":"^6.0.0",recast:"^0.23.9",resend:"^6.12.3",satori:"^0.12.2","temporal-polyfill":"^0.2.5","twitter-api-v2":"^1.20.2","urlpattern-polyfill":"^10.0.0",uuid:"^9.0.1"},devDependencies:{"@babel/parser":"^7.25.4","@prisma/generator-helper":"^6.5.0","@repo/typescript-config":"*","@testing-library/react":"^16.3.2","@types/bun":"^1.3.14","@types/eslint":"^8.56.5","@types/node":"^20.11.24","@types/react":"^19.0.2","@types/react-dom":"^19.0.2",eslint:"^8.57.0",jsdom:"^30.0.1",oxlint:"^1.39.0",postgres:"^3.4.5",react:"19.2.3","react-dom":"19.2.3",typescript:"^5.7.3",vitest:"^4.0.0"},peerDependencies:{"@azure/storage-blob":"^12.28.0",react:">=19","react-dom":">=19",sharp:"^0.34.2",typescript:">=5",vite:"^8.0.0",postgres:"^3.4.0"},peerDependenciesMeta:{"@azure/storage-blob":{optional:!0},typescript:{optional:!0},postgres:{optional:!0}}};var h=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2557   \u2588\u2588\u2588\u2557\u2588\u2588\u2557","\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2551","\u2588\u2588\u2551  \u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2554\u2588\u2588\u2588\u2588\u2554\u2588\u2588\u2551\u2588\u2588\u2551","\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u255D  \u2588\u2588\u2551\u255A\u2588\u2588\u2554\u255D\u2588\u2588\u2551\u2588\u2588\u2551","\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2551 \u255A\u2550\u255D \u2588\u2588\u2551\u2588\u2588\u2551"," \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D     \u255A\u2550\u255D\u255A\u2550\u255D"],E=Boolean(process.stdout.isTTY)&&!process.env.NO_COLOR,c=(i,t)=>E?`\x1B[${i}m${t}\x1B[0m`:t,G=(i)=>c("1",i),x=(i)=>c("2",i),o=(i)=>c("36",i),J=(i)=>c("32",i),N=(i)=>c("35",i);function O(){return a.version??"?"}function Q(i){for(let t of Object.values($()))for(let e of t??[])if((e.family==="IPv4"||e.family===4)&&!e.internal)return`http://${e.address}:${i}`;return null}function W(i){return f(i).filter((t)=>y(t)).map((t)=>z(t))}function F(i){let{port:t,rootDir:e}=i,p=`http://localhost:${t}`,s=Q(t),r=W(e),b=(g,n)=>`  ${J("\u279C")}  ${G(g.padEnd(9))}${n}`,l=["",...h.map((g)=>N(g)),"",`  ${x("gemi")} ${o(`v${O()}`)}`,"",b("Local:",o(p)),b("Network:",s?o(s):x("unavailable")),b("Env:",r.length?r.join(", "):x("none")),""];console.log(l.join(`
+import{Ca as f}from"./chunk-s0z61m9j.js";import{createElement as v}from"react";function q(i,t){let e=Object.keys(t).sort((s,r)=>r.length-s.length).map((s)=>s.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")),p=new RegExp(e.join("|"),"g");return i.replace(p,(s)=>t[s])}async function Y(i,t,e=[],p){let s=[...e.map((n)=>`${i}/views/${n}.tsx`),p?`${i}/views/${p}.tsx`:`${i}/views/RootLayout.tsx`],r=new Set;for(let n of s){let u=t.moduleGraph.getModulesByFile(n);if(u)for(let d of u)r.add(d)}let b=[],l=[],g={};for(let n of r)if(n)for(let u of n.importedModules){if(u.file.includes("module.css"))g[u.file]=u.ssrTransformResult.map.sourcesContent.join("");if(u.file.includes(".css"))l.push(u.file)}for(let n of l){let u=await t.transformRequest(n+"?direct"),d=n.includes("module.css"),j="";if(d)j=q(g[n],u.default);b.push({isDev:!0,id:n,content:d?j:u.code})}return b.map((n,u)=>{return v("style",{key:u,type:"text/css","data-vite-dev-id":n.id,dangerouslySetInnerHTML:{__html:n.content}})})}async function Z(i=[]){return i.map((t,e)=>{return v("style",{key:e,id:t?.id,type:"text/css",dangerouslySetInnerHTML:{__html:t.content}})})}import{existsSync as y}from"fs";import{basename as z}from"path";import{networkInterfaces as $}from"os";var a={name:"gemi",version:"0.163.2",private:!1,license:"MIT",author:"Enes Tufekci <enes@gemijs.dev>",repository:{type:"git",url:"git+https://github.com/nstfkc/gemi.git",directory:"packages/gemi"},bin:{gemi:"./dist/bin/gemi.js","gemi-orm-generator":"./dist/bin/orm-generator.js"},files:["dist/**/*","ide/typescript-plugin/package.json","skills/**/*"],module:!0,exports:{"./http":"./http/index.ts","./client":"./client/index.ts","./ai":"./ai/index.ts","./ai/client":"./ai/client/index.ts","./ai/voice":"./ai/voice/index.ts","./testing":"./testing/index.ts","./app":"./app/index.ts","./facades":"./facades/index.ts","./email":"./email/index.ts","./vite":"./dist/vite/index.mjs","./kernel":"./kernel/index.ts","./services":"./services/index.ts","./i18n":"./i18n/index.ts","./dictionary":"./i18n/dictionaryRuntime.ts","./server":"./server/index.ts","./config":"./config/index.ts","./container":"./container/index.ts","./foundation":"./foundation/index.ts","./database":"./database/index.ts","./orm":"./orm/index.ts","./support":"./support/index.ts","./probe":"./probe/index.ts","./console/run":"./console/run.ts","./queue/work":"./services/queue/work.ts","./stats/route-table":"./stats/route-table.ts","./ide/typescript-plugin":"./ide/typescript-plugin/index.ts","./bun/preload":"./bun/preload.ts","./bun/plugin":"./bun/plugin.ts","./vitest":"./vitest/index.ts"},scripts:{lint:"oxlint",typecheck:"tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.browser.json && tsc --noEmit -p ide/typescript-plugin/tsconfig.json",build:"NODE_ENV=production bun run build:core && bun run build:bin && bun run build:types && bun run build:client && bun run build:plugin && bun run build:ts-plugin && bun run build:client-types && bun run build:augmentation","build:core":"bun ./scripts/build.ts","build:bin":"bun build --outdir=./dist/bin --target=bun --external=vite --external=react-dom --external=react/jsx-runtime --external=bun --external=sharp --external=@azure/storage-blob --external=typescript --sourcemap ./bin/gemi.ts ./bin/orm-generator.ts && bun ./scripts/prepare-bin.ts","build:client":"rm -rf dist/client dist/testing dist/ai/client dist/ai/voice dist/chunks && vite build -c vite.client.config.mts","build:plugin":"vite build -c vite.plugin.config.mts","build:ts-plugin":"bun ./scripts/build-ts-plugin.ts","build:types":"tsc -p tsconfig.build.json","build:client-types":"tsc -p tsconfig.browser.json",test:"bun --bun x vitest","test:types":"vitest run --typecheck.only","test:live":"bun --bun x vitest run ai/live","test:packaging":"bun --bun x vitest run --config vitest.packaging.config.ts","build:publish":"bun scripts/build-publish.ts",prepublishOnly:"echo 'Do not publish from this directory \u2014 its exports point at TS source. Run: bun run build:publish, then publish from .publish/' && exit 1","build:augmentation":"bun ./scripts/wire-augmentation.ts"},dependencies:{"@aws-sdk/client-s3":"^3.629.0","@aws-sdk/s3-request-presigner":"^3.629.0","ast-types":"^0.14.2",commander:"^12.1.0",history:"^5.3.0","jsx-email":"2.0.0-rc2.1","magic-string":"^0.30.17",open:"^10.1.0","react-error-boundary":"^6.0.0",recast:"^0.23.9",resend:"^6.12.3",satori:"^0.12.2","temporal-polyfill":"^0.2.5","twitter-api-v2":"^1.20.2","urlpattern-polyfill":"^10.0.0",uuid:"^9.0.1"},devDependencies:{"@babel/parser":"^7.25.4","@prisma/generator-helper":"^6.5.0","@repo/typescript-config":"*","@testing-library/react":"^16.3.2","@types/bun":"^1.3.14","@types/eslint":"^8.56.5","@types/node":"^20.11.24","@types/react":"^19.0.2","@types/react-dom":"^19.0.2",eslint:"^8.57.0",jsdom:"^30.0.1",oxlint:"^1.39.0",postgres:"^3.4.5",react:"19.2.3","react-dom":"19.2.3",typescript:"^5.7.3",vitest:"^4.0.0"},peerDependencies:{"@azure/storage-blob":"^12.28.0",react:">=19","react-dom":">=19",sharp:"^0.34.2",typescript:">=5",vite:"^8.0.0",postgres:"^3.4.0"},peerDependenciesMeta:{"@azure/storage-blob":{optional:!0},typescript:{optional:!0},postgres:{optional:!0}}};var h=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2557   \u2588\u2588\u2588\u2557\u2588\u2588\u2557","\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2551","\u2588\u2588\u2551  \u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2554\u2588\u2588\u2588\u2588\u2554\u2588\u2588\u2551\u2588\u2588\u2551","\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u255D  \u2588\u2588\u2551\u255A\u2588\u2588\u2554\u255D\u2588\u2588\u2551\u2588\u2588\u2551","\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2551 \u255A\u2550\u255D \u2588\u2588\u2551\u2588\u2588\u2551"," \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D     \u255A\u2550\u255D\u255A\u2550\u255D"],E=Boolean(process.stdout.isTTY)&&!process.env.NO_COLOR,c=(i,t)=>E?`\x1B[${i}m${t}\x1B[0m`:t,G=(i)=>c("1",i),x=(i)=>c("2",i),o=(i)=>c("36",i),J=(i)=>c("32",i),N=(i)=>c("35",i);function O(){return a.version??"?"}function Q(i){for(let t of Object.values($()))for(let e of t??[])if((e.family==="IPv4"||e.family===4)&&!e.internal)return`http://${e.address}:${i}`;return null}function W(i){return f(i).filter((t)=>y(t)).map((t)=>z(t))}function F(i){let{port:t,rootDir:e}=i,p=`http://localhost:${t}`,s=Q(t),r=W(e),b=(g,n)=>`  ${J("\u279C")}  ${G(g.padEnd(9))}${n}`,l=["",...h.map((g)=>N(g)),"",`  ${x("gemi")} ${o(`v${O()}`)}`,"",b("Local:",o(p)),b("Network:",s?o(s):x("unavailable")),b("Env:",r.length?r.join(", "):x("none")),""];console.log(l.join(`
 `))}function V(i,t){return Error(`app/views/${i}.tsx is missing. gemi's auth routes render it because ${t} is on. Add the view, or turn that setting off in app/config/auth.ts.`)}function U(i=process.env.SERVER_IDLE_TIMEOUT){if(i===void 0||i.trim()==="")return 10;let t=Number(i.trim());if(!Number.isInteger(t)||t<0||t>255)throw Error(`SERVER_IDLE_TIMEOUT must be a whole number of seconds from 0 to 255 (0 disables the timeout), got ${JSON.stringify(i)}.`);return t}
 export{Y as W,Z as X,F as Y,V as Z,U as _};
 
-//# debugId=0EFD19E050EDDD3F64756E2164756E21
+//# debugId=C88E10126BA5F74B64756E2164756E21

package/dist/{chunk-yb41jbdc.js.map → chunk-v5sqsxsf.js.map}

@@ -8,6 +8,6 @@
     "/**\n * Bun's default, and what both servers use when `SERVER_IDLE_TIMEOUT` is unset.\n */\nexport const DEFAULT_SERVER_IDLE_TIMEOUT = 10;\n\n/**\n * The `idleTimeout` (seconds) both `gemi dev` and `gemi start` pass to\n * `Bun.serve`, from `SERVER_IDLE_TIMEOUT` (#787).\n *\n * One reader for both servers, so a long-poll that works under `gemi start`\n * also works under `gemi dev`. Before this, only `httpProd` read the variable\n * and the dev server always ran at Bun's 10 seconds.\n *\n * It is the time a connection may stay silent, a response that has not started\n * included, before Bun closes it; `0` disables it. It does not apply to an\n * upgraded websocket (the HMR relay included), which has its own\n * `websocket.idleTimeout`.\n *\n * Unset or blank means the default. Anything that is not a whole number from 0\n * to 255 (Bun's own limits) fails the boot with the variable's name, instead\n * of Bun's \"expects idleTimeout to be an integer\", which does not say where the\n * value came from.\n */\nexport function serverIdleTimeout(raw: string | undefined = process.env.SERVER_IDLE_TIMEOUT): number {\n  if (raw === undefined || raw.trim() === \"\") return DEFAULT_SERVER_IDLE_TIMEOUT;\n\n  const seconds = Number(raw.trim());\n  if (!Number.isInteger(seconds) || seconds < 0 || seconds > 255) {\n    throw new Error(\n      `SERVER_IDLE_TIMEOUT must be a whole number of seconds from 0 to 255 ` +\n        `(0 disables the timeout), got ${JSON.stringify(raw)}.`,\n    );\n  }\n  return seconds;\n}\n"
   ],
   "mappings": ";yCAAA,wBAAS,cAGT,SAAS,CAAc,CAAC,EAAc,EAAwC,CAC5E,IAAM,EAAc,OAAO,KAAK,CAAM,EACnC,KAAK,CAAC,EAAG,IAAM,EAAE,OAAS,EAAE,MAAM,EAClC,IAAI,CAAC,IAAQ,EAAI,QAAQ,sBAAuB,MAAM,CAAC,EAGpD,EAAQ,IAAI,OAAO,EAAY,KAAK,GAAG,EAAG,GAAG,EAEnD,OAAO,EAAK,QAAQ,EAAO,CAAC,IAAU,EAAO,EAAM,EAGrD,eAAsB,CAAe,CACnC,EACA,EACA,EAAyB,CAAC,EAE1B,EACA,CACA,IAAM,EAAQ,CACZ,GAAG,EAAa,IAAI,CAAC,IAAS,GAAG,WAAgB,OAAU,EAC3D,EAAS,GAAG,WAAgB,QAAe,GAAG,wBAChD,EAEM,EAAU,IAAI,IACpB,QAAW,KAAQ,EAAO,CACxB,IAAM,EAAM,EAAK,YAAY,iBAAiB,CAAI,EAClD,GAAI,EACF,QAAW,KAAK,EAAK,EAAQ,IAAI,CAAC,EAItC,IAAM,EAAS,CAAC,EACV,EAAa,CAAC,EACd,EAA2C,CAAC,EAClD,QAAW,KAAO,EAChB,GAAI,EACF,QAAW,KAAY,EAAI,gBAAiB,CAC1C,GAAI,EAAS,KAAK,SAAS,YAAY,EACrC,EAAiB,EAAS,MAAQ,EAAS,mBAAmB,IAAI,eAAe,KAAK,EAAE,EAE1F,GAAI,EAAS,KAAK,SAAS,MAAM,EAC/B,EAAW,KAAK,EAAS,IAAI,EAMrC,QAAW,KAAiB,EAAY,CACtC,IAAM,EAAY,MAAM,EAAK,iBAAiB,EAAgB,SAAS,EAEjE,EAAc,EAAc,SAAS,YAAY,EAEnD,EAAuB,GAE3B,GAAI,EACF,EAAuB,EACrB,EAAiB,GAGhB,EAA6D,OAChE,EAGF,EAAO,KAAK,CACV,MAAO,GACP,GAAI,EACJ,QAAS,EAAc,EAAuB,EAAU,IAC1D,CAAC,EAGH,OAAO,EAAO,IAAI,CAAC,EAAO,IAAM,CAC9B,OAAO,EAAc,QAAS,CAC5B,IAAK,EACL,KAAM,WACN,mBAAoB,EAAM,GAC1B,wBAAyB,CAAE,OAAQ,EAAM,OAAQ,CACnD,CAAC,EACF,EAGH,eAAsB,CAAY,CAAC,EAAS,CAAC,EAAG,CAC9C,OAAO,EAAO,IAAI,CAAC,EAAO,IAAM,CAC9B,OAAO,EAAc,QAAS,CAC5B,IAAK,EACL,GAAI,GAAO,GACX,KAAM,WACN,wBAAyB,CAAE,OAAQ,EAAM,OAAQ,CACnD,CAAC,EACF,EC3FH,qBAAS,WACT,mBAAS,aACT,4BAAS,82HAKT,IAAM,EAAM,CACV,oKACA,mLACA,yKACA,oKACA,mLACA,yJACF,EAEM,EAAW,QAAQ,QAAQ,OAAO,KAAK,GAAK,CAAC,QAAQ,IAAI,SACzD,EAAQ,CAAC,EAAc,IAC3B,EAAW,QAAQ,KAAQ,WAAgB,EACvC,EAAO,CAAC,IAAc,EAAM,IAAK,CAAC,EAClC,EAAM,CAAC,IAAc,EAAM,IAAK,CAAC,EACjC,EAAO,CAAC,IAAc,EAAM,KAAM,CAAC,EACnC,EAAQ,CAAC,IAAc,EAAM,KAAM,CAAC,EACpC,EAAU,CAAC,IAAc,EAAM,KAAM,CAAC,EAE5C,SAAS,CAAW,EAAW,CAC7B,OAAQ,EAA6B,SAAW,IAGlD,SAAS,CAAU,CAAC,EAAsC,CACxD,QAAW,KAAU,OAAO,OAAO,EAAkB,CAAC,EACpD,QAAW,KAAS,GAAU,CAAC,EAG7B,IADa,EAAM,SAAW,QAAW,EAAM,SAAuB,IAC1D,CAAC,EAAM,SAAU,MAAO,UAAU,EAAM,WAAW,IAGnE,OAAO,KAGT,SAAS,CAAc,CAAC,EAA2B,CACjD,OAAO,EAAS,CAAO,EACpB,OAAO,CAAC,IAAS,EAAW,CAAI,CAAC,EACjC,IAAI,CAAC,IAAS,EAAS,CAAI,CAAC,EAG1B,SAAS,CAAkB,CAAC,EAGhC,CACD,IAAQ,OAAM,WAAY,EACpB,EAAQ,oBAAoB,IAC5B,EAAU,EAAW,CAAI,EACzB,EAAM,EAAe,CAAO,EAE5B,EAAM,CAAC,EAAe,IAC1B,KAAK,EAAM,QAAE,MAAM,EAAK,EAAM,OAAO,CAAC,CAAC,IAAI,IAEvC,EAAM,CACV,GACA,GAAG,EAAI,IAAI,CAAC,IAAS,EAAQ,CAAI,CAAC,EAClC,GACA,KAAK,EAAI,MAAM,KAAK,EAAK,IAAI,EAAY,GAAG,IAC5C,GACA,EAAI,SAAU,EAAK,CAAK,CAAC,EACzB,EAAI,WAAY,EAAU,EAAK,CAAO,EAAI,EAAI,aAAa,CAAC,EAC5D,EAAI,OAAQ,EAAI,OAAS,EAAI,KAAK,IAAI,EAAI,EAAI,MAAM,CAAC,EACrD,EACF,EAEA,QAAQ,IAAI,EAAI,KAAK;AAAA,CAAI,CAAC,ECjErB,SAAS,CAAwB,CAAC,EAAc,EAAoB,CACzE,OAAW,MACT,aAAa,0DAA6D,wEAE5E,ECcK,SAAS,CAAiB,CAAC,EAA0B,QAAQ,IAAI,oBAA6B,CACnG,GAAI,IAAQ,QAAa,EAAI,KAAK,IAAM,GAAI,MArBH,IAuBzC,IAAM,EAAU,OAAO,EAAI,KAAK,CAAC,EACjC,GAAI,CAAC,OAAO,UAAU,CAAO,GAAK,EAAU,GAAK,EAAU,IACzD,MAAU,MACR,qGACmC,KAAK,UAAU,CAAG,IACvD,EAEF,OAAO",
-  "debugId": "0EFD19E050EDDD3F64756E2164756E21",
+  "debugId": "C88E10126BA5F74B64756E2164756E21",
   "names": []
 }

package/dist/{chunk-6abrc83j.js → chunk-vh7f9np6.js}

@@ -1,5 +1,5 @@
 // @bun
-import{X as w,Y as KJ,Z as LJ,_ as CJ}from"./chunk-yb41jbdc.js";import{pa as M,ta as F,ua as xJ}from"./chunk-bwg7genv.js";import"./chunk-s0z61m9j.js";import{Eg as UJ,Fg as VJ,Gg as zJ,je as s,vg as HJ,wg as B}from"./chunk-6atxvmvj.js";import"./chunk-99be7vbh.js";import"./chunk-n3pc62tc.js";import{Lh as a,Mh as r,Ph as t}from"./chunk-s7tn2t8x.js";import{Ri as YJ}from"./chunk-kscwjycy.js";import"./chunk-p4ka241x.js";import"./chunk-hkp00b9x.js";import"./chunk-70kpm72z.js";import"./chunk-1btx3kkv.js";import"./chunk-egzfxdr1.js";import"./chunk-rh811v1f.js";import"./chunk-wamxfhh6.js";import"./chunk-cd847h0t.js";import"./chunk-zh0knwen.js";import"./chunk-04ffq2ge.js";import"./chunk-pfjky33c.js";import"./chunk-vqar6ysw.js";import"./chunk-mxhy19a9.js";import{hl as ZJ}from"./chunk-22jm6sn1.js";import"./chunk-yc2pnb1w.js";import{vl as OJ}from"./chunk-7effp39a.js";import{xl as R}from"./chunk-51fvpq55.js";import"./chunk-wgre66wq.js";import{createHash as Y2}from"crypto";import{join as v,resolve as FJ,sep as IJ}from"path";import{Duplex as vJ}from"stream";import{constants as N,createBrotliCompress as EJ,createGzip as gJ}from"zlib";var yJ=["br","gzip"],uJ=1024,fJ=5,mJ=19,hJ=6;function cJ(J){if(J===void 0)return 1;if(!/^\d+(\.\d{0,3})?$/.test(J.trim()))return 1;let $=Number(J.trim());return Number.isFinite($)?Math.min($,1):1}function pJ(J){if(J===null||J===void 0)return null;let $=new Map;for(let Z of J.split(",")){let[X,...W]=Z.split(";"),j=X.trim().toLowerCase();if(j==="")continue;let H=1;for(let Y of W){let O=Y.indexOf("=");if(O===-1)continue;if(Y.slice(0,O).trim().toLowerCase()==="q"){H=cJ(Y.slice(O+1));break}}$.set(j,H)}return $}function q(J,$=yJ){let Z=pJ(J);if(!Z)return null;let X=Z.get("*"),W=null,j=0;for(let H of $){let Y=Z.get(H)??X??0;if(Y>j)W=H,j=Y}return W}function dJ(J,$){if(!J)return!1;return J.split(",").some((Z)=>Z.trim().toLowerCase().split("=")[0].trim()===$)}function lJ(J,$){if(J==="HEAD")return!1;if($.status<200||$.status===204||$.status===206||$.status===304)return!1;if($.headers.has("Content-Range"))return!1;let Z=$.headers.get("Content-Type");if(!Z||!/^\s*text\/html\s*(;|$)/i.test(Z))return!1;if(!$.body)return!1;let X=$.headers.get("Content-Encoding");if(X&&X.trim().toLowerCase()!=="identity")return!1;if(dJ($.headers.get("Cache-Control"),"no-transform"))return!1;let W=$.headers.get("Content-Length");if(W!==null&&Number(W)<uJ)return!1;return!0}function oJ(J){let $=J==="br"?EJ({params:{[N.BROTLI_PARAM_QUALITY]:fJ,[N.BROTLI_PARAM_LGWIN]:mJ},flush:N.BROTLI_OPERATION_FLUSH}):gJ({level:hJ,flush:N.Z_SYNC_FLUSH});return vJ.toWeb($)}function nJ(J){let $=J.get("Vary");if(!$){J.set("Vary","Accept-Encoding");return}let Z=$.split(",").map((X)=>X.trim().toLowerCase());if(Z.includes("*")||Z.includes("accept-encoding"))return;J.append("Vary","Accept-Encoding")}function l(J,$){if(!lJ(J.method,$))return $;let Z=new Headers($.headers);nJ(Z);let X=q(J.headers.get("Accept-Encoding"));if(!X)return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z});let W;try{W=oJ(X)}catch{return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}return Z.set("Content-Encoding",X),Z.delete("Content-Length"),new Response($.body.pipeThrough(W),{status:$.status,statusText:$.statusText,headers:Z})}import{readdir as J2,stat as e}from"fs/promises";import{join as $2}from"path";import{mkdir as F2,readFile as iJ,stat as I2,writeFile as _2}from"fs/promises";import{dirname as P2,join as aJ}from"path";import{promisify as o}from"util";import{brotliCompress as rJ,constants as B2,gzip as tJ}from"zlib";var sJ=".vite/static-assets.json";var n={br:".br",gzip:".gz"},eJ=["br","gzip"],R2=o(rJ),D2=o(tJ);async function i(J){let $;try{$=await iJ(aJ(J,sJ),"utf8")}catch{return null}let Z;try{Z=JSON.parse($)?.files}catch{return null}if(!Z||typeof Z!=="object")return null;let X={files:{}};for(let[W,j]of Object.entries(Z)){if(!Array.isArray(j))continue;X.files[W]=eJ.filter((H)=>j.includes(H))}return X}function S(J){let $=J.toString(),Z=new Bun.CryptoHasher("sha1");return Z.update($),Z.digest("hex")}async function JJ(J){let $=new Set;async function Z(X,W){let j;try{j=await J2(X,{withFileTypes:!0})}catch{return}for(let H of j){if(H.name.startsWith("."))continue;if(W&&H.name==="assets")continue;let Y=$2(X,H.name),O=H.isDirectory(),U=H.isFile();if(H.isSymbolicLink())try{let K=await e(Y);O=K.isDirectory(),U=K.isFile()}catch{continue}if(U)$.add(Y);else if(O&&!H.isSymbolicLink())await Z(Y,!1)}}return await Z(J,!0),$}var Z2="public, max-age=31536000, must-revalidate",X2="public, max-age=31536000, immutable";async function Q2(J,$,Z){if(Z.length===0||J.headers.has("Range"))return null;let X=q(J.headers.get("Accept-Encoding"),Z);if(!X)return null;let W=$+n[X];try{let j=await e(W);return j.isFile()?{encoding:X,path:W,size:j.size}:null}catch{return null}}async function $J(J,$,Z={}){let X=Bun.file($),W=Z.encodings??[],j={"Content-Type":X.type||"application/octet-stream","Cache-Control":Z.immutable?X2:Z2,"Accept-Ranges":"bytes"};if(W.length>0)j.Vary="Accept-Encoding";let H=await Q2(J,$,W);if(H){let U=Bun.file(H.path);return new Response(U.stream(),{headers:{...j,"Content-Encoding":H.encoding,"Content-Length":String(H.size),ETag:`${S(U.lastModified)}-${H.encoding}`}})}let Y=X.size;j.ETag=S(X.lastModified);let O=a(J.headers.get("Range"));if(O){let U=r(O,Y);if(!U)return s(Y);return new Response(X.slice(U.start,U.end+1).stream(),{status:206,headers:{...j,"Content-Range":t(U.start,U.end,Y),"Content-Length":String(U.length)}})}return new Response(X.stream(),{headers:{...j,"Content-Length":String(Y)}})}import{stat as O2}from"fs/promises";var A="app/client.tsx";function XJ(J,$=M){let Z=J[A]?.file;if(!Z)return;return{module:F(Z,$),preload:C(J,A,$)}}function C(J,$,Z=M){let X=[],W=new Set,j=(H)=>{if(W.has(H))return;W.add(H);let Y=J[H];if(!Y?.file)return;X.push(F(Y.file,Z));for(let O of Y.imports??[])j(O)};return j($),X}function W2(J,$,Z=M){let X=new Set(C(J,$,Z)),W=[],j=new Set,H=(O)=>{if(j.has(O))return;j.add(O);let U=J[O];if(!U)return;for(let K of U.dynamicImports??[])if(!/(^|\/)node_modules\//.test(K)&&!W.includes(K))W.push(K);for(let K of U.imports??[])H(K)};H($);let Y=[];for(let O of W)for(let U of C(J,O,Z))if(!X.has(U))X.add(U),Y.push(U);return Y}function QJ(J,$){let Z=[],X=new Set,W=new Set,j=(H)=>{if(W.has(H))return;W.add(H);let Y=J[H];if(!Y)return;for(let O of Y.imports??[])j(O);for(let O of Y.css??[])if(!X.has(O))X.add(O),Z.push(O)};return j($),Z}function WJ(J,$=M){let Z=new Map;return(X)=>{if(!Z.has(X)){let W=`${X}${ZJ}`,j=J[W]?.file;Z.set(X,j?{src:F(j,$),preload:C(J,W,$),dynamicPreload:W2(J,W,$)}:void 0)}return Z.get(X)}}function jJ(J,$=30000){let Z=JSON.stringify("gemi:chunk-reload"),X=JSON.stringify(`Failed to fetch dynamically imported module: ${J}`);return`var r=!1;try{var s=window.sessionStorage,m=JSON.parse(s.getItem(${Z})||"null");var d=m?Date.now()-m.at:NaN;if(navigator.onLine!==!1&&!(d>=0&&d<${$})){s.setItem(${Z},JSON.stringify({url:window.location.href,at:Date.now()}));r=!0}}catch(e){}if(r)window.location.reload();else throw new Error(${X});export {}`}var j2=new RegExp(`^${HJ}/.+\\.m?js$`);function H2(J){return j2.test(J)}function GJ(J){if(H2(J))return new Response(jJ(J),{headers:{"Content-Type":"application/javascript","Cache-Control":"no-store"}});if(B(J))return new Response("Not found",{status:404});return}var G2=`<!DOCTYPE html>
+import{X as w,Y as KJ,Z as LJ,_ as CJ}from"./chunk-v5sqsxsf.js";import{pa as M,ta as F,ua as xJ}from"./chunk-bwg7genv.js";import"./chunk-s0z61m9j.js";import{Eg as UJ,Fg as VJ,Gg as zJ,je as s,vg as HJ,wg as B}from"./chunk-1kt3p3dg.js";import"./chunk-99be7vbh.js";import"./chunk-n3pc62tc.js";import{Lh as a,Mh as r,Ph as t}from"./chunk-s7tn2t8x.js";import{Ri as YJ}from"./chunk-kscwjycy.js";import"./chunk-p4ka241x.js";import"./chunk-hkp00b9x.js";import"./chunk-70kpm72z.js";import"./chunk-1btx3kkv.js";import"./chunk-egzfxdr1.js";import"./chunk-rh811v1f.js";import"./chunk-wamxfhh6.js";import"./chunk-cd847h0t.js";import"./chunk-zh0knwen.js";import"./chunk-04ffq2ge.js";import"./chunk-pfjky33c.js";import"./chunk-vqar6ysw.js";import"./chunk-mxhy19a9.js";import{hl as ZJ}from"./chunk-22jm6sn1.js";import"./chunk-yc2pnb1w.js";import{vl as OJ}from"./chunk-7effp39a.js";import{xl as R}from"./chunk-51fvpq55.js";import"./chunk-wgre66wq.js";import{createHash as Y2}from"crypto";import{join as v,resolve as FJ,sep as IJ}from"path";import{Duplex as vJ}from"stream";import{constants as N,createBrotliCompress as EJ,createGzip as gJ}from"zlib";var yJ=["br","gzip"],uJ=1024,fJ=5,mJ=19,hJ=6;function cJ(J){if(J===void 0)return 1;if(!/^\d+(\.\d{0,3})?$/.test(J.trim()))return 1;let $=Number(J.trim());return Number.isFinite($)?Math.min($,1):1}function pJ(J){if(J===null||J===void 0)return null;let $=new Map;for(let Z of J.split(",")){let[X,...W]=Z.split(";"),j=X.trim().toLowerCase();if(j==="")continue;let H=1;for(let Y of W){let O=Y.indexOf("=");if(O===-1)continue;if(Y.slice(0,O).trim().toLowerCase()==="q"){H=cJ(Y.slice(O+1));break}}$.set(j,H)}return $}function q(J,$=yJ){let Z=pJ(J);if(!Z)return null;let X=Z.get("*"),W=null,j=0;for(let H of $){let Y=Z.get(H)??X??0;if(Y>j)W=H,j=Y}return W}function dJ(J,$){if(!J)return!1;return J.split(",").some((Z)=>Z.trim().toLowerCase().split("=")[0].trim()===$)}function lJ(J,$){if(J==="HEAD")return!1;if($.status<200||$.status===204||$.status===206||$.status===304)return!1;if($.headers.has("Content-Range"))return!1;let Z=$.headers.get("Content-Type");if(!Z||!/^\s*text\/html\s*(;|$)/i.test(Z))return!1;if(!$.body)return!1;let X=$.headers.get("Content-Encoding");if(X&&X.trim().toLowerCase()!=="identity")return!1;if(dJ($.headers.get("Cache-Control"),"no-transform"))return!1;let W=$.headers.get("Content-Length");if(W!==null&&Number(W)<uJ)return!1;return!0}function oJ(J){let $=J==="br"?EJ({params:{[N.BROTLI_PARAM_QUALITY]:fJ,[N.BROTLI_PARAM_LGWIN]:mJ},flush:N.BROTLI_OPERATION_FLUSH}):gJ({level:hJ,flush:N.Z_SYNC_FLUSH});return vJ.toWeb($)}function nJ(J){let $=J.get("Vary");if(!$){J.set("Vary","Accept-Encoding");return}let Z=$.split(",").map((X)=>X.trim().toLowerCase());if(Z.includes("*")||Z.includes("accept-encoding"))return;J.append("Vary","Accept-Encoding")}function l(J,$){if(!lJ(J.method,$))return $;let Z=new Headers($.headers);nJ(Z);let X=q(J.headers.get("Accept-Encoding"));if(!X)return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z});let W;try{W=oJ(X)}catch{return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}return Z.set("Content-Encoding",X),Z.delete("Content-Length"),new Response($.body.pipeThrough(W),{status:$.status,statusText:$.statusText,headers:Z})}import{readdir as J2,stat as e}from"fs/promises";import{join as $2}from"path";import{mkdir as F2,readFile as iJ,stat as I2,writeFile as _2}from"fs/promises";import{dirname as P2,join as aJ}from"path";import{promisify as o}from"util";import{brotliCompress as rJ,constants as B2,gzip as tJ}from"zlib";var sJ=".vite/static-assets.json";var n={br:".br",gzip:".gz"},eJ=["br","gzip"],R2=o(rJ),D2=o(tJ);async function i(J){let $;try{$=await iJ(aJ(J,sJ),"utf8")}catch{return null}let Z;try{Z=JSON.parse($)?.files}catch{return null}if(!Z||typeof Z!=="object")return null;let X={files:{}};for(let[W,j]of Object.entries(Z)){if(!Array.isArray(j))continue;X.files[W]=eJ.filter((H)=>j.includes(H))}return X}function S(J){let $=J.toString(),Z=new Bun.CryptoHasher("sha1");return Z.update($),Z.digest("hex")}async function JJ(J){let $=new Set;async function Z(X,W){let j;try{j=await J2(X,{withFileTypes:!0})}catch{return}for(let H of j){if(H.name.startsWith("."))continue;if(W&&H.name==="assets")continue;let Y=$2(X,H.name),O=H.isDirectory(),U=H.isFile();if(H.isSymbolicLink())try{let K=await e(Y);O=K.isDirectory(),U=K.isFile()}catch{continue}if(U)$.add(Y);else if(O&&!H.isSymbolicLink())await Z(Y,!1)}}return await Z(J,!0),$}var Z2="public, max-age=31536000, must-revalidate",X2="public, max-age=31536000, immutable";async function Q2(J,$,Z){if(Z.length===0||J.headers.has("Range"))return null;let X=q(J.headers.get("Accept-Encoding"),Z);if(!X)return null;let W=$+n[X];try{let j=await e(W);return j.isFile()?{encoding:X,path:W,size:j.size}:null}catch{return null}}async function $J(J,$,Z={}){let X=Bun.file($),W=Z.encodings??[],j={"Content-Type":X.type||"application/octet-stream","Cache-Control":Z.immutable?X2:Z2,"Accept-Ranges":"bytes"};if(W.length>0)j.Vary="Accept-Encoding";let H=await Q2(J,$,W);if(H){let U=Bun.file(H.path);return new Response(U.stream(),{headers:{...j,"Content-Encoding":H.encoding,"Content-Length":String(H.size),ETag:`${S(U.lastModified)}-${H.encoding}`}})}let Y=X.size;j.ETag=S(X.lastModified);let O=a(J.headers.get("Range"));if(O){let U=r(O,Y);if(!U)return s(Y);return new Response(X.slice(U.start,U.end+1).stream(),{status:206,headers:{...j,"Content-Range":t(U.start,U.end,Y),"Content-Length":String(U.length)}})}return new Response(X.stream(),{headers:{...j,"Content-Length":String(Y)}})}import{stat as O2}from"fs/promises";var A="app/client.tsx";function XJ(J,$=M){let Z=J[A]?.file;if(!Z)return;return{module:F(Z,$),preload:C(J,A,$)}}function C(J,$,Z=M){let X=[],W=new Set,j=(H)=>{if(W.has(H))return;W.add(H);let Y=J[H];if(!Y?.file)return;X.push(F(Y.file,Z));for(let O of Y.imports??[])j(O)};return j($),X}function W2(J,$,Z=M){let X=new Set(C(J,$,Z)),W=[],j=new Set,H=(O)=>{if(j.has(O))return;j.add(O);let U=J[O];if(!U)return;for(let K of U.dynamicImports??[])if(!/(^|\/)node_modules\//.test(K)&&!W.includes(K))W.push(K);for(let K of U.imports??[])H(K)};H($);let Y=[];for(let O of W)for(let U of C(J,O,Z))if(!X.has(U))X.add(U),Y.push(U);return Y}function QJ(J,$){let Z=[],X=new Set,W=new Set,j=(H)=>{if(W.has(H))return;W.add(H);let Y=J[H];if(!Y)return;for(let O of Y.imports??[])j(O);for(let O of Y.css??[])if(!X.has(O))X.add(O),Z.push(O)};return j($),Z}function WJ(J,$=M){let Z=new Map;return(X)=>{if(!Z.has(X)){let W=`${X}${ZJ}`,j=J[W]?.file;Z.set(X,j?{src:F(j,$),preload:C(J,W,$),dynamicPreload:W2(J,W,$)}:void 0)}return Z.get(X)}}function jJ(J,$=30000){let Z=JSON.stringify("gemi:chunk-reload"),X=JSON.stringify(`Failed to fetch dynamically imported module: ${J}`);return`var r=!1;try{var s=window.sessionStorage,m=JSON.parse(s.getItem(${Z})||"null");var d=m?Date.now()-m.at:NaN;if(navigator.onLine!==!1&&!(d>=0&&d<${$})){s.setItem(${Z},JSON.stringify({url:window.location.href,at:Date.now()}));r=!0}}catch(e){}if(r)window.location.reload();else throw new Error(${X});export {}`}var j2=new RegExp(`^${HJ}/.+\\.m?js$`);function H2(J){return j2.test(J)}function GJ(J){if(H2(J))return new Response(jJ(J),{headers:{"Content-Type":"application/javascript","Cache-Control":"no-store"}});if(B(J))return new Response("Not found",{status:404});return}var G2=`<!DOCTYPE html>
 <html lang="en">
   <head>
     <meta charset="UTF-8" />

package/dist/chunks/{RealtimeClient-BVvBtBge.js → RealtimeClient-b6NvkUAQ.js}

@@ -1,4 +1,4 @@
-import { U as realtime } from "./ThemeProvider-D7ozGtJH.js";
+import { H as realtime } from "./ThemeProvider-CkuoNG4Q.js";
 import { t as channelKey } from "./channelKey-CIhHpX6x.js";
 //#region services/broadcast/protocol.ts
 /**
@@ -550,4 +550,4 @@ function tabClient() {
 //#endregion
 export { IDLE_CLOSE_MS, MAX_LIMIT_RETRIES, RELEASE_LINGER_MS, RESYNC_COALESCE_MS, RealtimeClient, backoffDelay, tabClient };
 
-//# sourceMappingURL=RealtimeClient-BVvBtBge.js.map
+//# sourceMappingURL=RealtimeClient-b6NvkUAQ.js.map

package/dist/chunks/{RealtimeClient-BVvBtBge.js.map → RealtimeClient-b6NvkUAQ.js.map}

@@ -1 +1 @@
-{"version":3,"file":"RealtimeClient-BVvBtBge.js","names":[],"sources":["../../services/broadcast/protocol.ts","../../client/realtime/RealtimeClient.ts"],"sourcesContent":["/**\n * The `gemi.v1` WebSocket protocol, shared by the server transport\n * (`SocketHub`) and the browser client (`gemi/client`'s connection manager).\n * Types and constants only: this module is imported by the browser bundle, so\n * it must never import a server module.\n *\n * Every frame is a JSON text frame. Binary frames are refused.\n *\n * From the client:\n *\n * - `{op:\"sub\", id, ch, p?}`: subscribe `id` (chosen by the client, unique per\n *   socket) to the channel pattern `ch` with params `p`. The server builds\n *   the topic and authorizes it.\n * - `{op:\"unsub\", id}`\n * - `{op:\"ping\"}`: answered with `pong`. The client sends one every\n *   `heartbeatMs` and reconnects when it hears nothing for twice that.\n *\n * From the server:\n *\n * - `{op:\"hello\", socketId, tag, heartbeatMs}`: the first frame. `socketId`\n *   goes in the `X-Gemi-Socket` header of the client's own requests (for\n *   `Broadcast.toOthers`); it is never shown to anyone else. `tag` is what\n *   an event frame's `x` carries when it skips this socket.\n * - `{op:\"subscribed\", id, t}`: `id` joined topic `t`. Sent only once this\n *   process receives the topic's events, so the resync the client runs on it\n *   cannot miss one.\n * - `{op:\"denied\", id, code}`: `id` was refused, or later revoked.\n * - `{op:\"ev\", t, ev, d?, x?}`: an event on topic `t`. Dropped by the socket\n *   whose `tag` is `x`.\n * - `{op:\"gap\"}`: events may have been lost for this socket; resync all.\n * - `{op:\"pong\"}`\n * - `{op:\"bye\", code, retryAfter}`: the server is going away (a restart).\n *   Reconnect after `retryAfter` ms.\n */\n\n/** The WebSocket subprotocol. */\nexport const BROADCAST_PROTOCOL = \"gemi.v1\";\n\n/** The default endpoint, `defineBroadcastConfig({ path })`. */\nexport const DEFAULT_SOCKET_PATH = \"/__gemi/socket\";\n\nexport { SOCKET_ID_HEADER } from \"./socketHeader\";\n\n/** What a subscription id may look like. */\nexport const SUBSCRIPTION_ID = /^[A-Za-z0-9_-]{1,32}$/;\n\n/**\n * Close codes the server uses. 1012 and 1013 are the standard \"restart\" and\n * \"try again later\"; the 4xxx ones are gemi's own.\n */\nexport const CloseCode = {\n  /** The client went away (tab closed, socket released). */\n  Normal: 1000,\n  /** A frame that was not JSON text, or not a known op. */\n  UnsupportedData: 1003,\n  /** Too many frames, or a frame over the size limit. */\n  PolicyViolation: 1008,\n  /** The server is restarting; `bye` said when to come back. */\n  Restart: 1012,\n  /** The socket fell too far behind; reconnect and resync. */\n  TryAgainLater: 1013,\n  /** The socket's user was signed out or its access revoked. */\n  Revoked: 4001,\n} as const;\n\n/** Why a subscription was refused. */\nexport type DeniedCode =\n  /** No channel with that pattern. Permanent. */\n  | \"unknown_channel\"\n  /** Missing, extra or malformed params. Permanent. */\n  | \"invalid_params\"\n  /** The channel's authorization said no. */\n  | \"denied\"\n  /** Authorization failed (a session store outage, a bug). Retryable. */\n  | \"error\"\n  /** The socket has `maxChannelsPerSocket` subscriptions already. */\n  | \"limit\"\n  /** Too many `sub`/`unsub` frames; retry later. */\n  | \"rate_limited\"\n  /** The subscription was revoked by `Broadcast.revoke`. */\n  | \"revoked\"\n  /** The frame was malformed, or the id is already in use. */\n  | \"invalid\";\n\nexport type ClientFrame =\n  | { op: \"sub\"; id: string; ch: string; p?: Record<string, string | number> }\n  | { op: \"unsub\"; id: string }\n  | { op: \"ping\" };\n\nexport type ServerFrame =\n  | { op: \"hello\"; socketId: string; tag: string; heartbeatMs: number }\n  | { op: \"subscribed\"; id: string; t: string }\n  | { op: \"denied\"; id: string; code: DeniedCode }\n  | { op: \"ev\"; t: string; ev: string; d?: unknown; x?: string }\n  | { op: \"gap\" }\n  | { op: \"pong\" }\n  | { op: \"bye\"; code: number; retryAfter: number };\n\n/**\n * Whether a refusal is final for this socket's session: resubscribing will\n * get the same answer, so the client does not retry it on its own.\n */\nexport function isPermanentDenial(code: DeniedCode): boolean {\n  return code === \"unknown_channel\" || code === \"invalid_params\" || code === \"invalid\";\n}\n","import {\n  BROADCAST_PROTOCOL,\n  CloseCode,\n  DEFAULT_SOCKET_PATH,\n  isPermanentDenial,\n  type ClientFrame,\n  type DeniedCode,\n  type ServerFrame,\n} from \"../../services/broadcast/protocol\";\nimport { channelKey } from \"./channelKey\";\nimport { realtime } from \"./loader\";\n\n/**\n * Where a channel subscription stands, as the hooks report it.\n *\n * - `idle`: the hook is disabled (`enabled: false`).\n * - `connecting`: the socket is opening, or the `sub` awaits its answer.\n * - `open`: subscribed; events arrive.\n * - `denied`: the server refused (or revoked) it; `code` says why.\n * - `closed`: no socket, on the server, before the first effect, or while\n *   waiting to reconnect.\n */\nexport type ChannelStatus = \"idle\" | \"connecting\" | \"open\" | \"denied\" | \"closed\";\n\nexport type ChannelParamValues = Record<string, string | number>;\n\n/** What a hook hands the socket for one channel. */\nexport interface ChannelListener {\n  onEvent?(event: string, data: unknown): void;\n  /** Events may have been missed: refetch what the channel describes. */\n  onResync?(): void;\n  onStatus?(status: ChannelStatus, code: DeniedCode | null): void;\n}\n\n/**\n * What the hooks subscribe through: the tab's `RealtimeClient`, or a\n * `FakeSocket` in tests. Returns the release function.\n */\nexport interface RealtimeSocket {\n  subscribe(pattern: string, params: ChannelParamValues, listener: ChannelListener): () => void;\n}\n\nexport interface RealtimeOptions {\n  /** The socket endpoint, `defineBroadcastConfig({ path })`. Default `/__gemi/socket`. */\n  path?: string;\n  /**\n   * How long a hidden tab keeps its socket, in ms, before disconnecting. On\n   * becoming visible again it reconnects and resyncs. Default 60 000.\n   */\n  hiddenDisconnectMs?: number;\n}\n\ninterface ClientInternals {\n  /** Test seam: the WebSocket class. */\n  WebSocket?: typeof WebSocket;\n  /** Test seam: the full URL, instead of the page's origin + `path`. */\n  url?: string;\n  random?: () => number;\n}\n\n/** The minimum gap between two resyncs of one subscription. */\nexport const RESYNC_COALESCE_MS = 2_000;\n/** How long the socket stays open after its last subscription goes. */\nexport const IDLE_CLOSE_MS = 5_000;\n/**\n * How long a subscription outlives its last listener. A hook that remounts\n * within it (StrictMode's double mount, a route change back, a list that\n * re-renders its rows) picks the same subscription up again: no `unsub`, no\n * new `sub`, nothing counted against the server's rate limit.\n */\nexport const RELEASE_LINGER_MS = 1_500;\n/** The least wait before resending a `sub` denied with `rate_limited`. */\nconst RATE_LIMITED_RETRY_MS = 5_000;\n/**\n * How often a `sub` denied with `limit` is resent on one socket. The socket\n * holds as many channels as the server allows, so only a released one makes\n * room: worth a few tries with backoff, not a retry for as long as the socket\n * lives. Past it the subscription waits for the next connection.\n */\nexport const MAX_LIMIT_RETRIES = 5;\nconst MIN_BACKOFF_MS = 1_000;\nconst MAX_BACKOFF_MS = 30_000;\nconst DEFAULT_HEARTBEAT_MS = 25_000;\nconst DEFAULT_HIDDEN_DISCONNECT_MS = 60_000;\n\ninterface Entry {\n  key: string;\n  id: string;\n  pattern: string;\n  params: ChannelParamValues;\n  listeners: Set<ChannelListener>;\n  status: ChannelStatus;\n  code: DeniedCode | null;\n  /** Refused for good: not resent on a reconnect. */\n  permanent: boolean;\n  topic: string | null;\n  lastResyncAt: number;\n  resyncTimer: ReturnType<typeof setTimeout> | null;\n  /** Set while the entry outlives its last listener; see `RELEASE_LINGER_MS`. */\n  lingerTimer: ReturnType<typeof setTimeout> | null;\n  /** A transient denial's resend, on the same socket. */\n  retryTimer: ReturnType<typeof setTimeout> | null;\n  retries: number;\n}\n\n/**\n * The tab's one WebSocket to the app (`gemi.v1`), multiplexing every channel\n * the mounted hooks subscribe to.\n *\n * Opened by the first subscription and closed a few seconds after the last\n * one goes. Reconnects with full-jitter backoff (1 to 30 s), or after the\n * server's `bye.retryAfter`, at once on `online`; resubscribes everything\n * then. A tab hidden for `hiddenDisconnectMs` disconnects, and reconnects\n * when shown. Every `subscribed` ack and every `gap` resyncs the\n * subscription (coalesced to one per 2 s), because events are volatile: a\n * client that may have missed one refetches over HTTP.\n *\n * Loaded on first use (#891): import this module as a type only, and reach\n * the tab's instance through `./loader`, or it lands in every route's entry\n * chunk.\n */\nexport class RealtimeClient implements RealtimeSocket {\n  private options: Required<RealtimeOptions>;\n  private readonly internals: ClientInternals;\n  private ws: WebSocket | null = null;\n  private entries = new Map<string, Entry>();\n  private byId = new Map<string, Entry>();\n  private topics = new Map<string, Set<string>>();\n  private nextId = 1;\n  private attempt = 0;\n  private tag: string | null = null;\n  private socketIdValue: string | null = null;\n  private heartbeatMs = DEFAULT_HEARTBEAT_MS;\n  private reconnectTimer: ReturnType<typeof setTimeout> | null = null;\n  private idleTimer: ReturnType<typeof setTimeout> | null = null;\n  private hiddenTimer: ReturnType<typeof setTimeout> | null = null;\n  private pingTimer: ReturnType<typeof setInterval> | null = null;\n  private livenessTimer: ReturnType<typeof setTimeout> | null = null;\n  private retryAfter: number | null = null;\n  private revoked = false;\n  private pausedWhileHidden = false;\n  private listening = false;\n\n  constructor(options: RealtimeOptions = {}, internals: ClientInternals = {}) {\n    this.options = withDefaults(options);\n    this.internals = internals;\n  }\n\n  configure(options: RealtimeOptions) {\n    this.options = withDefaults({ ...this.options, ...options });\n  }\n\n  /** The id to send as `X-Gemi-Socket`, while the socket is open. */\n  get socketId(): string | null {\n    return this.socketIdValue;\n  }\n\n  subscribe(pattern: string, params: ChannelParamValues, listener: ChannelListener): () => void {\n    const key = channelKey(pattern, params);\n    let entry = this.entries.get(key);\n    if (!entry) {\n      entry = {\n        key,\n        id: String(this.nextId++),\n        pattern,\n        params: { ...params },\n        listeners: new Set(),\n        status: \"closed\",\n        code: null,\n        permanent: false,\n        topic: null,\n        lastResyncAt: 0,\n        resyncTimer: null,\n        lingerTimer: null,\n        retryTimer: null,\n        retries: 0,\n      };\n      this.entries.set(key, entry);\n      this.byId.set(entry.id, entry);\n      if (this.isOpen()) {\n        this.sendSub(entry);\n      }\n    }\n    if (entry.lingerTimer) {\n      clearTimeout(entry.lingerTimer);\n      entry.lingerTimer = null;\n    }\n    entry.listeners.add(listener);\n    listener.onStatus?.(entry.status, entry.code);\n    this.cancelIdleClose();\n    this.listen();\n    if (!this.ws && !this.reconnectTimer && !this.pausedWhileHidden) {\n      this.connect();\n    }\n\n    let released = false;\n    return () => {\n      if (released) return;\n      released = true;\n      this.release(entry!, listener);\n    };\n  }\n\n  private release(entry: Entry, listener: ChannelListener) {\n    entry.listeners.delete(listener);\n    if (entry.listeners.size > 0 || entry.lingerTimer) return;\n    entry.lingerTimer = setTimeout(() => {\n      entry.lingerTimer = null;\n      if (entry.listeners.size === 0) this.drop(entry);\n    }, RELEASE_LINGER_MS);\n  }\n\n  private drop(entry: Entry) {\n    if (entry.resyncTimer) clearTimeout(entry.resyncTimer);\n    this.clearRetry(entry);\n    this.entries.delete(entry.key);\n    this.byId.delete(entry.id);\n    this.dropTopic(entry);\n    if (this.isOpen() && (entry.status === \"open\" || entry.status === \"connecting\")) {\n      this.send({ op: \"unsub\", id: entry.id });\n    }\n    if (this.entries.size === 0) this.scheduleIdleClose();\n  }\n\n  private isOpen() {\n    return this.ws !== null && this.ws.readyState === 1;\n  }\n\n  private connect() {\n    if (typeof window === \"undefined\") return;\n    if (this.entries.size === 0) return;\n    const Impl = this.internals.WebSocket ?? globalThis.WebSocket;\n    if (!Impl) return;\n    this.clearReconnect();\n    let ws: WebSocket;\n    try {\n    ws = new Impl(this.url(), [BROADCAST_PROTOCOL]);\n    } catch {\n      this.scheduleReconnect();\n      return;\n    }\n    this.ws = ws;\n    for (const entry of this.entries.values()) {\n      if (!entry.permanent) this.setStatus(entry, \"connecting\", null);\n    }\n    ws.onopen = () => {\n      if (this.ws !== ws) return;\n      this.touch();\n      for (const entry of this.entries.values()) {\n        if (entry.permanent) continue;\n        // A new socket starts every transient denial's count over.\n        entry.retries = 0;\n        this.sendSub(entry);\n      }\n    };\n    ws.onmessage = (event: MessageEvent) => {\n      if (this.ws !== ws) return;\n      this.touch();\n      let frame: ServerFrame;\n      try {\n        frame = JSON.parse(String(event.data));\n      } catch {\n        return;\n      }\n      this.handle(frame);\n    };\n    ws.onclose = (event: CloseEvent) => {\n      if (this.ws !== ws) return;\n      this.onClosed(event.code);\n    };\n    ws.onerror = () => {\n      // A `close` follows.\n    };\n  }\n\n  private url(): string {\n    if (this.internals.url) return this.internals.url;\n    const { protocol, host } = window.location;\n    return `${protocol === \"https:\" ? \"wss:\" : \"ws:\"}//${host}${this.options.path}`;\n  }\n\n  private sendSub(entry: Entry) {\n    this.setStatus(entry, \"connecting\", null);\n    const frame: ClientFrame = { op: \"sub\", id: entry.id, ch: entry.pattern };\n    if (Object.keys(entry.params).length > 0) frame.p = entry.params;\n    this.send(frame);\n  }\n\n  private send(frame: ClientFrame) {\n    if (!this.isOpen()) return;\n    try {\n      this.ws!.send(JSON.stringify(frame));\n    } catch {\n      // The close handler takes over.\n    }\n  }\n\n  private handle(frame: ServerFrame) {\n    switch (frame.op) {\n      case \"hello\":\n        this.socketIdValue = frame.socketId;\n        this.tag = frame.tag;\n        this.attempt = 0;\n        this.revoked = false;\n        if (frame.heartbeatMs > 0) {\n          this.heartbeatMs = frame.heartbeatMs;\n        }\n        this.startHeartbeat();\n        return;\n      case \"subscribed\": {\n        const entry = this.byId.get(frame.id);\n        if (!entry) return;\n        this.dropTopic(entry);\n        entry.topic = frame.t;\n        let ids = this.topics.get(frame.t);\n        if (!ids) this.topics.set(frame.t, (ids = new Set()));\n        ids.add(entry.id);\n        this.clearRetry(entry);\n        entry.retries = 0;\n        this.setStatus(entry, \"open\", null);\n        // The window between the view rendering and this ack, or the time\n        // the socket was down, may have carried events this tab missed.\n        this.resync(entry);\n        return;\n      }\n      case \"denied\": {\n        const entry = this.byId.get(frame.id);\n        if (!entry) return;\n        this.dropTopic(entry);\n        entry.permanent = isPermanentDenial(frame.code);\n        this.setStatus(entry, \"denied\", frame.code);\n        this.scheduleRetry(entry, frame.code);\n        return;\n      }\n      case \"ev\": {\n        if (frame.x !== undefined && frame.x === this.tag) return;\n        const ids = this.topics.get(frame.t);\n        if (!ids) return;\n        for (const id of Array.from(ids)) {\n          const entry = this.byId.get(id);\n          if (!entry) continue;\n          for (const listener of Array.from(entry.listeners)) {\n            try {\n              listener.onEvent?.(frame.ev, frame.d);\n            } catch (error) {\n              reportListenerError(error);\n            }\n          }\n        }\n        return;\n      }\n      case \"gap\":\n        for (const entry of this.entries.values()) {\n          if (entry.status === \"open\") this.resync(entry);\n        }\n        return;\n      case \"bye\":\n        this.retryAfter = Math.max(0, Number(frame.retryAfter) || 0);\n        return;\n      case \"pong\":\n        return;\n    }\n  }\n\n  private onClosed(code: number) {\n    this.ws = null;\n    this.socketIdValue = null;\n    this.tag = null;\n    this.stopHeartbeat();\n    this.topics.clear();\n    for (const entry of this.entries.values()) {\n      entry.topic = null;\n      // The reconnect resends it.\n      this.clearRetry(entry);\n      if (!entry.permanent) this.setStatus(entry, \"closed\", null);\n    }\n    if (code === CloseCode.Revoked) this.revoked = true;\n    if (this.entries.size > 0 && !this.pausedWhileHidden) this.scheduleReconnect();\n  }\n\n  private scheduleReconnect() {\n    this.clearReconnect();\n    let delay: number;\n    if (this.retryAfter !== null) {\n      delay = this.retryAfter;\n      this.retryAfter = null;\n    } else if (this.revoked) {\n      // Signed out or access revoked: come back promptly, as whoever we are now.\n      this.revoked = false;\n      delay = Math.floor(this.random() * 500);\n    } else {\n      delay = backoffDelay(this.attempt, this.random());\n    }\n    this.attempt++;\n    this.reconnectTimer = setTimeout(() => {\n      this.reconnectTimer = null;\n      this.connect();\n    }, delay);\n  }\n\n  private clearReconnect() {\n    if (this.reconnectTimer) clearTimeout(this.reconnectTimer);\n    this.reconnectTimer = null;\n  }\n\n  private random() {\n    return (this.internals.random ?? Math.random)();\n  }\n\n  private startHeartbeat() {\n    this.stopHeartbeat();\n    this.pingTimer = setInterval(() => this.send({ op: \"ping\" }), this.heartbeatMs);\n    this.touch();\n  }\n\n  private stopHeartbeat() {\n    if (this.pingTimer) clearInterval(this.pingTimer);\n    if (this.livenessTimer) clearTimeout(this.livenessTimer);\n    this.pingTimer = null;\n    this.livenessTimer = null;\n  }\n\n  /** Anything from the server proves the socket alive. */\n  private touch() {\n    if (this.livenessTimer) clearTimeout(this.livenessTimer);\n    const ws = this.ws;\n    this.livenessTimer = setTimeout(() => {\n      if (this.ws !== ws || !ws) return;\n      // Silent for two heartbeats: a dead connection a proxy never closed.\n      try {\n        ws.close();\n      } catch {}\n      this.onClosed(1006);\n    }, this.heartbeatMs * 2);\n  }\n\n  private setStatus(entry: Entry, status: ChannelStatus, code: DeniedCode | null) {\n    if (entry.status === status && entry.code === code) return;\n    entry.status = status;\n    entry.code = code;\n    for (const listener of Array.from(entry.listeners)) {\n      try {\n        listener.onStatus?.(status, code);\n      } catch (error) {\n        reportListenerError(error);\n      }\n    }\n  }\n\n  /** At most one resync per subscription per 2 s; a later one is deferred, not dropped. */\n  private resync(entry: Entry) {\n    if (entry.resyncTimer) return;\n    const now = Date.now();\n    const wait = entry.lastResyncAt + RESYNC_COALESCE_MS - now;\n    const fire = () => {\n      entry.resyncTimer = null;\n      entry.lastResyncAt = Date.now();\n      for (const listener of Array.from(entry.listeners)) {\n        try {\n          listener.onResync?.();\n        } catch (error) {\n          reportListenerError(error);\n        }\n      }\n    };\n    if (entry.lastResyncAt === 0 || wait <= 0) fire();\n    else entry.resyncTimer = setTimeout(fire, wait);\n  }\n\n  /**\n   * A transient denial (`rate_limited`, `error`, `limit`) is retried on the\n   * same socket, with backoff: a healthy socket may never reconnect. `denied`\n   * and `revoked` are the channel's answer for this session, so they wait for\n   * the next connection (a sign-in reconnects), and a permanent one is never\n   * resent. `limit` gives up after `MAX_LIMIT_RETRIES` on one socket.\n   */\n  private scheduleRetry(entry: Entry, code: DeniedCode) {\n    if (code !== \"rate_limited\" && code !== \"error\" && code !== \"limit\") return;\n    if (code === \"limit\" && entry.retries >= MAX_LIMIT_RETRIES) return;\n    this.clearRetry(entry);\n    const floor = code === \"rate_limited\" ? RATE_LIMITED_RETRY_MS : MIN_BACKOFF_MS;\n    const delay = Math.max(floor, backoffDelay(entry.retries, this.random()));\n    entry.retries++;\n    entry.retryTimer = setTimeout(() => {\n      entry.retryTimer = null;\n      if (this.entries.get(entry.key) !== entry || entry.status !== \"denied\") return;\n      if (this.isOpen()) this.sendSub(entry);\n    }, delay);\n  }\n\n  private clearRetry(entry: Entry) {\n    if (entry.retryTimer) clearTimeout(entry.retryTimer);\n    entry.retryTimer = null;\n  }\n\n  private dropTopic(entry: Entry) {\n    if (!entry.topic) return;\n    const ids = this.topics.get(entry.topic);\n    ids?.delete(entry.id);\n    if (ids && ids.size === 0) this.topics.delete(entry.topic);\n    entry.topic = null;\n  }\n\n  private scheduleIdleClose() {\n    this.cancelIdleClose();\n    this.idleTimer = setTimeout(() => {\n      this.idleTimer = null;\n      if (this.entries.size > 0) return;\n      this.clearReconnect();\n      this.close();\n    }, IDLE_CLOSE_MS);\n  }\n\n  private cancelIdleClose() {\n    if (this.idleTimer) clearTimeout(this.idleTimer);\n    this.idleTimer = null;\n  }\n\n  /** Closes the socket without reconnecting. */\n  private close() {\n    const ws = this.ws;\n    if (!ws) return;\n    this.ws = null;\n    try {\n      ws.close(CloseCode.Normal);\n    } catch {}\n    this.onClosed(CloseCode.Normal);\n  }\n\n  private listen() {\n    if (this.listening || typeof window === \"undefined\") return;\n    this.listening = true;\n    window.addEventListener(\"online\", this.onOnline);\n    if (typeof document !== \"undefined\") {\n      document.addEventListener(\"visibilitychange\", this.onVisibility);\n    }\n  }\n\n  private onOnline = () => {\n    if (this.entries.size === 0 || this.ws || this.pausedWhileHidden) return;\n    this.attempt = 0;\n    this.connect();\n  };\n\n  private onVisibility = () => {\n    if (document.visibilityState === \"hidden\") {\n      if (this.hiddenTimer) return;\n      this.hiddenTimer = setTimeout(() => {\n        this.hiddenTimer = null;\n        if (document.visibilityState !== \"hidden\") return;\n        this.pausedWhileHidden = true;\n        this.clearReconnect();\n        this.close();\n      }, this.options.hiddenDisconnectMs);\n      return;\n    }\n    if (this.hiddenTimer) clearTimeout(this.hiddenTimer);\n    this.hiddenTimer = null;\n    if (this.pausedWhileHidden) {\n      this.pausedWhileHidden = false;\n      this.attempt = 0;\n      // The `subscribed` acks resync every subscription.\n      this.connect();\n    }\n  };\n\n  /**\n   * Drops the socket and opens a new one at once, when anything is\n   * subscribed. A socket keeps the session it was opened with (the upgrade's\n   * cookies), so signing in or out in this tab reconnects it: every channel\n   * is then authorized as the new session, and the acks resync.\n   */\n  reconnect() {\n    this.close();\n    this.clearReconnect();\n    this.attempt = 0;\n    if (this.entries.size > 0 && !this.pausedWhileHidden) this.connect();\n  }\n\n  /** For tests: drops the socket, timers and listeners. */\n  dispose() {\n    this.clearReconnect();\n    this.cancelIdleClose();\n    if (this.hiddenTimer) clearTimeout(this.hiddenTimer);\n    for (const entry of this.entries.values()) {\n      if (entry.resyncTimer) clearTimeout(entry.resyncTimer);\n      if (entry.lingerTimer) clearTimeout(entry.lingerTimer);\n      this.clearRetry(entry);\n    }\n    this.entries.clear();\n    this.byId.clear();\n    this.close();\n    if (this.listening && typeof window !== \"undefined\") {\n      window.removeEventListener(\"online\", this.onOnline);\n      document?.removeEventListener(\"visibilitychange\", this.onVisibility);\n      this.listening = false;\n    }\n  }\n}\n\n/** Full jitter, 1 to 30 s: `max(1 s, random × min(30 s, 1 s × 2^attempt))`. */\nexport function backoffDelay(attempt: number, random: number): number {\n  const cap = Math.min(MAX_BACKOFF_MS, MIN_BACKOFF_MS * 2 ** Math.min(attempt, 10));\n  return Math.max(MIN_BACKOFF_MS, Math.floor(random * cap));\n}\n\nfunction withDefaults(options: RealtimeOptions): Required<RealtimeOptions> {\n  return {\n    path: options.path ?? DEFAULT_SOCKET_PATH,\n    hiddenDisconnectMs: options.hiddenDisconnectMs ?? DEFAULT_HIDDEN_DISCONNECT_MS,\n  };\n}\n\nfunction reportListenerError(error: unknown) {\n  setTimeout(() => {\n    throw error;\n  });\n}\n\n/**\n * The tab's client, created on first use with the options `configureRealtime`\n * set. `loadRealtimeClient` in `./loader` calls it once this module is loaded.\n */\nexport function tabClient(): RealtimeClient {\n  return (realtime.client ??= new RealtimeClient(realtime.options));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,IAAa,qBAAqB;;;;;AAclC,IAAa,YAAY;;CAEvB,QAAQ;;CAER,iBAAiB;;CAEjB,iBAAiB;;CAEjB,SAAS;;CAET,eAAe;;CAEf,SAAS;AACX;;;;;AAuCA,SAAgB,kBAAkB,MAA2B;CAC3D,OAAO,SAAS,qBAAqB,SAAS,oBAAoB,SAAS;AAC7E;;;;AC3CA,IAAa,qBAAqB;;AAElC,IAAa,gBAAgB;;;;;;;AAO7B,IAAa,oBAAoB;;AAEjC,IAAM,wBAAwB;;;;;;;AAO9B,IAAa,oBAAoB;AACjC,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AACvB,IAAM,uBAAuB;AAC7B,IAAM,+BAA+B;;;;;;;;;;;;;;;;;AAsCrC,IAAa,iBAAb,MAAsD;CACpD;CACA;CACA,KAA+B;CAC/B,0BAAkB,IAAI,IAAmB;CACzC,uBAAe,IAAI,IAAmB;CACtC,yBAAiB,IAAI,IAAyB;CAC9C,SAAiB;CACjB,UAAkB;CAClB,MAA6B;CAC7B,gBAAuC;CACvC,cAAsB;CACtB,iBAA+D;CAC/D,YAA0D;CAC1D,cAA4D;CAC5D,YAA2D;CAC3D,gBAA8D;CAC9D,aAAoC;CACpC,UAAkB;CAClB,oBAA4B;CAC5B,YAAoB;CAEpB,YAAY,UAA2B,CAAC,GAAG,YAA6B,CAAC,GAAG;EAC1E,KAAK,UAAU,aAAa,OAAO;EACnC,KAAK,YAAY;CACnB;CAEA,UAAU,SAA0B;EAClC,KAAK,UAAU,aAAa;GAAE,GAAG,KAAK;GAAS,GAAG;EAAQ,CAAC;CAC7D;;CAGA,IAAI,WAA0B;EAC5B,OAAO,KAAK;CACd;CAEA,UAAU,SAAiB,QAA4B,UAAuC;EAC5F,MAAM,MAAM,WAAW,SAAS,MAAM;EACtC,IAAI,QAAQ,KAAK,QAAQ,IAAI,GAAG;EAChC,IAAI,CAAC,OAAO;GACV,QAAQ;IACN;IACA,IAAI,OAAO,KAAK,QAAQ;IACxB;IACA,QAAQ,EAAE,GAAG,OAAO;IACpB,2BAAW,IAAI,IAAI;IACnB,QAAQ;IACR,MAAM;IACN,WAAW;IACX,OAAO;IACP,cAAc;IACd,aAAa;IACb,aAAa;IACb,YAAY;IACZ,SAAS;GACX;GACA,KAAK,QAAQ,IAAI,KAAK,KAAK;GAC3B,KAAK,KAAK,IAAI,MAAM,IAAI,KAAK;GAC7B,IAAI,KAAK,OAAO,GACd,KAAK,QAAQ,KAAK;EAEtB;EACA,IAAI,MAAM,aAAa;GACrB,aAAa,MAAM,WAAW;GAC9B,MAAM,cAAc;EACtB;EACA,MAAM,UAAU,IAAI,QAAQ;EAC5B,SAAS,WAAW,MAAM,QAAQ,MAAM,IAAI;EAC5C,KAAK,gBAAgB;EACrB,KAAK,OAAO;EACZ,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,kBAAkB,CAAC,KAAK,mBAC5C,KAAK,QAAQ;EAGf,IAAI,WAAW;EACf,aAAa;GACX,IAAI,UAAU;GACd,WAAW;GACX,KAAK,QAAQ,OAAQ,QAAQ;EAC/B;CACF;CAEA,QAAgB,OAAc,UAA2B;EACvD,MAAM,UAAU,OAAO,QAAQ;EAC/B,IAAI,MAAM,UAAU,OAAO,KAAK,MAAM,aAAa;EACnD,MAAM,cAAc,iBAAiB;GACnC,MAAM,cAAc;GACpB,IAAI,MAAM,UAAU,SAAS,GAAG,KAAK,KAAK,KAAK;EACjD,GAAG,iBAAiB;CACtB;CAEA,KAAa,OAAc;EACzB,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;EACrD,KAAK,WAAW,KAAK;EACrB,KAAK,QAAQ,OAAO,MAAM,GAAG;EAC7B,KAAK,KAAK,OAAO,MAAM,EAAE;EACzB,KAAK,UAAU,KAAK;EACpB,IAAI,KAAK,OAAO,MAAM,MAAM,WAAW,UAAU,MAAM,WAAW,eAChE,KAAK,KAAK;GAAE,IAAI;GAAS,IAAI,MAAM;EAAG,CAAC;EAEzC,IAAI,KAAK,QAAQ,SAAS,GAAG,KAAK,kBAAkB;CACtD;CAEA,SAAiB;EACf,OAAO,KAAK,OAAO,QAAQ,KAAK,GAAG,eAAe;CACpD;CAEA,UAAkB;EAChB,IAAI,OAAO,WAAW,aAAa;EACnC,IAAI,KAAK,QAAQ,SAAS,GAAG;EAC7B,MAAM,OAAO,KAAK,UAAU,aAAa,WAAW;EACpD,IAAI,CAAC,MAAM;EACX,KAAK,eAAe;EACpB,IAAI;EACJ,IAAI;GACJ,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,kBAAkB,CAAC;EAC9C,QAAQ;GACN,KAAK,kBAAkB;GACvB;EACF;EACA,KAAK,KAAK;EACV,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GACtC,IAAI,CAAC,MAAM,WAAW,KAAK,UAAU,OAAO,cAAc,IAAI;EAEhE,GAAG,eAAe;GAChB,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,MAAM;GACX,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;IACzC,IAAI,MAAM,WAAW;IAErB,MAAM,UAAU;IAChB,KAAK,QAAQ,KAAK;GACpB;EACF;EACA,GAAG,aAAa,UAAwB;GACtC,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,MAAM;GACX,IAAI;GACJ,IAAI;IACF,QAAQ,KAAK,MAAM,OAAO,MAAM,IAAI,CAAC;GACvC,QAAQ;IACN;GACF;GACA,KAAK,OAAO,KAAK;EACnB;EACA,GAAG,WAAW,UAAsB;GAClC,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,SAAS,MAAM,IAAI;EAC1B;EACA,GAAG,gBAAgB,CAEnB;CACF;CAEA,MAAsB;EACpB,IAAI,KAAK,UAAU,KAAK,OAAO,KAAK,UAAU;EAC9C,MAAM,EAAE,UAAU,SAAS,OAAO;EAClC,OAAO,GAAG,aAAa,WAAW,SAAS,MAAM,IAAI,OAAO,KAAK,QAAQ;CAC3E;CAEA,QAAgB,OAAc;EAC5B,KAAK,UAAU,OAAO,cAAc,IAAI;EACxC,MAAM,QAAqB;GAAE,IAAI;GAAO,IAAI,MAAM;GAAI,IAAI,MAAM;EAAQ;EACxE,IAAI,OAAO,KAAK,MAAM,MAAM,CAAC,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM;EAC1D,KAAK,KAAK,KAAK;CACjB;CAEA,KAAa,OAAoB;EAC/B,IAAI,CAAC,KAAK,OAAO,GAAG;EACpB,IAAI;GACF,KAAK,GAAI,KAAK,KAAK,UAAU,KAAK,CAAC;EACrC,QAAQ,CAER;CACF;CAEA,OAAe,OAAoB;EACjC,QAAQ,MAAM,IAAd;GACE,KAAK;IACH,KAAK,gBAAgB,MAAM;IAC3B,KAAK,MAAM,MAAM;IACjB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,IAAI,MAAM,cAAc,GACtB,KAAK,cAAc,MAAM;IAE3B,KAAK,eAAe;IACpB;GACF,KAAK,cAAc;IACjB,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM,EAAE;IACpC,IAAI,CAAC,OAAO;IACZ,KAAK,UAAU,KAAK;IACpB,MAAM,QAAQ,MAAM;IACpB,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC;IACjC,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,GAAI,sBAAM,IAAI,IAAI,CAAE;IACpD,IAAI,IAAI,MAAM,EAAE;IAChB,KAAK,WAAW,KAAK;IACrB,MAAM,UAAU;IAChB,KAAK,UAAU,OAAO,QAAQ,IAAI;IAGlC,KAAK,OAAO,KAAK;IACjB;GACF;GACA,KAAK,UAAU;IACb,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM,EAAE;IACpC,IAAI,CAAC,OAAO;IACZ,KAAK,UAAU,KAAK;IACpB,MAAM,YAAY,kBAAkB,MAAM,IAAI;IAC9C,KAAK,UAAU,OAAO,UAAU,MAAM,IAAI;IAC1C,KAAK,cAAc,OAAO,MAAM,IAAI;IACpC;GACF;GACA,KAAK,MAAM;IACT,IAAI,MAAM,MAAM,KAAA,KAAa,MAAM,MAAM,KAAK,KAAK;IACnD,MAAM,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC;IACnC,IAAI,CAAC,KAAK;IACV,KAAK,MAAM,MAAM,MAAM,KAAK,GAAG,GAAG;KAChC,MAAM,QAAQ,KAAK,KAAK,IAAI,EAAE;KAC9B,IAAI,CAAC,OAAO;KACZ,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;MACF,SAAS,UAAU,MAAM,IAAI,MAAM,CAAC;KACtC,SAAS,OAAO;MACd,oBAAoB,KAAK;KAC3B;IAEJ;IACA;GACF;GACA,KAAK;IACH,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GACtC,IAAI,MAAM,WAAW,QAAQ,KAAK,OAAO,KAAK;IAEhD;GACF,KAAK;IACH,KAAK,aAAa,KAAK,IAAI,GAAG,OAAO,MAAM,UAAU,KAAK,CAAC;IAC3D;GACF,KAAK,QACH;EACJ;CACF;CAEA,SAAiB,MAAc;EAC7B,KAAK,KAAK;EACV,KAAK,gBAAgB;EACrB,KAAK,MAAM;EACX,KAAK,cAAc;EACnB,KAAK,OAAO,MAAM;EAClB,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;GACzC,MAAM,QAAQ;GAEd,KAAK,WAAW,KAAK;GACrB,IAAI,CAAC,MAAM,WAAW,KAAK,UAAU,OAAO,UAAU,IAAI;EAC5D;EACA,IAAI,SAAS,UAAU,SAAS,KAAK,UAAU;EAC/C,IAAI,KAAK,QAAQ,OAAO,KAAK,CAAC,KAAK,mBAAmB,KAAK,kBAAkB;CAC/E;CAEA,oBAA4B;EAC1B,KAAK,eAAe;EACpB,IAAI;EACJ,IAAI,KAAK,eAAe,MAAM;GAC5B,QAAQ,KAAK;GACb,KAAK,aAAa;EACpB,OAAO,IAAI,KAAK,SAAS;GAEvB,KAAK,UAAU;GACf,QAAQ,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;EACxC,OACE,QAAQ,aAAa,KAAK,SAAS,KAAK,OAAO,CAAC;EAElD,KAAK;EACL,KAAK,iBAAiB,iBAAiB;GACrC,KAAK,iBAAiB;GACtB,KAAK,QAAQ;EACf,GAAG,KAAK;CACV;CAEA,iBAAyB;EACvB,IAAI,KAAK,gBAAgB,aAAa,KAAK,cAAc;EACzD,KAAK,iBAAiB;CACxB;CAEA,SAAiB;EACf,QAAQ,KAAK,UAAU,UAAU,KAAK,OAAA,CAAQ;CAChD;CAEA,iBAAyB;EACvB,KAAK,cAAc;EACnB,KAAK,YAAY,kBAAkB,KAAK,KAAK,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,WAAW;EAC9E,KAAK,MAAM;CACb;CAEA,gBAAwB;EACtB,IAAI,KAAK,WAAW,cAAc,KAAK,SAAS;EAChD,IAAI,KAAK,eAAe,aAAa,KAAK,aAAa;EACvD,KAAK,YAAY;EACjB,KAAK,gBAAgB;CACvB;;CAGA,QAAgB;EACd,IAAI,KAAK,eAAe,aAAa,KAAK,aAAa;EACvD,MAAM,KAAK,KAAK;EAChB,KAAK,gBAAgB,iBAAiB;GACpC,IAAI,KAAK,OAAO,MAAM,CAAC,IAAI;GAE3B,IAAI;IACF,GAAG,MAAM;GACX,QAAQ,CAAC;GACT,KAAK,SAAS,IAAI;EACpB,GAAG,KAAK,cAAc,CAAC;CACzB;CAEA,UAAkB,OAAc,QAAuB,MAAyB;EAC9E,IAAI,MAAM,WAAW,UAAU,MAAM,SAAS,MAAM;EACpD,MAAM,SAAS;EACf,MAAM,OAAO;EACb,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;GACF,SAAS,WAAW,QAAQ,IAAI;EAClC,SAAS,OAAO;GACd,oBAAoB,KAAK;EAC3B;CAEJ;;CAGA,OAAe,OAAc;EAC3B,IAAI,MAAM,aAAa;EACvB,MAAM,MAAM,KAAK,IAAI;EACrB,MAAM,OAAO,MAAM,eAAe,qBAAqB;EACvD,MAAM,aAAa;GACjB,MAAM,cAAc;GACpB,MAAM,eAAe,KAAK,IAAI;GAC9B,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;IACF,SAAS,WAAW;GACtB,SAAS,OAAO;IACd,oBAAoB,KAAK;GAC3B;EAEJ;EACA,IAAI,MAAM,iBAAiB,KAAK,QAAQ,GAAG,KAAK;OAC3C,MAAM,cAAc,WAAW,MAAM,IAAI;CAChD;;;;;;;;CASA,cAAsB,OAAc,MAAkB;EACpD,IAAI,SAAS,kBAAkB,SAAS,WAAW,SAAS,SAAS;EACrE,IAAI,SAAS,WAAW,MAAM,WAAA,GAA8B;EAC5D,KAAK,WAAW,KAAK;EAErB,MAAM,QAAQ,KAAK,IADL,SAAS,iBAAiB,wBAAwB,gBAClC,aAAa,MAAM,SAAS,KAAK,OAAO,CAAC,CAAC;EACxE,MAAM;EACN,MAAM,aAAa,iBAAiB;GAClC,MAAM,aAAa;GACnB,IAAI,KAAK,QAAQ,IAAI,MAAM,GAAG,MAAM,SAAS,MAAM,WAAW,UAAU;GACxE,IAAI,KAAK,OAAO,GAAG,KAAK,QAAQ,KAAK;EACvC,GAAG,KAAK;CACV;CAEA,WAAmB,OAAc;EAC/B,IAAI,MAAM,YAAY,aAAa,MAAM,UAAU;EACnD,MAAM,aAAa;CACrB;CAEA,UAAkB,OAAc;EAC9B,IAAI,CAAC,MAAM,OAAO;EAClB,MAAM,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK;EACvC,KAAK,OAAO,MAAM,EAAE;EACpB,IAAI,OAAO,IAAI,SAAS,GAAG,KAAK,OAAO,OAAO,MAAM,KAAK;EACzD,MAAM,QAAQ;CAChB;CAEA,oBAA4B;EAC1B,KAAK,gBAAgB;EACrB,KAAK,YAAY,iBAAiB;GAChC,KAAK,YAAY;GACjB,IAAI,KAAK,QAAQ,OAAO,GAAG;GAC3B,KAAK,eAAe;GACpB,KAAK,MAAM;EACb,GAAG,aAAa;CAClB;CAEA,kBAA0B;EACxB,IAAI,KAAK,WAAW,aAAa,KAAK,SAAS;EAC/C,KAAK,YAAY;CACnB;;CAGA,QAAgB;EACd,MAAM,KAAK,KAAK;EAChB,IAAI,CAAC,IAAI;EACT,KAAK,KAAK;EACV,IAAI;GACF,GAAG,MAAM,UAAU,MAAM;EAC3B,QAAQ,CAAC;EACT,KAAK,SAAS,UAAU,MAAM;CAChC;CAEA,SAAiB;EACf,IAAI,KAAK,aAAa,OAAO,WAAW,aAAa;EACrD,KAAK,YAAY;EACjB,OAAO,iBAAiB,UAAU,KAAK,QAAQ;EAC/C,IAAI,OAAO,aAAa,aACtB,SAAS,iBAAiB,oBAAoB,KAAK,YAAY;CAEnE;CAEA,iBAAyB;EACvB,IAAI,KAAK,QAAQ,SAAS,KAAK,KAAK,MAAM,KAAK,mBAAmB;EAClE,KAAK,UAAU;EACf,KAAK,QAAQ;CACf;CAEA,qBAA6B;EAC3B,IAAI,SAAS,oBAAoB,UAAU;GACzC,IAAI,KAAK,aAAa;GACtB,KAAK,cAAc,iBAAiB;IAClC,KAAK,cAAc;IACnB,IAAI,SAAS,oBAAoB,UAAU;IAC3C,KAAK,oBAAoB;IACzB,KAAK,eAAe;IACpB,KAAK,MAAM;GACb,GAAG,KAAK,QAAQ,kBAAkB;GAClC;EACF;EACA,IAAI,KAAK,aAAa,aAAa,KAAK,WAAW;EACnD,KAAK,cAAc;EACnB,IAAI,KAAK,mBAAmB;GAC1B,KAAK,oBAAoB;GACzB,KAAK,UAAU;GAEf,KAAK,QAAQ;EACf;CACF;;;;;;;CAQA,YAAY;EACV,KAAK,MAAM;EACX,KAAK,eAAe;EACpB,KAAK,UAAU;EACf,IAAI,KAAK,QAAQ,OAAO,KAAK,CAAC,KAAK,mBAAmB,KAAK,QAAQ;CACrE;;CAGA,UAAU;EACR,KAAK,eAAe;EACpB,KAAK,gBAAgB;EACrB,IAAI,KAAK,aAAa,aAAa,KAAK,WAAW;EACnD,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;GACzC,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;GACrD,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;GACrD,KAAK,WAAW,KAAK;EACvB;EACA,KAAK,QAAQ,MAAM;EACnB,KAAK,KAAK,MAAM;EAChB,KAAK,MAAM;EACX,IAAI,KAAK,aAAa,OAAO,WAAW,aAAa;GACnD,OAAO,oBAAoB,UAAU,KAAK,QAAQ;GAClD,UAAU,oBAAoB,oBAAoB,KAAK,YAAY;GACnE,KAAK,YAAY;EACnB;CACF;AACF;;AAGA,SAAgB,aAAa,SAAiB,QAAwB;CACpE,MAAM,MAAM,KAAK,IAAI,gBAAgB,iBAAiB,KAAK,KAAK,IAAI,SAAS,EAAE,CAAC;CAChF,OAAO,KAAK,IAAI,gBAAgB,KAAK,MAAM,SAAS,GAAG,CAAC;AAC1D;AAEA,SAAS,aAAa,SAAqD;CACzE,OAAO;EACL,MAAM,QAAQ,QAAA;EACd,oBAAoB,QAAQ,sBAAsB;CACpD;AACF;AAEA,SAAS,oBAAoB,OAAgB;CAC3C,iBAAiB;EACf,MAAM;CACR,CAAC;AACH;;;;;AAMA,SAAgB,YAA4B;CAC1C,OAAQ,SAAS,WAAW,IAAI,eAAe,SAAS,OAAO;AACjE"}
+{"version":3,"file":"RealtimeClient-b6NvkUAQ.js","names":[],"sources":["../../services/broadcast/protocol.ts","../../client/realtime/RealtimeClient.ts"],"sourcesContent":["/**\n * The `gemi.v1` WebSocket protocol, shared by the server transport\n * (`SocketHub`) and the browser client (`gemi/client`'s connection manager).\n * Types and constants only: this module is imported by the browser bundle, so\n * it must never import a server module.\n *\n * Every frame is a JSON text frame. Binary frames are refused.\n *\n * From the client:\n *\n * - `{op:\"sub\", id, ch, p?}`: subscribe `id` (chosen by the client, unique per\n *   socket) to the channel pattern `ch` with params `p`. The server builds\n *   the topic and authorizes it.\n * - `{op:\"unsub\", id}`\n * - `{op:\"ping\"}`: answered with `pong`. The client sends one every\n *   `heartbeatMs` and reconnects when it hears nothing for twice that.\n *\n * From the server:\n *\n * - `{op:\"hello\", socketId, tag, heartbeatMs}`: the first frame. `socketId`\n *   goes in the `X-Gemi-Socket` header of the client's own requests (for\n *   `Broadcast.toOthers`); it is never shown to anyone else. `tag` is what\n *   an event frame's `x` carries when it skips this socket.\n * - `{op:\"subscribed\", id, t}`: `id` joined topic `t`. Sent only once this\n *   process receives the topic's events, so the resync the client runs on it\n *   cannot miss one.\n * - `{op:\"denied\", id, code}`: `id` was refused, or later revoked.\n * - `{op:\"ev\", t, ev, d?, x?}`: an event on topic `t`. Dropped by the socket\n *   whose `tag` is `x`.\n * - `{op:\"gap\"}`: events may have been lost for this socket; resync all.\n * - `{op:\"pong\"}`\n * - `{op:\"bye\", code, retryAfter}`: the server is going away (a restart).\n *   Reconnect after `retryAfter` ms.\n */\n\n/** The WebSocket subprotocol. */\nexport const BROADCAST_PROTOCOL = \"gemi.v1\";\n\n/** The default endpoint, `defineBroadcastConfig({ path })`. */\nexport const DEFAULT_SOCKET_PATH = \"/__gemi/socket\";\n\nexport { SOCKET_ID_HEADER } from \"./socketHeader\";\n\n/** What a subscription id may look like. */\nexport const SUBSCRIPTION_ID = /^[A-Za-z0-9_-]{1,32}$/;\n\n/**\n * Close codes the server uses. 1012 and 1013 are the standard \"restart\" and\n * \"try again later\"; the 4xxx ones are gemi's own.\n */\nexport const CloseCode = {\n  /** The client went away (tab closed, socket released). */\n  Normal: 1000,\n  /** A frame that was not JSON text, or not a known op. */\n  UnsupportedData: 1003,\n  /** Too many frames, or a frame over the size limit. */\n  PolicyViolation: 1008,\n  /** The server is restarting; `bye` said when to come back. */\n  Restart: 1012,\n  /** The socket fell too far behind; reconnect and resync. */\n  TryAgainLater: 1013,\n  /** The socket's user was signed out or its access revoked. */\n  Revoked: 4001,\n} as const;\n\n/** Why a subscription was refused. */\nexport type DeniedCode =\n  /** No channel with that pattern. Permanent. */\n  | \"unknown_channel\"\n  /** Missing, extra or malformed params. Permanent. */\n  | \"invalid_params\"\n  /** The channel's authorization said no. */\n  | \"denied\"\n  /** Authorization failed (a session store outage, a bug). Retryable. */\n  | \"error\"\n  /** The socket has `maxChannelsPerSocket` subscriptions already. */\n  | \"limit\"\n  /** Too many `sub`/`unsub` frames; retry later. */\n  | \"rate_limited\"\n  /** The subscription was revoked by `Broadcast.revoke`. */\n  | \"revoked\"\n  /** The frame was malformed, or the id is already in use. */\n  | \"invalid\";\n\nexport type ClientFrame =\n  | { op: \"sub\"; id: string; ch: string; p?: Record<string, string | number> }\n  | { op: \"unsub\"; id: string }\n  | { op: \"ping\" };\n\nexport type ServerFrame =\n  | { op: \"hello\"; socketId: string; tag: string; heartbeatMs: number }\n  | { op: \"subscribed\"; id: string; t: string }\n  | { op: \"denied\"; id: string; code: DeniedCode }\n  | { op: \"ev\"; t: string; ev: string; d?: unknown; x?: string }\n  | { op: \"gap\" }\n  | { op: \"pong\" }\n  | { op: \"bye\"; code: number; retryAfter: number };\n\n/**\n * Whether a refusal is final for this socket's session: resubscribing will\n * get the same answer, so the client does not retry it on its own.\n */\nexport function isPermanentDenial(code: DeniedCode): boolean {\n  return code === \"unknown_channel\" || code === \"invalid_params\" || code === \"invalid\";\n}\n","import {\n  BROADCAST_PROTOCOL,\n  CloseCode,\n  DEFAULT_SOCKET_PATH,\n  isPermanentDenial,\n  type ClientFrame,\n  type DeniedCode,\n  type ServerFrame,\n} from \"../../services/broadcast/protocol\";\nimport { channelKey } from \"./channelKey\";\nimport { realtime } from \"./loader\";\n\n/**\n * Where a channel subscription stands, as the hooks report it.\n *\n * - `idle`: the hook is disabled (`enabled: false`).\n * - `connecting`: the socket is opening, or the `sub` awaits its answer.\n * - `open`: subscribed; events arrive.\n * - `denied`: the server refused (or revoked) it; `code` says why.\n * - `closed`: no socket, on the server, before the first effect, or while\n *   waiting to reconnect.\n */\nexport type ChannelStatus = \"idle\" | \"connecting\" | \"open\" | \"denied\" | \"closed\";\n\nexport type ChannelParamValues = Record<string, string | number>;\n\n/** What a hook hands the socket for one channel. */\nexport interface ChannelListener {\n  onEvent?(event: string, data: unknown): void;\n  /** Events may have been missed: refetch what the channel describes. */\n  onResync?(): void;\n  onStatus?(status: ChannelStatus, code: DeniedCode | null): void;\n}\n\n/**\n * What the hooks subscribe through: the tab's `RealtimeClient`, or a\n * `FakeSocket` in tests. Returns the release function.\n */\nexport interface RealtimeSocket {\n  subscribe(pattern: string, params: ChannelParamValues, listener: ChannelListener): () => void;\n}\n\nexport interface RealtimeOptions {\n  /** The socket endpoint, `defineBroadcastConfig({ path })`. Default `/__gemi/socket`. */\n  path?: string;\n  /**\n   * How long a hidden tab keeps its socket, in ms, before disconnecting. On\n   * becoming visible again it reconnects and resyncs. Default 60 000.\n   */\n  hiddenDisconnectMs?: number;\n}\n\ninterface ClientInternals {\n  /** Test seam: the WebSocket class. */\n  WebSocket?: typeof WebSocket;\n  /** Test seam: the full URL, instead of the page's origin + `path`. */\n  url?: string;\n  random?: () => number;\n}\n\n/** The minimum gap between two resyncs of one subscription. */\nexport const RESYNC_COALESCE_MS = 2_000;\n/** How long the socket stays open after its last subscription goes. */\nexport const IDLE_CLOSE_MS = 5_000;\n/**\n * How long a subscription outlives its last listener. A hook that remounts\n * within it (StrictMode's double mount, a route change back, a list that\n * re-renders its rows) picks the same subscription up again: no `unsub`, no\n * new `sub`, nothing counted against the server's rate limit.\n */\nexport const RELEASE_LINGER_MS = 1_500;\n/** The least wait before resending a `sub` denied with `rate_limited`. */\nconst RATE_LIMITED_RETRY_MS = 5_000;\n/**\n * How often a `sub` denied with `limit` is resent on one socket. The socket\n * holds as many channels as the server allows, so only a released one makes\n * room: worth a few tries with backoff, not a retry for as long as the socket\n * lives. Past it the subscription waits for the next connection.\n */\nexport const MAX_LIMIT_RETRIES = 5;\nconst MIN_BACKOFF_MS = 1_000;\nconst MAX_BACKOFF_MS = 30_000;\nconst DEFAULT_HEARTBEAT_MS = 25_000;\nconst DEFAULT_HIDDEN_DISCONNECT_MS = 60_000;\n\ninterface Entry {\n  key: string;\n  id: string;\n  pattern: string;\n  params: ChannelParamValues;\n  listeners: Set<ChannelListener>;\n  status: ChannelStatus;\n  code: DeniedCode | null;\n  /** Refused for good: not resent on a reconnect. */\n  permanent: boolean;\n  topic: string | null;\n  lastResyncAt: number;\n  resyncTimer: ReturnType<typeof setTimeout> | null;\n  /** Set while the entry outlives its last listener; see `RELEASE_LINGER_MS`. */\n  lingerTimer: ReturnType<typeof setTimeout> | null;\n  /** A transient denial's resend, on the same socket. */\n  retryTimer: ReturnType<typeof setTimeout> | null;\n  retries: number;\n}\n\n/**\n * The tab's one WebSocket to the app (`gemi.v1`), multiplexing every channel\n * the mounted hooks subscribe to.\n *\n * Opened by the first subscription and closed a few seconds after the last\n * one goes. Reconnects with full-jitter backoff (1 to 30 s), or after the\n * server's `bye.retryAfter`, at once on `online`; resubscribes everything\n * then. A tab hidden for `hiddenDisconnectMs` disconnects, and reconnects\n * when shown. Every `subscribed` ack and every `gap` resyncs the\n * subscription (coalesced to one per 2 s), because events are volatile: a\n * client that may have missed one refetches over HTTP.\n *\n * Loaded on first use (#891): import this module as a type only, and reach\n * the tab's instance through `./loader`, or it lands in every route's entry\n * chunk.\n */\nexport class RealtimeClient implements RealtimeSocket {\n  private options: Required<RealtimeOptions>;\n  private readonly internals: ClientInternals;\n  private ws: WebSocket | null = null;\n  private entries = new Map<string, Entry>();\n  private byId = new Map<string, Entry>();\n  private topics = new Map<string, Set<string>>();\n  private nextId = 1;\n  private attempt = 0;\n  private tag: string | null = null;\n  private socketIdValue: string | null = null;\n  private heartbeatMs = DEFAULT_HEARTBEAT_MS;\n  private reconnectTimer: ReturnType<typeof setTimeout> | null = null;\n  private idleTimer: ReturnType<typeof setTimeout> | null = null;\n  private hiddenTimer: ReturnType<typeof setTimeout> | null = null;\n  private pingTimer: ReturnType<typeof setInterval> | null = null;\n  private livenessTimer: ReturnType<typeof setTimeout> | null = null;\n  private retryAfter: number | null = null;\n  private revoked = false;\n  private pausedWhileHidden = false;\n  private listening = false;\n\n  constructor(options: RealtimeOptions = {}, internals: ClientInternals = {}) {\n    this.options = withDefaults(options);\n    this.internals = internals;\n  }\n\n  configure(options: RealtimeOptions) {\n    this.options = withDefaults({ ...this.options, ...options });\n  }\n\n  /** The id to send as `X-Gemi-Socket`, while the socket is open. */\n  get socketId(): string | null {\n    return this.socketIdValue;\n  }\n\n  subscribe(pattern: string, params: ChannelParamValues, listener: ChannelListener): () => void {\n    const key = channelKey(pattern, params);\n    let entry = this.entries.get(key);\n    if (!entry) {\n      entry = {\n        key,\n        id: String(this.nextId++),\n        pattern,\n        params: { ...params },\n        listeners: new Set(),\n        status: \"closed\",\n        code: null,\n        permanent: false,\n        topic: null,\n        lastResyncAt: 0,\n        resyncTimer: null,\n        lingerTimer: null,\n        retryTimer: null,\n        retries: 0,\n      };\n      this.entries.set(key, entry);\n      this.byId.set(entry.id, entry);\n      if (this.isOpen()) {\n        this.sendSub(entry);\n      }\n    }\n    if (entry.lingerTimer) {\n      clearTimeout(entry.lingerTimer);\n      entry.lingerTimer = null;\n    }\n    entry.listeners.add(listener);\n    listener.onStatus?.(entry.status, entry.code);\n    this.cancelIdleClose();\n    this.listen();\n    if (!this.ws && !this.reconnectTimer && !this.pausedWhileHidden) {\n      this.connect();\n    }\n\n    let released = false;\n    return () => {\n      if (released) return;\n      released = true;\n      this.release(entry!, listener);\n    };\n  }\n\n  private release(entry: Entry, listener: ChannelListener) {\n    entry.listeners.delete(listener);\n    if (entry.listeners.size > 0 || entry.lingerTimer) return;\n    entry.lingerTimer = setTimeout(() => {\n      entry.lingerTimer = null;\n      if (entry.listeners.size === 0) this.drop(entry);\n    }, RELEASE_LINGER_MS);\n  }\n\n  private drop(entry: Entry) {\n    if (entry.resyncTimer) clearTimeout(entry.resyncTimer);\n    this.clearRetry(entry);\n    this.entries.delete(entry.key);\n    this.byId.delete(entry.id);\n    this.dropTopic(entry);\n    if (this.isOpen() && (entry.status === \"open\" || entry.status === \"connecting\")) {\n      this.send({ op: \"unsub\", id: entry.id });\n    }\n    if (this.entries.size === 0) this.scheduleIdleClose();\n  }\n\n  private isOpen() {\n    return this.ws !== null && this.ws.readyState === 1;\n  }\n\n  private connect() {\n    if (typeof window === \"undefined\") return;\n    if (this.entries.size === 0) return;\n    const Impl = this.internals.WebSocket ?? globalThis.WebSocket;\n    if (!Impl) return;\n    this.clearReconnect();\n    let ws: WebSocket;\n    try {\n    ws = new Impl(this.url(), [BROADCAST_PROTOCOL]);\n    } catch {\n      this.scheduleReconnect();\n      return;\n    }\n    this.ws = ws;\n    for (const entry of this.entries.values()) {\n      if (!entry.permanent) this.setStatus(entry, \"connecting\", null);\n    }\n    ws.onopen = () => {\n      if (this.ws !== ws) return;\n      this.touch();\n      for (const entry of this.entries.values()) {\n        if (entry.permanent) continue;\n        // A new socket starts every transient denial's count over.\n        entry.retries = 0;\n        this.sendSub(entry);\n      }\n    };\n    ws.onmessage = (event: MessageEvent) => {\n      if (this.ws !== ws) return;\n      this.touch();\n      let frame: ServerFrame;\n      try {\n        frame = JSON.parse(String(event.data));\n      } catch {\n        return;\n      }\n      this.handle(frame);\n    };\n    ws.onclose = (event: CloseEvent) => {\n      if (this.ws !== ws) return;\n      this.onClosed(event.code);\n    };\n    ws.onerror = () => {\n      // A `close` follows.\n    };\n  }\n\n  private url(): string {\n    if (this.internals.url) return this.internals.url;\n    const { protocol, host } = window.location;\n    return `${protocol === \"https:\" ? \"wss:\" : \"ws:\"}//${host}${this.options.path}`;\n  }\n\n  private sendSub(entry: Entry) {\n    this.setStatus(entry, \"connecting\", null);\n    const frame: ClientFrame = { op: \"sub\", id: entry.id, ch: entry.pattern };\n    if (Object.keys(entry.params).length > 0) frame.p = entry.params;\n    this.send(frame);\n  }\n\n  private send(frame: ClientFrame) {\n    if (!this.isOpen()) return;\n    try {\n      this.ws!.send(JSON.stringify(frame));\n    } catch {\n      // The close handler takes over.\n    }\n  }\n\n  private handle(frame: ServerFrame) {\n    switch (frame.op) {\n      case \"hello\":\n        this.socketIdValue = frame.socketId;\n        this.tag = frame.tag;\n        this.attempt = 0;\n        this.revoked = false;\n        if (frame.heartbeatMs > 0) {\n          this.heartbeatMs = frame.heartbeatMs;\n        }\n        this.startHeartbeat();\n        return;\n      case \"subscribed\": {\n        const entry = this.byId.get(frame.id);\n        if (!entry) return;\n        this.dropTopic(entry);\n        entry.topic = frame.t;\n        let ids = this.topics.get(frame.t);\n        if (!ids) this.topics.set(frame.t, (ids = new Set()));\n        ids.add(entry.id);\n        this.clearRetry(entry);\n        entry.retries = 0;\n        this.setStatus(entry, \"open\", null);\n        // The window between the view rendering and this ack, or the time\n        // the socket was down, may have carried events this tab missed.\n        this.resync(entry);\n        return;\n      }\n      case \"denied\": {\n        const entry = this.byId.get(frame.id);\n        if (!entry) return;\n        this.dropTopic(entry);\n        entry.permanent = isPermanentDenial(frame.code);\n        this.setStatus(entry, \"denied\", frame.code);\n        this.scheduleRetry(entry, frame.code);\n        return;\n      }\n      case \"ev\": {\n        if (frame.x !== undefined && frame.x === this.tag) return;\n        const ids = this.topics.get(frame.t);\n        if (!ids) return;\n        for (const id of Array.from(ids)) {\n          const entry = this.byId.get(id);\n          if (!entry) continue;\n          for (const listener of Array.from(entry.listeners)) {\n            try {\n              listener.onEvent?.(frame.ev, frame.d);\n            } catch (error) {\n              reportListenerError(error);\n            }\n          }\n        }\n        return;\n      }\n      case \"gap\":\n        for (const entry of this.entries.values()) {\n          if (entry.status === \"open\") this.resync(entry);\n        }\n        return;\n      case \"bye\":\n        this.retryAfter = Math.max(0, Number(frame.retryAfter) || 0);\n        return;\n      case \"pong\":\n        return;\n    }\n  }\n\n  private onClosed(code: number) {\n    this.ws = null;\n    this.socketIdValue = null;\n    this.tag = null;\n    this.stopHeartbeat();\n    this.topics.clear();\n    for (const entry of this.entries.values()) {\n      entry.topic = null;\n      // The reconnect resends it.\n      this.clearRetry(entry);\n      if (!entry.permanent) this.setStatus(entry, \"closed\", null);\n    }\n    if (code === CloseCode.Revoked) this.revoked = true;\n    if (this.entries.size > 0 && !this.pausedWhileHidden) this.scheduleReconnect();\n  }\n\n  private scheduleReconnect() {\n    this.clearReconnect();\n    let delay: number;\n    if (this.retryAfter !== null) {\n      delay = this.retryAfter;\n      this.retryAfter = null;\n    } else if (this.revoked) {\n      // Signed out or access revoked: come back promptly, as whoever we are now.\n      this.revoked = false;\n      delay = Math.floor(this.random() * 500);\n    } else {\n      delay = backoffDelay(this.attempt, this.random());\n    }\n    this.attempt++;\n    this.reconnectTimer = setTimeout(() => {\n      this.reconnectTimer = null;\n      this.connect();\n    }, delay);\n  }\n\n  private clearReconnect() {\n    if (this.reconnectTimer) clearTimeout(this.reconnectTimer);\n    this.reconnectTimer = null;\n  }\n\n  private random() {\n    return (this.internals.random ?? Math.random)();\n  }\n\n  private startHeartbeat() {\n    this.stopHeartbeat();\n    this.pingTimer = setInterval(() => this.send({ op: \"ping\" }), this.heartbeatMs);\n    this.touch();\n  }\n\n  private stopHeartbeat() {\n    if (this.pingTimer) clearInterval(this.pingTimer);\n    if (this.livenessTimer) clearTimeout(this.livenessTimer);\n    this.pingTimer = null;\n    this.livenessTimer = null;\n  }\n\n  /** Anything from the server proves the socket alive. */\n  private touch() {\n    if (this.livenessTimer) clearTimeout(this.livenessTimer);\n    const ws = this.ws;\n    this.livenessTimer = setTimeout(() => {\n      if (this.ws !== ws || !ws) return;\n      // Silent for two heartbeats: a dead connection a proxy never closed.\n      try {\n        ws.close();\n      } catch {}\n      this.onClosed(1006);\n    }, this.heartbeatMs * 2);\n  }\n\n  private setStatus(entry: Entry, status: ChannelStatus, code: DeniedCode | null) {\n    if (entry.status === status && entry.code === code) return;\n    entry.status = status;\n    entry.code = code;\n    for (const listener of Array.from(entry.listeners)) {\n      try {\n        listener.onStatus?.(status, code);\n      } catch (error) {\n        reportListenerError(error);\n      }\n    }\n  }\n\n  /** At most one resync per subscription per 2 s; a later one is deferred, not dropped. */\n  private resync(entry: Entry) {\n    if (entry.resyncTimer) return;\n    const now = Date.now();\n    const wait = entry.lastResyncAt + RESYNC_COALESCE_MS - now;\n    const fire = () => {\n      entry.resyncTimer = null;\n      entry.lastResyncAt = Date.now();\n      for (const listener of Array.from(entry.listeners)) {\n        try {\n          listener.onResync?.();\n        } catch (error) {\n          reportListenerError(error);\n        }\n      }\n    };\n    if (entry.lastResyncAt === 0 || wait <= 0) fire();\n    else entry.resyncTimer = setTimeout(fire, wait);\n  }\n\n  /**\n   * A transient denial (`rate_limited`, `error`, `limit`) is retried on the\n   * same socket, with backoff: a healthy socket may never reconnect. `denied`\n   * and `revoked` are the channel's answer for this session, so they wait for\n   * the next connection (a sign-in reconnects), and a permanent one is never\n   * resent. `limit` gives up after `MAX_LIMIT_RETRIES` on one socket.\n   */\n  private scheduleRetry(entry: Entry, code: DeniedCode) {\n    if (code !== \"rate_limited\" && code !== \"error\" && code !== \"limit\") return;\n    if (code === \"limit\" && entry.retries >= MAX_LIMIT_RETRIES) return;\n    this.clearRetry(entry);\n    const floor = code === \"rate_limited\" ? RATE_LIMITED_RETRY_MS : MIN_BACKOFF_MS;\n    const delay = Math.max(floor, backoffDelay(entry.retries, this.random()));\n    entry.retries++;\n    entry.retryTimer = setTimeout(() => {\n      entry.retryTimer = null;\n      if (this.entries.get(entry.key) !== entry || entry.status !== \"denied\") return;\n      if (this.isOpen()) this.sendSub(entry);\n    }, delay);\n  }\n\n  private clearRetry(entry: Entry) {\n    if (entry.retryTimer) clearTimeout(entry.retryTimer);\n    entry.retryTimer = null;\n  }\n\n  private dropTopic(entry: Entry) {\n    if (!entry.topic) return;\n    const ids = this.topics.get(entry.topic);\n    ids?.delete(entry.id);\n    if (ids && ids.size === 0) this.topics.delete(entry.topic);\n    entry.topic = null;\n  }\n\n  private scheduleIdleClose() {\n    this.cancelIdleClose();\n    this.idleTimer = setTimeout(() => {\n      this.idleTimer = null;\n      if (this.entries.size > 0) return;\n      this.clearReconnect();\n      this.close();\n    }, IDLE_CLOSE_MS);\n  }\n\n  private cancelIdleClose() {\n    if (this.idleTimer) clearTimeout(this.idleTimer);\n    this.idleTimer = null;\n  }\n\n  /** Closes the socket without reconnecting. */\n  private close() {\n    const ws = this.ws;\n    if (!ws) return;\n    this.ws = null;\n    try {\n      ws.close(CloseCode.Normal);\n    } catch {}\n    this.onClosed(CloseCode.Normal);\n  }\n\n  private listen() {\n    if (this.listening || typeof window === \"undefined\") return;\n    this.listening = true;\n    window.addEventListener(\"online\", this.onOnline);\n    if (typeof document !== \"undefined\") {\n      document.addEventListener(\"visibilitychange\", this.onVisibility);\n    }\n  }\n\n  private onOnline = () => {\n    if (this.entries.size === 0 || this.ws || this.pausedWhileHidden) return;\n    this.attempt = 0;\n    this.connect();\n  };\n\n  private onVisibility = () => {\n    if (document.visibilityState === \"hidden\") {\n      if (this.hiddenTimer) return;\n      this.hiddenTimer = setTimeout(() => {\n        this.hiddenTimer = null;\n        if (document.visibilityState !== \"hidden\") return;\n        this.pausedWhileHidden = true;\n        this.clearReconnect();\n        this.close();\n      }, this.options.hiddenDisconnectMs);\n      return;\n    }\n    if (this.hiddenTimer) clearTimeout(this.hiddenTimer);\n    this.hiddenTimer = null;\n    if (this.pausedWhileHidden) {\n      this.pausedWhileHidden = false;\n      this.attempt = 0;\n      // The `subscribed` acks resync every subscription.\n      this.connect();\n    }\n  };\n\n  /**\n   * Drops the socket and opens a new one at once, when anything is\n   * subscribed. A socket keeps the session it was opened with (the upgrade's\n   * cookies), so signing in or out in this tab reconnects it: every channel\n   * is then authorized as the new session, and the acks resync.\n   */\n  reconnect() {\n    this.close();\n    this.clearReconnect();\n    this.attempt = 0;\n    if (this.entries.size > 0 && !this.pausedWhileHidden) this.connect();\n  }\n\n  /** For tests: drops the socket, timers and listeners. */\n  dispose() {\n    this.clearReconnect();\n    this.cancelIdleClose();\n    if (this.hiddenTimer) clearTimeout(this.hiddenTimer);\n    for (const entry of this.entries.values()) {\n      if (entry.resyncTimer) clearTimeout(entry.resyncTimer);\n      if (entry.lingerTimer) clearTimeout(entry.lingerTimer);\n      this.clearRetry(entry);\n    }\n    this.entries.clear();\n    this.byId.clear();\n    this.close();\n    if (this.listening && typeof window !== \"undefined\") {\n      window.removeEventListener(\"online\", this.onOnline);\n      document?.removeEventListener(\"visibilitychange\", this.onVisibility);\n      this.listening = false;\n    }\n  }\n}\n\n/** Full jitter, 1 to 30 s: `max(1 s, random × min(30 s, 1 s × 2^attempt))`. */\nexport function backoffDelay(attempt: number, random: number): number {\n  const cap = Math.min(MAX_BACKOFF_MS, MIN_BACKOFF_MS * 2 ** Math.min(attempt, 10));\n  return Math.max(MIN_BACKOFF_MS, Math.floor(random * cap));\n}\n\nfunction withDefaults(options: RealtimeOptions): Required<RealtimeOptions> {\n  return {\n    path: options.path ?? DEFAULT_SOCKET_PATH,\n    hiddenDisconnectMs: options.hiddenDisconnectMs ?? DEFAULT_HIDDEN_DISCONNECT_MS,\n  };\n}\n\nfunction reportListenerError(error: unknown) {\n  setTimeout(() => {\n    throw error;\n  });\n}\n\n/**\n * The tab's client, created on first use with the options `configureRealtime`\n * set. `loadRealtimeClient` in `./loader` calls it once this module is loaded.\n */\nexport function tabClient(): RealtimeClient {\n  return (realtime.client ??= new RealtimeClient(realtime.options));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,IAAa,qBAAqB;;;;;AAclC,IAAa,YAAY;;CAEvB,QAAQ;;CAER,iBAAiB;;CAEjB,iBAAiB;;CAEjB,SAAS;;CAET,eAAe;;CAEf,SAAS;AACX;;;;;AAuCA,SAAgB,kBAAkB,MAA2B;CAC3D,OAAO,SAAS,qBAAqB,SAAS,oBAAoB,SAAS;AAC7E;;;;AC3CA,IAAa,qBAAqB;;AAElC,IAAa,gBAAgB;;;;;;;AAO7B,IAAa,oBAAoB;;AAEjC,IAAM,wBAAwB;;;;;;;AAO9B,IAAa,oBAAoB;AACjC,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AACvB,IAAM,uBAAuB;AAC7B,IAAM,+BAA+B;;;;;;;;;;;;;;;;;AAsCrC,IAAa,iBAAb,MAAsD;CACpD;CACA;CACA,KAA+B;CAC/B,0BAAkB,IAAI,IAAmB;CACzC,uBAAe,IAAI,IAAmB;CACtC,yBAAiB,IAAI,IAAyB;CAC9C,SAAiB;CACjB,UAAkB;CAClB,MAA6B;CAC7B,gBAAuC;CACvC,cAAsB;CACtB,iBAA+D;CAC/D,YAA0D;CAC1D,cAA4D;CAC5D,YAA2D;CAC3D,gBAA8D;CAC9D,aAAoC;CACpC,UAAkB;CAClB,oBAA4B;CAC5B,YAAoB;CAEpB,YAAY,UAA2B,CAAC,GAAG,YAA6B,CAAC,GAAG;EAC1E,KAAK,UAAU,aAAa,OAAO;EACnC,KAAK,YAAY;CACnB;CAEA,UAAU,SAA0B;EAClC,KAAK,UAAU,aAAa;GAAE,GAAG,KAAK;GAAS,GAAG;EAAQ,CAAC;CAC7D;;CAGA,IAAI,WAA0B;EAC5B,OAAO,KAAK;CACd;CAEA,UAAU,SAAiB,QAA4B,UAAuC;EAC5F,MAAM,MAAM,WAAW,SAAS,MAAM;EACtC,IAAI,QAAQ,KAAK,QAAQ,IAAI,GAAG;EAChC,IAAI,CAAC,OAAO;GACV,QAAQ;IACN;IACA,IAAI,OAAO,KAAK,QAAQ;IACxB;IACA,QAAQ,EAAE,GAAG,OAAO;IACpB,2BAAW,IAAI,IAAI;IACnB,QAAQ;IACR,MAAM;IACN,WAAW;IACX,OAAO;IACP,cAAc;IACd,aAAa;IACb,aAAa;IACb,YAAY;IACZ,SAAS;GACX;GACA,KAAK,QAAQ,IAAI,KAAK,KAAK;GAC3B,KAAK,KAAK,IAAI,MAAM,IAAI,KAAK;GAC7B,IAAI,KAAK,OAAO,GACd,KAAK,QAAQ,KAAK;EAEtB;EACA,IAAI,MAAM,aAAa;GACrB,aAAa,MAAM,WAAW;GAC9B,MAAM,cAAc;EACtB;EACA,MAAM,UAAU,IAAI,QAAQ;EAC5B,SAAS,WAAW,MAAM,QAAQ,MAAM,IAAI;EAC5C,KAAK,gBAAgB;EACrB,KAAK,OAAO;EACZ,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,kBAAkB,CAAC,KAAK,mBAC5C,KAAK,QAAQ;EAGf,IAAI,WAAW;EACf,aAAa;GACX,IAAI,UAAU;GACd,WAAW;GACX,KAAK,QAAQ,OAAQ,QAAQ;EAC/B;CACF;CAEA,QAAgB,OAAc,UAA2B;EACvD,MAAM,UAAU,OAAO,QAAQ;EAC/B,IAAI,MAAM,UAAU,OAAO,KAAK,MAAM,aAAa;EACnD,MAAM,cAAc,iBAAiB;GACnC,MAAM,cAAc;GACpB,IAAI,MAAM,UAAU,SAAS,GAAG,KAAK,KAAK,KAAK;EACjD,GAAG,iBAAiB;CACtB;CAEA,KAAa,OAAc;EACzB,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;EACrD,KAAK,WAAW,KAAK;EACrB,KAAK,QAAQ,OAAO,MAAM,GAAG;EAC7B,KAAK,KAAK,OAAO,MAAM,EAAE;EACzB,KAAK,UAAU,KAAK;EACpB,IAAI,KAAK,OAAO,MAAM,MAAM,WAAW,UAAU,MAAM,WAAW,eAChE,KAAK,KAAK;GAAE,IAAI;GAAS,IAAI,MAAM;EAAG,CAAC;EAEzC,IAAI,KAAK,QAAQ,SAAS,GAAG,KAAK,kBAAkB;CACtD;CAEA,SAAiB;EACf,OAAO,KAAK,OAAO,QAAQ,KAAK,GAAG,eAAe;CACpD;CAEA,UAAkB;EAChB,IAAI,OAAO,WAAW,aAAa;EACnC,IAAI,KAAK,QAAQ,SAAS,GAAG;EAC7B,MAAM,OAAO,KAAK,UAAU,aAAa,WAAW;EACpD,IAAI,CAAC,MAAM;EACX,KAAK,eAAe;EACpB,IAAI;EACJ,IAAI;GACJ,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,kBAAkB,CAAC;EAC9C,QAAQ;GACN,KAAK,kBAAkB;GACvB;EACF;EACA,KAAK,KAAK;EACV,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GACtC,IAAI,CAAC,MAAM,WAAW,KAAK,UAAU,OAAO,cAAc,IAAI;EAEhE,GAAG,eAAe;GAChB,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,MAAM;GACX,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;IACzC,IAAI,MAAM,WAAW;IAErB,MAAM,UAAU;IAChB,KAAK,QAAQ,KAAK;GACpB;EACF;EACA,GAAG,aAAa,UAAwB;GACtC,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,MAAM;GACX,IAAI;GACJ,IAAI;IACF,QAAQ,KAAK,MAAM,OAAO,MAAM,IAAI,CAAC;GACvC,QAAQ;IACN;GACF;GACA,KAAK,OAAO,KAAK;EACnB;EACA,GAAG,WAAW,UAAsB;GAClC,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,SAAS,MAAM,IAAI;EAC1B;EACA,GAAG,gBAAgB,CAEnB;CACF;CAEA,MAAsB;EACpB,IAAI,KAAK,UAAU,KAAK,OAAO,KAAK,UAAU;EAC9C,MAAM,EAAE,UAAU,SAAS,OAAO;EAClC,OAAO,GAAG,aAAa,WAAW,SAAS,MAAM,IAAI,OAAO,KAAK,QAAQ;CAC3E;CAEA,QAAgB,OAAc;EAC5B,KAAK,UAAU,OAAO,cAAc,IAAI;EACxC,MAAM,QAAqB;GAAE,IAAI;GAAO,IAAI,MAAM;GAAI,IAAI,MAAM;EAAQ;EACxE,IAAI,OAAO,KAAK,MAAM,MAAM,CAAC,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM;EAC1D,KAAK,KAAK,KAAK;CACjB;CAEA,KAAa,OAAoB;EAC/B,IAAI,CAAC,KAAK,OAAO,GAAG;EACpB,IAAI;GACF,KAAK,GAAI,KAAK,KAAK,UAAU,KAAK,CAAC;EACrC,QAAQ,CAER;CACF;CAEA,OAAe,OAAoB;EACjC,QAAQ,MAAM,IAAd;GACE,KAAK;IACH,KAAK,gBAAgB,MAAM;IAC3B,KAAK,MAAM,MAAM;IACjB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,IAAI,MAAM,cAAc,GACtB,KAAK,cAAc,MAAM;IAE3B,KAAK,eAAe;IACpB;GACF,KAAK,cAAc;IACjB,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM,EAAE;IACpC,IAAI,CAAC,OAAO;IACZ,KAAK,UAAU,KAAK;IACpB,MAAM,QAAQ,MAAM;IACpB,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC;IACjC,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,GAAI,sBAAM,IAAI,IAAI,CAAE;IACpD,IAAI,IAAI,MAAM,EAAE;IAChB,KAAK,WAAW,KAAK;IACrB,MAAM,UAAU;IAChB,KAAK,UAAU,OAAO,QAAQ,IAAI;IAGlC,KAAK,OAAO,KAAK;IACjB;GACF;GACA,KAAK,UAAU;IACb,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM,EAAE;IACpC,IAAI,CAAC,OAAO;IACZ,KAAK,UAAU,KAAK;IACpB,MAAM,YAAY,kBAAkB,MAAM,IAAI;IAC9C,KAAK,UAAU,OAAO,UAAU,MAAM,IAAI;IAC1C,KAAK,cAAc,OAAO,MAAM,IAAI;IACpC;GACF;GACA,KAAK,MAAM;IACT,IAAI,MAAM,MAAM,KAAA,KAAa,MAAM,MAAM,KAAK,KAAK;IACnD,MAAM,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC;IACnC,IAAI,CAAC,KAAK;IACV,KAAK,MAAM,MAAM,MAAM,KAAK,GAAG,GAAG;KAChC,MAAM,QAAQ,KAAK,KAAK,IAAI,EAAE;KAC9B,IAAI,CAAC,OAAO;KACZ,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;MACF,SAAS,UAAU,MAAM,IAAI,MAAM,CAAC;KACtC,SAAS,OAAO;MACd,oBAAoB,KAAK;KAC3B;IAEJ;IACA;GACF;GACA,KAAK;IACH,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GACtC,IAAI,MAAM,WAAW,QAAQ,KAAK,OAAO,KAAK;IAEhD;GACF,KAAK;IACH,KAAK,aAAa,KAAK,IAAI,GAAG,OAAO,MAAM,UAAU,KAAK,CAAC;IAC3D;GACF,KAAK,QACH;EACJ;CACF;CAEA,SAAiB,MAAc;EAC7B,KAAK,KAAK;EACV,KAAK,gBAAgB;EACrB,KAAK,MAAM;EACX,KAAK,cAAc;EACnB,KAAK,OAAO,MAAM;EAClB,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;GACzC,MAAM,QAAQ;GAEd,KAAK,WAAW,KAAK;GACrB,IAAI,CAAC,MAAM,WAAW,KAAK,UAAU,OAAO,UAAU,IAAI;EAC5D;EACA,IAAI,SAAS,UAAU,SAAS,KAAK,UAAU;EAC/C,IAAI,KAAK,QAAQ,OAAO,KAAK,CAAC,KAAK,mBAAmB,KAAK,kBAAkB;CAC/E;CAEA,oBAA4B;EAC1B,KAAK,eAAe;EACpB,IAAI;EACJ,IAAI,KAAK,eAAe,MAAM;GAC5B,QAAQ,KAAK;GACb,KAAK,aAAa;EACpB,OAAO,IAAI,KAAK,SAAS;GAEvB,KAAK,UAAU;GACf,QAAQ,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;EACxC,OACE,QAAQ,aAAa,KAAK,SAAS,KAAK,OAAO,CAAC;EAElD,KAAK;EACL,KAAK,iBAAiB,iBAAiB;GACrC,KAAK,iBAAiB;GACtB,KAAK,QAAQ;EACf,GAAG,KAAK;CACV;CAEA,iBAAyB;EACvB,IAAI,KAAK,gBAAgB,aAAa,KAAK,cAAc;EACzD,KAAK,iBAAiB;CACxB;CAEA,SAAiB;EACf,QAAQ,KAAK,UAAU,UAAU,KAAK,OAAA,CAAQ;CAChD;CAEA,iBAAyB;EACvB,KAAK,cAAc;EACnB,KAAK,YAAY,kBAAkB,KAAK,KAAK,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,WAAW;EAC9E,KAAK,MAAM;CACb;CAEA,gBAAwB;EACtB,IAAI,KAAK,WAAW,cAAc,KAAK,SAAS;EAChD,IAAI,KAAK,eAAe,aAAa,KAAK,aAAa;EACvD,KAAK,YAAY;EACjB,KAAK,gBAAgB;CACvB;;CAGA,QAAgB;EACd,IAAI,KAAK,eAAe,aAAa,KAAK,aAAa;EACvD,MAAM,KAAK,KAAK;EAChB,KAAK,gBAAgB,iBAAiB;GACpC,IAAI,KAAK,OAAO,MAAM,CAAC,IAAI;GAE3B,IAAI;IACF,GAAG,MAAM;GACX,QAAQ,CAAC;GACT,KAAK,SAAS,IAAI;EACpB,GAAG,KAAK,cAAc,CAAC;CACzB;CAEA,UAAkB,OAAc,QAAuB,MAAyB;EAC9E,IAAI,MAAM,WAAW,UAAU,MAAM,SAAS,MAAM;EACpD,MAAM,SAAS;EACf,MAAM,OAAO;EACb,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;GACF,SAAS,WAAW,QAAQ,IAAI;EAClC,SAAS,OAAO;GACd,oBAAoB,KAAK;EAC3B;CAEJ;;CAGA,OAAe,OAAc;EAC3B,IAAI,MAAM,aAAa;EACvB,MAAM,MAAM,KAAK,IAAI;EACrB,MAAM,OAAO,MAAM,eAAe,qBAAqB;EACvD,MAAM,aAAa;GACjB,MAAM,cAAc;GACpB,MAAM,eAAe,KAAK,IAAI;GAC9B,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;IACF,SAAS,WAAW;GACtB,SAAS,OAAO;IACd,oBAAoB,KAAK;GAC3B;EAEJ;EACA,IAAI,MAAM,iBAAiB,KAAK,QAAQ,GAAG,KAAK;OAC3C,MAAM,cAAc,WAAW,MAAM,IAAI;CAChD;;;;;;;;CASA,cAAsB,OAAc,MAAkB;EACpD,IAAI,SAAS,kBAAkB,SAAS,WAAW,SAAS,SAAS;EACrE,IAAI,SAAS,WAAW,MAAM,WAAA,GAA8B;EAC5D,KAAK,WAAW,KAAK;EAErB,MAAM,QAAQ,KAAK,IADL,SAAS,iBAAiB,wBAAwB,gBAClC,aAAa,MAAM,SAAS,KAAK,OAAO,CAAC,CAAC;EACxE,MAAM;EACN,MAAM,aAAa,iBAAiB;GAClC,MAAM,aAAa;GACnB,IAAI,KAAK,QAAQ,IAAI,MAAM,GAAG,MAAM,SAAS,MAAM,WAAW,UAAU;GACxE,IAAI,KAAK,OAAO,GAAG,KAAK,QAAQ,KAAK;EACvC,GAAG,KAAK;CACV;CAEA,WAAmB,OAAc;EAC/B,IAAI,MAAM,YAAY,aAAa,MAAM,UAAU;EACnD,MAAM,aAAa;CACrB;CAEA,UAAkB,OAAc;EAC9B,IAAI,CAAC,MAAM,OAAO;EAClB,MAAM,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK;EACvC,KAAK,OAAO,MAAM,EAAE;EACpB,IAAI,OAAO,IAAI,SAAS,GAAG,KAAK,OAAO,OAAO,MAAM,KAAK;EACzD,MAAM,QAAQ;CAChB;CAEA,oBAA4B;EAC1B,KAAK,gBAAgB;EACrB,KAAK,YAAY,iBAAiB;GAChC,KAAK,YAAY;GACjB,IAAI,KAAK,QAAQ,OAAO,GAAG;GAC3B,KAAK,eAAe;GACpB,KAAK,MAAM;EACb,GAAG,aAAa;CAClB;CAEA,kBAA0B;EACxB,IAAI,KAAK,WAAW,aAAa,KAAK,SAAS;EAC/C,KAAK,YAAY;CACnB;;CAGA,QAAgB;EACd,MAAM,KAAK,KAAK;EAChB,IAAI,CAAC,IAAI;EACT,KAAK,KAAK;EACV,IAAI;GACF,GAAG,MAAM,UAAU,MAAM;EAC3B,QAAQ,CAAC;EACT,KAAK,SAAS,UAAU,MAAM;CAChC;CAEA,SAAiB;EACf,IAAI,KAAK,aAAa,OAAO,WAAW,aAAa;EACrD,KAAK,YAAY;EACjB,OAAO,iBAAiB,UAAU,KAAK,QAAQ;EAC/C,IAAI,OAAO,aAAa,aACtB,SAAS,iBAAiB,oBAAoB,KAAK,YAAY;CAEnE;CAEA,iBAAyB;EACvB,IAAI,KAAK,QAAQ,SAAS,KAAK,KAAK,MAAM,KAAK,mBAAmB;EAClE,KAAK,UAAU;EACf,KAAK,QAAQ;CACf;CAEA,qBAA6B;EAC3B,IAAI,SAAS,oBAAoB,UAAU;GACzC,IAAI,KAAK,aAAa;GACtB,KAAK,cAAc,iBAAiB;IAClC,KAAK,cAAc;IACnB,IAAI,SAAS,oBAAoB,UAAU;IAC3C,KAAK,oBAAoB;IACzB,KAAK,eAAe;IACpB,KAAK,MAAM;GACb,GAAG,KAAK,QAAQ,kBAAkB;GAClC;EACF;EACA,IAAI,KAAK,aAAa,aAAa,KAAK,WAAW;EACnD,KAAK,cAAc;EACnB,IAAI,KAAK,mBAAmB;GAC1B,KAAK,oBAAoB;GACzB,KAAK,UAAU;GAEf,KAAK,QAAQ;EACf;CACF;;;;;;;CAQA,YAAY;EACV,KAAK,MAAM;EACX,KAAK,eAAe;EACpB,KAAK,UAAU;EACf,IAAI,KAAK,QAAQ,OAAO,KAAK,CAAC,KAAK,mBAAmB,KAAK,QAAQ;CACrE;;CAGA,UAAU;EACR,KAAK,eAAe;EACpB,KAAK,gBAAgB;EACrB,IAAI,KAAK,aAAa,aAAa,KAAK,WAAW;EACnD,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;GACzC,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;GACrD,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;GACrD,KAAK,WAAW,KAAK;EACvB;EACA,KAAK,QAAQ,MAAM;EACnB,KAAK,KAAK,MAAM;EAChB,KAAK,MAAM;EACX,IAAI,KAAK,aAAa,OAAO,WAAW,aAAa;GACnD,OAAO,oBAAoB,UAAU,KAAK,QAAQ;GAClD,UAAU,oBAAoB,oBAAoB,KAAK,YAAY;GACnE,KAAK,YAAY;EACnB;CACF;AACF;;AAGA,SAAgB,aAAa,SAAiB,QAAwB;CACpE,MAAM,MAAM,KAAK,IAAI,gBAAgB,iBAAiB,KAAK,KAAK,IAAI,SAAS,EAAE,CAAC;CAChF,OAAO,KAAK,IAAI,gBAAgB,KAAK,MAAM,SAAS,GAAG,CAAC;AAC1D;AAEA,SAAS,aAAa,SAAqD;CACzE,OAAO;EACL,MAAM,QAAQ,QAAA;EACd,oBAAoB,QAAQ,sBAAsB;CACpD;AACF;AAEA,SAAS,oBAAoB,OAAgB;CAC3C,iBAAiB;EACf,MAAM;CACR,CAAC;AACH;;;;;AAMA,SAAgB,YAA4B;CAC1C,OAAQ,SAAS,WAAW,IAAI,eAAe,SAAS,OAAO;AACjE"}