sliccy 3.39.2 → 3.40.0

package/dist/node-server/sudo/electron-backend.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Electron sudo backend.
+ *
+ * When node-server runs *inside* an Electron main process (`process.versions
+ * .electron` is set), the native gesture is `dialog.showMessageBox` with three
+ * buttons (Deny / Allow Once / Always). On "Always" an editable pattern is
+ * captured via {@link ElectronBackendDeps.promptInput}; the default
+ * implementation runs `window.prompt` inside a transient offscreen
+ * `BrowserWindow`. Both seams are injectable so tests never touch Electron.
+ *
+ * Fail closed: a thrown dialog call, a cancelled prompt, or an unknown button
+ * resolves to `deny` / falls back to the suggested pattern.
+ */
+import type { SudoBackend } from './types.js';
+/** Result shape of `dialog.showMessageBox`. */
+interface MessageBoxResult {
+    response: number;
+}
+/** Injection seams. */
+export interface ElectronBackendDeps {
+    /** Raise a modal message box; resolves the clicked button index. */
+    showMessageBox?: (options: {
+        type: string;
+        buttons: string[];
+        defaultId: number;
+        cancelId: number;
+        title: string;
+        message: string;
+        detail: string;
+    }) => Promise<MessageBoxResult>;
+    /** Capture an editable pattern; resolves null on cancel. */
+    promptInput?: (message: string, defaultValue: string) => Promise<string | null>;
+}
+/** Create the Electron backend. */
+export declare function createElectronBackend(deps?: ElectronBackendDeps): SudoBackend;
+export {};

package/dist/node-server/sudo/electron-backend.js

@@ -0,0 +1,76 @@
+/**
+ * Electron sudo backend.
+ *
+ * When node-server runs *inside* an Electron main process (`process.versions
+ * .electron` is set), the native gesture is `dialog.showMessageBox` with three
+ * buttons (Deny / Allow Once / Always). On "Always" an editable pattern is
+ * captured via {@link ElectronBackendDeps.promptInput}; the default
+ * implementation runs `window.prompt` inside a transient offscreen
+ * `BrowserWindow`. Both seams are injectable so tests never touch Electron.
+ *
+ * Fail closed: a thrown dialog call, a cancelled prompt, or an unknown button
+ * resolves to `deny` / falls back to the suggested pattern.
+ */
+const BUTTONS = ['Deny', 'Allow Once', 'Always'];
+/** Create the Electron backend. */
+export function createElectronBackend(deps = {}) {
+    const showMessageBox = deps.showMessageBox ?? defaultShowMessageBox;
+    const promptInput = deps.promptInput ?? defaultPromptInput;
+    return {
+        name: 'electron',
+        async prompt(req) {
+            const suggested = req.suggestedPattern?.trim() || req.detail.trim();
+            let response;
+            try {
+                const result = await showMessageBox({
+                    type: 'warning',
+                    buttons: BUTTONS,
+                    defaultId: 1,
+                    cancelId: 0,
+                    title: 'SLICC sudo',
+                    message: `Approve ${req.kind}`,
+                    detail: req.detail,
+                });
+                response = result.response;
+            }
+            catch {
+                return { decision: 'deny' };
+            }
+            if (response === 1)
+                return { decision: 'allow' };
+            if (response !== 2)
+                return { decision: 'deny' };
+            try {
+                const edited = await promptInput('Edit the "Always" allow pattern:', suggested);
+                const pattern = edited && edited.trim().length > 0 ? edited.trim() : suggested;
+                return { decision: 'always', pattern };
+            }
+            catch {
+                return { decision: 'always', pattern: suggested };
+            }
+        },
+    };
+}
+/** Default message box via the real Electron `dialog` module (lazy import). */
+async function defaultShowMessageBox(options) {
+    const electron = (await import('electron'));
+    return electron.dialog.showMessageBox(options);
+}
+/** Default editable prompt via a transient offscreen BrowserWindow. */
+async function defaultPromptInput(message, defaultValue) {
+    const electron = (await import('electron'));
+    const win = new electron.BrowserWindow({
+        show: false,
+        width: 480,
+        height: 160,
+        webPreferences: { offscreen: true },
+    });
+    try {
+        await win.loadURL('data:text/html,<title>SLICC sudo</title>');
+        const result = await win.webContents.executeJavaScript(`window.prompt(${JSON.stringify(message)}, ${JSON.stringify(defaultValue)})`);
+        return typeof result === 'string' ? result : null;
+    }
+    finally {
+        win.destroy();
+    }
+}

package/dist/node-server/sudo/endpoint.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `POST /api/sudo-approve` — the trusted-process approval endpoint.
+ *
+ * The in-browser broker (`packages/webapp/src/sudo/http-broker.ts`) POSTs the
+ * gated action here; this process raises a genuine native dialog / TTY prompt
+ * (the agent's browser `node` shim can't reach this process) and returns the
+ * human's decision. Loopback-only, like the other local node-server endpoints.
+ *
+ * Fail closed: an invalid body → 400; a backend that throws → `deny` (200).
+ * Requests never auto-resolve to allow.
+ */
+import { type Express } from 'express';
+import type { SudoBackend } from './types.js';
+export interface SudoEndpointOptions {
+    /**
+     * Backend to use for every request. Defaults to lazy per-request selection
+     * via {@link selectSudoBackend} so the environment is probed at call time.
+     * Tests inject a deterministic backend here.
+     */
+    backend?: SudoBackend;
+    /** Logger seam; defaults to `console.warn`. */
+    warn?: (message: string) => void;
+}
+/** Register the sudo approval endpoint on the Express app. */
+export declare function registerSudoApproveEndpoint(app: Express, options?: SudoEndpointOptions): void;

package/dist/node-server/sudo/endpoint.js

@@ -0,0 +1,52 @@
+/**
+ * `POST /api/sudo-approve` — the trusted-process approval endpoint.
+ *
+ * The in-browser broker (`packages/webapp/src/sudo/http-broker.ts`) POSTs the
+ * gated action here; this process raises a genuine native dialog / TTY prompt
+ * (the agent's browser `node` shim can't reach this process) and returns the
+ * human's decision. Loopback-only, like the other local node-server endpoints.
+ *
+ * Fail closed: an invalid body → 400; a backend that throws → `deny` (200).
+ * Requests never auto-resolve to allow.
+ */
+import express from 'express';
+import { requireLoopback } from '../cloud-status.js';
+import { selectSudoBackend } from './select.js';
+const VALID_KINDS = ['command', 'read', 'write', 'secret'];
+function isSudoApproveRequest(x) {
+    if (typeof x !== 'object' || x === null)
+        return false;
+    const p = x;
+    if (typeof p.kind !== 'string' || !VALID_KINDS.includes(p.kind))
+        return false;
+    if (typeof p.detail !== 'string' || p.detail.length === 0)
+        return false;
+    if ('suggestedPattern' in p && typeof p.suggestedPattern !== 'string')
+        return false;
+    return true;
+}
+/** Register the sudo approval endpoint on the Express app. */
+export function registerSudoApproveEndpoint(app, options = {}) {
+    const warn = options.warn ?? ((m) => console.warn(m));
+    app.post('/api/sudo-approve', requireLoopback, express.json(), async (req, res) => {
+        if (!isSudoApproveRequest(req.body)) {
+            res.status(400).json({ error: 'invalid sudo-approve payload' });
+            return;
+        }
+        const request = {
+            kind: req.body.kind,
+            detail: req.body.detail,
+            suggestedPattern: req.body.suggestedPattern ?? req.body.detail,
+        };
+        const backend = options.backend ?? selectSudoBackend();
+        let decision;
+        try {
+            decision = await backend.prompt(request);
+        }
+        catch (err) {
+            warn(`sudo-approve backend "${backend.name}" threw — denying: ${String(err)}`);
+            decision = { decision: 'deny' };
+        }
+        res.json(decision);
+    });
+}

package/dist/node-server/sudo/select.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Native sudo backend selection (priority order).
+ *
+ *   1. Electron  → `dialog.showMessageBox`
+ *   2. macOS     → `osascript`
+ *   3. Windows   → PowerShell
+ *   4. Linux+GUI → `zenity` / `kdialog`
+ *   5. headless  → editable TTY
+ *   6. no channel → fail closed (deny) + log
+ *
+ * The environment probe is injectable so tests can force any branch without
+ * touching the real platform / spawning `which`.
+ */
+import type { SudoBackend } from './types.js';
+/** Probed runtime facts used to pick a backend. */
+export interface SudoEnv {
+    platform: NodeJS.Platform;
+    isElectron: boolean;
+    hasDisplay: boolean;
+    hasTty: boolean;
+    which: (cmd: string) => boolean;
+}
+/** Probe the live environment. */
+export declare function detectSudoEnv(): SudoEnv;
+/**
+ * Select the highest-priority available backend for the given environment.
+ * Always returns a backend — the deny backend is the fail-closed terminal.
+ */
+export declare function selectSudoBackend(env?: SudoEnv): SudoBackend;

package/dist/node-server/sudo/select.js

@@ -0,0 +1,59 @@
+/**
+ * Native sudo backend selection (priority order).
+ *
+ *   1. Electron  → `dialog.showMessageBox`
+ *   2. macOS     → `osascript`
+ *   3. Windows   → PowerShell
+ *   4. Linux+GUI → `zenity` / `kdialog`
+ *   5. headless  → editable TTY
+ *   6. no channel → fail closed (deny) + log
+ *
+ * The environment probe is injectable so tests can force any branch without
+ * touching the real platform / spawning `which`.
+ */
+import { execFileSync } from 'child_process';
+import { createDenyBackend, createKdialogBackend, createOsascriptBackend, createPowerShellBackend, createZenityBackend, } from './dialog-backends.js';
+import { createElectronBackend } from './electron-backend.js';
+import { createTtyBackend } from './tty-backend.js';
+/** Probe the live environment. */
+export function detectSudoEnv() {
+    return {
+        platform: process.platform,
+        isElectron: typeof process.versions.electron === 'string',
+        hasDisplay: !!process.env.DISPLAY || !!process.env.WAYLAND_DISPLAY,
+        hasTty: !!process.stdin.isTTY,
+        which: defaultWhich,
+    };
+}
+/** Synchronous best-effort `which`; false when the binary is absent. */
+function defaultWhich(cmd) {
+    try {
+        const probe = process.platform === 'win32' ? 'where' : 'which';
+        execFileSync(probe, [cmd], { stdio: 'ignore' });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Select the highest-priority available backend for the given environment.
+ * Always returns a backend — the deny backend is the fail-closed terminal.
+ */
+export function selectSudoBackend(env = detectSudoEnv()) {
+    if (env.isElectron)
+        return createElectronBackend();
+    if (env.platform === 'darwin')
+        return createOsascriptBackend();
+    if (env.platform === 'win32')
+        return createPowerShellBackend();
+    if (env.hasDisplay) {
+        if (env.which('zenity'))
+            return createZenityBackend();
+        if (env.which('kdialog'))
+            return createKdialogBackend();
+    }
+    if (env.hasTty)
+        return createTtyBackend();
+    return createDenyBackend('none');
+}

package/dist/node-server/sudo/tty-backend.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Headless editable-TTY sudo backend.
+ *
+ * When there's no GUI but the node-server has a controlling terminal, the
+ * approval gesture is a keystroke on stdin: `[a]llow once / [d]eny / [A]lways`.
+ * Choosing "Always" then reads an editable pattern line (blank keeps the
+ * suggested default). Fail closed: a closed stream, EOF, or any error denies.
+ */
+import type { Interface as ReadlineInterface } from 'readline';
+import type { SudoBackend } from './types.js';
+/** Seam for tests: build a question-asking interface over arbitrary streams. */
+export interface TtyDeps {
+    output?: NodeJS.WritableStream;
+    createRl?: () => Pick<ReadlineInterface, 'question' | 'close'>;
+}
+/** Create the editable-TTY backend. */
+export declare function createTtyBackend(deps?: TtyDeps): SudoBackend;

package/dist/node-server/sudo/tty-backend.js

@@ -0,0 +1,49 @@
+/**
+ * Headless editable-TTY sudo backend.
+ *
+ * When there's no GUI but the node-server has a controlling terminal, the
+ * approval gesture is a keystroke on stdin: `[a]llow once / [d]eny / [A]lways`.
+ * Choosing "Always" then reads an editable pattern line (blank keeps the
+ * suggested default). Fail closed: a closed stream, EOF, or any error denies.
+ */
+import { createInterface } from 'readline';
+function defaultRl() {
+    return createInterface({ input: process.stdin, output: process.stdout });
+}
+function ask(rl, query) {
+    return new Promise((resolve) => rl.question(query, (answer) => resolve(answer)));
+}
+/** Create the editable-TTY backend. */
+export function createTtyBackend(deps = {}) {
+    const out = deps.output ?? process.stdout;
+    const makeRl = deps.createRl ?? defaultRl;
+    return {
+        name: 'tty',
+        async prompt(req) {
+            const suggested = req.suggestedPattern?.trim() || req.detail.trim();
+            const rl = makeRl();
+            try {
+                out.write(`\nSLICC sudo — approve ${req.kind}: ${req.detail}\n`);
+                const choice = (await ask(rl, '[a]llow once / [d]eny / [A]lways (edit pattern): ')).trim();
+                if (choice === 'a')
+                    return { decision: 'allow' };
+                if (choice === 'A') {
+                    const edited = (await ask(rl, `Always pattern [${suggested}]: `)).trim();
+                    return { decision: 'always', pattern: edited.length > 0 ? edited : suggested };
+                }
+                return { decision: 'deny' };
+            }
+            catch {
+                return { decision: 'deny' };
+            }
+            finally {
+                try {
+                    rl.close?.();
+                }
+                catch {
+                    // ignore close errors
+                }
+            }
+        },
+    };
+}

package/dist/node-server/sudo/types.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Server-side sudo approval types for the node-server float.
+ *
+ * The browser broker (`packages/webapp/src/sudo/http-broker.ts`) POSTs a
+ * {@link SudoApproveRequest} to `/api/sudo-approve`; this process selects a
+ * native backend, raises a real OS dialog / TTY prompt, and returns a
+ * {@link SudoDecision}. The decision can only come from a genuine human
+ * gesture in this process — the agent's in-browser `node` shim cannot reach
+ * here.
+ */
+export type SudoKind = 'command' | 'read' | 'write' | 'secret';
+/** Inbound request body for `POST /api/sudo-approve`. */
+export interface SudoApproveRequest {
+    kind: SudoKind;
+    /** The concrete command line or VFS path being gated. */
+    detail: string;
+    /** Editable default pattern for an "Always" grant (LLM-suggested upstream). */
+    suggestedPattern: string;
+}
+/** The human's decision. `pattern` is only present for `always`. */
+export interface SudoDecision {
+    decision: 'allow' | 'deny' | 'always';
+    pattern?: string;
+}
+/**
+ * A native approval channel. `name` is for logging/selection; `prompt` raises
+ * the actual gesture. Implementations MUST fail closed (resolve `deny`) on any
+ * error, dismissal, or timeout — never throw to the endpoint.
+ */
+export interface SudoBackend {
+    readonly name: string;
+    prompt(req: SudoApproveRequest): Promise<SudoDecision>;
+}

package/dist/node-server/sudo/types.js

@@ -0,0 +1,11 @@
+/**
+ * Server-side sudo approval types for the node-server float.
+ *
+ * The browser broker (`packages/webapp/src/sudo/http-broker.ts`) POSTs a
+ * {@link SudoApproveRequest} to `/api/sudo-approve`; this process selects a
+ * native backend, raises a real OS dialog / TTY prompt, and returns a
+ * {@link SudoDecision}. The decision can only come from a genuine human
+ * gesture in this process — the agent's in-browser `node` shim cannot reach
+ * here.
+ */
+export {};

package/dist/ui/assets/{adobe-BkKbqjN2.js → adobe-D7Bu_6Xq.js}

@@ -1 +1 @@
-import{E as e,G as t,U as n,V as r,X as i,et as a,j as o,k as s,q as c,rt as l,t as u,tt as d,w as f}from"./kernel-worker-C_bNzCH6.js";import{getOAuthPageOrigin as p}from"./oauth-service-BNaPQI8J.js";var m={proxyEndpoint:`https://adobe-llm-proxy.paolo-moz.workers.dev`,redirectUri:`https://www.sliccy.ai/auth/callback`,extensionRedirectUri:`https://akjjllgokmbgpbdbmafpiefnhidlmbgf.chromiumapp.org/adobe`};const h=[`claude-opus-4-8`,`opus-4-8`];function g(e,t){return(t?[e,t]:[e]).flatMap(e=>{let t=e.toLowerCase();return[t,t.replace(/[\s_.:]+/g,`-`)]})}function _(e,t){return g(e,t).some(e=>h.some(t=>e.includes(t)))}function v(e,t){let n=e?t?.[e]:void 0;if(typeof n==`string`)return n;switch(e){case`minimal`:case`low`:return`low`;case`medium`:return`medium`;case`xhigh`:return`xhigh`;default:return`high`}}function y(e,t){return async(n,r)=>{let i=t?await t(n,r)??n:n,a=i.thinking;return a&&a.type===`enabled`&&(i.thinking={type:`adaptive`,...a.display===void 0?{}:{display:a.display}},i.output_config={...i.output_config??{},effort:e}),i}}function b(e,t){if(!_(e.id,e.name))return t;let n=t,r=n.effort??v(n.reasoning,e.thinkingLevelMap);return{...t,onPayload:y(r,n.onPayload)}}function x(e,t){let n={id:e.id,name:e.name??e.id},r=t?.api??e.api,i=t?.context_window??e.context_window,a=t?.max_tokens??e.max_tokens,o=t?.reasoning??e.reasoning,s=t?.input??e.input;return r&&(n.api=r),i!==void 0&&(n.context_window=i),a!==void 0&&(n.max_tokens=a),o!==void 0&&(n.reasoning=o),s&&(n.input=s),/haiku/i.test(e.id)&&(n.compat={supportsEagerToolInputStreaming:!1}),n}function ee(e=3e5){let t=0;return{async run(n,r=Date.now()){if(r<t)return null;let i=null;try{i=await n()}catch(e){console.debug(`[silent-renew-backoff] renew threw:`,e instanceof Error?e.message:String(e)),i=null}return t=i?0:r+e,i},inCooldown(e=Date.now()){return e<t}}}const S=Object.assign({"/packages/webapp/providers/adobe-config.json":m})[`/packages/webapp/providers/adobe-config.json`]??{clientId:``,proxyEndpoint:``,scopes:`openid,profile,email`};function C(){let t=e(`adobe`);if(t)return t.replace(/\/$/,``);if(S.proxyEndpoint)return S.proxyEndpoint.replace(/\/$/,``);throw Error(`Adobe proxy endpoint not configured — set it in Settings or adobe-config.json`)}const w=new Map,T=new Map,E=`slicc-adobe-models`;function D(e){try{localStorage.setItem(E,JSON.stringify(e))}catch{}}async function O(e){let t=w.get(e);if(t)return t;try{let t=await fetch(`${e}/v1/config`,{headers:{[W]:`3.39.2`}});if(t.ok){let n=await t.json();return w.set(e,n),n}console.warn(`[adobe] Proxy /v1/config returned ${t.status}, falling back to build-time config`)}catch(e){console.warn(`[adobe] Failed to fetch proxy config:`,e instanceof Error?e.message:String(e))}let n={};return w.set(e,n),n}function k(e){let t=e.clientId||S.clientId;if(!t)throw Error(`Could not determine IMS client ID — proxy /v1/config did not return one and adobe-config.json is empty`);return t}function A(e){return e.scopes||S.scopes}function j(e){return e.imsEnvironment||S.imsEnvironment||`prod`}const M={prod:`https://ims-na1.adobelogin.com`,stg1:`https://ims-na1-stg1.adobelogin.com`};function N(e){return M[e??S.imsEnvironment??`prod`]??M.prod}const P=typeof chrome<`u`&&!!chrome?.runtime?.id;function F(){return f().find(e=>e.providerId===`adobe`)}async function I(e,t){try{let n=await fetch(`${N(t)}/ims/userinfo/v2`,{headers:{Authorization:`Bearer ${e}`}});if(n.ok){let e=await n.json();return{name:e.displayName||e.name||e.email,avatar:e.picture||e.avatar_url}}console.warn(`[adobe] User profile fetch returned ${n.status}, account will have no display name`)}catch(e){console.warn(`[adobe] Failed to fetch user profile:`,e instanceof Error?e.message:String(e))}return{}}function L(e){let t=e.indexOf(`#`);if(t<0)return null;let n=new URLSearchParams(e.slice(t+1)),r=n.get(`access_token`);return r?{accessToken:r,expiresIn:parseInt(n.get(`expires_in`)??`86400`,10)}:null}const R={id:`adobe`,name:`Adobe`,description:`Claude via Adobe — login with your Adobe ID`,requiresApiKey:!1,requiresBaseUrl:!S.proxyEndpoint,baseUrlPlaceholder:`https://your-proxy.example.com`,baseUrlDescription:`Anthropic-compatible proxy endpoint`,isOAuth:!0,defaultModelId:`sonnet`,oauthTokenDomains:[`ims-na1.adobelogin.com`,`ims-na1-stg1.adobelogin.com`,`*.adobelogin.com`,`*.adobe.io`,`firefall.adobe.io`,`admin.hlx.page`,`admin.hlx.live`,`admin.aem.page`,`admin.aem.live`],getModelIds:()=>{let e=e=>x(e,T.get(e.id));for(let t of Q.values())if(t.length){let n=t.map(t=>e({id:t.id,name:t.name??t.id}));return D(n),n}for(let t of w.values())if(t.models?.length)return t.models.map(t=>e(t));try{let e=localStorage.getItem(E);if(e){let t=JSON.parse(e);if(t.length)return t}}catch{}return[{id:`claude-sonnet-4-6`,name:`Claude Sonnet 4.6`}]},onOAuthLogin:async(e,t,n)=>{let r=C(),i=await O(r),a=k(i),o=A(i),c=j(i),l=P?null:await p(),u=P?S.extensionRedirectUri??`https://${chrome.runtime.id}.chromiumapp.org/`:S.redirectUri??`${l.origin}/auth/callback`,d=P?void 0:btoa(JSON.stringify({port:parseInt(new URL(l.href).port||`5710`,10),path:`/auth/callback`,nonce:crypto.randomUUID()})),f=d?JSON.parse(atob(d)).nonce:null,m=new URLSearchParams({client_id:a,scope:o,response_type:`token`,redirect_uri:u});d&&m.set(`state`,d),n?.forceReauth&&m.set(`prompt`,`login`);let h=await e(`${N(c)}/ims/authorize/v2?${m}`);if(!h)return;if(f&&h)try{if(new URL(h).searchParams.get(`nonce`)!==f){console.error(`[adobe] OAuth nonce mismatch — possible CSRF`);return}}catch(e){console.warn(`[adobe] Nonce check skipped (URL parse failed):`,e instanceof Error?e.message:String(e))}let g=L(h);if(!g){console.error(`[adobe] Could not extract token from redirect URL`);return}let _=await I(g.accessToken,c);await s({providerId:`adobe`,accessToken:g.accessToken,tokenExpiresAt:Date.now()+g.expiresIn*1e3,userName:_.name,userAvatar:_.avatar,baseUrl:S.proxyEndpoint?void 0:r}),await $().catch(e=>console.warn(`[adobe] Failed to fetch models after login:`,e instanceof Error?e.message:String(e))),t()},onOAuthLogout:async()=>{let e=F();if(e?.accessToken)try{let t=w.values().next().value??{},n=t.clientId||S.clientId,r=j(t);if(n){let t=await fetch(`${N(r)}/ims/revoke`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({token:e.accessToken,token_type_hint:`access_token`,client_id:n})});t.ok||console.warn(`[adobe] Token revocation returned ${t.status}, token may still be valid server-side`)}}catch(e){console.warn(`[adobe] Failed to revoke token:`,e instanceof Error?e.message:String(e))}await s({providerId:`adobe`,accessToken:``})},onSilentRenew:async()=>F()?.accessToken?U():null,refreshModels:async e=>{await $(e);let t=R.getModelIds?.();t?.length&&D(t)}};let z=null;const B=ee();async function V(){let e=F();if(!e?.accessToken)throw Error(`Not logged in to Adobe — please log in first`);if((e.tokenExpiresAt??0)-Date.now()>6e4)return e.accessToken;console.log(`[adobe] Token expired or expiring soon, attempting silent renewal...`);let t=await B.run(()=>U());if(t)return t;let n=F();if((n?.tokenExpiresAt??0)-Date.now()>0&&n?.accessToken)return n.accessToken;throw Error(`Adobe session expired — please log in again`)}function H(){let e=F();return e?.tokenExpiresAt?Date.now()>e.tokenExpiresAt-6e4:!0}async function U(){return typeof window>`u`?null:z||(z=(async()=>{try{let e=C(),t=await O(e),n=k(t),r=A(t),i=j(t),a=P?S.extensionRedirectUri??`https://${chrome.runtime.id}.chromiumapp.org/`:S.redirectUri??`${window.location.origin}/auth/callback`,o=P?void 0:btoa(JSON.stringify({port:parseInt(new URL(window.location.href).port||`5710`,10),path:`/auth/callback`,nonce:crypto.randomUUID()})),c=o?JSON.parse(atob(o)).nonce:null,l=new URLSearchParams({client_id:n,scope:r,response_type:`token`,redirect_uri:a,prompt:`none`});o&&l.set(`state`,o);let u=`${N(i)}/ims/authorize/v2?${l}`,{createOAuthLauncher:d}=await import(`./oauth-service-BNaPQI8J.js`),f=await d()(u,{interactive:!1});if(!f)return null;if(c&&f)try{if(new URL(f).searchParams.get(`nonce`)!==c)return console.error(`[adobe] OAuth nonce mismatch — possible CSRF`),null}catch(e){console.warn(`[adobe] Nonce check skipped (URL parse failed):`,e instanceof Error?e.message:String(e))}let p=L(f);if(!p)return null;let m=F();return await s({providerId:`adobe`,accessToken:p.accessToken,tokenExpiresAt:Date.now()+p.expiresIn*1e3,userName:m?.userName,userAvatar:m?.userAvatar,baseUrl:S.proxyEndpoint?void 0:e}),console.log(`[adobe] Token renewed silently`),await $().catch(e=>console.warn(`[adobe] Failed to refresh models after silent renewal:`,e instanceof Error?e.message:String(e))),p.accessToken}catch(e){return console.warn(`[adobe] Silent renewal error:`,e instanceof Error?e.message:String(e)),null}finally{z=null}})(),z)}const W=`X-Slicc-Version`;function G(e){let t={};if(e.headers)for(let[n,r]of Object.entries(e.headers))n.toLowerCase()!==`x-slicc-version`&&(t[n]=r);return t[W]=`3.39.2`,{...e,headers:t}}const K=new Set;function q(e,t){if(e.headers){for(let t of Object.keys(e.headers))if(t.toLowerCase()===`x-session-id`)return e}return K.has(t)||(K.add(t),console.warn(`[adobe] Missing X-Session-Id from ${t} — using daily fallback. Attach an X-Session-Id header at the call site (see scoop-context.ts streamWithSessionId or docs/pitfalls.md).`)),{...e,headers:{...e.headers??{},"X-Session-Id":u(`adobe-provider-fallback`)}}}function J(){K.clear()}function Y(e,t){return{type:`error`,reason:`error`,error:{role:`assistant`,content:[],api:`adobe-anthropic`,provider:`adobe`,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:`error`,errorMessage:t instanceof Error?t.message:String(t),timestamp:Date.now()}}}const X=(e,t,a={})=>{let s=i();return(async()=>{try{let i=await V();if(String(e.api).includes(`openai`)){let r=n({...e,baseUrl:`${C()}/v1`,api:`openai-completions`,compat:{...e.compat,supportsStore:!1,supportsDeveloperRole:!1}},t,G(q({...a,apiKey:i},`streamAdobe[openai]`)));for await(let e of r)s.push(e)}else{let n=r({...e,baseUrl:C(),api:`anthropic-messages`},t,G(q(b(e,o(e.id,e.name,{...a,apiKey:i})),`streamAdobe[anthropic]`)));for await(let e of n)s.push(e)}s.end()}catch(t){console.error(`[adobe] Stream error:`,t instanceof Error?t.message:String(t)),s.push(Y(e,t)),s.end()}})(),s},Z=(e,n,r)=>{let a=i();return(async()=>{try{let i=await V();if(String(e.api).includes(`openai`)){let t=c({...e,baseUrl:`${C()}/v1`,api:`openai-completions`,compat:{...e.compat,supportsStore:!1,supportsDeveloperRole:!1}},n,G(q({...r,apiKey:i},`streamSimpleAdobe[openai]`)));for await(let e of t)a.push(e)}else{let s=t({...e,baseUrl:C(),api:`anthropic-messages`},n,G(q(b(e,o(e.id,e.name,{...r,apiKey:i})),`streamSimpleAdobe[anthropic]`)));for await(let e of s)a.push(e)}a.end()}catch(t){console.error(`[adobe] Stream error:`,t instanceof Error?t.message:String(t)),a.push(Y(e,t)),a.end()}})(),a};async function te(e){try{let t=e??await V(),n=C(),r=await fetch(`${n}/v1/models`,{headers:{Authorization:`Bearer ${t}`,[W]:`3.39.2`}});if(r.ok){let e=await r.json();if(e.data?.length){for(let t of e.data){let e={id:t.id,name:t.name};t.api!==void 0&&(e.api=t.api),t.context_window!==void 0&&(e.context_window=t.context_window),t.max_tokens!==void 0&&(e.max_tokens=t.max_tokens),t.reasoning!==void 0&&(e.reasoning=t.reasoning),t.input!==void 0&&(e.input=t.input),T.set(t.id,e)}let t=new Map;for(let e of d())try{for(let n of a(e))t.set(n.id,n)}catch{}return e.data.map(e=>{let r=t.get(e.id),i=`adobe-${e.api===`openai`?`openai`:`anthropic`}`;return r?{...r,provider:`adobe`,api:i}:{id:e.id,name:e.name??e.id,provider:`adobe`,api:i,baseUrl:n,contextWindow:2e5,maxTokens:16384,input:[`text`,`image`],cost:{input:0,output:0,cacheRead:0,cacheWrite:0},inputCost:0,outputCost:0,cacheReadCost:0,cacheWriteCost:0,reasoning:!0}})}}else console.warn(`[adobe] Proxy /v1/models returned ${r.status}, falling back to Anthropic models`)}catch(e){console.warn(`[adobe] Failed to fetch proxy models:`,e instanceof Error?e.message:String(e))}return null}const Q=new Map;function ne(){return a(`anthropic`).map(e=>({...e,provider:`adobe`,api:`adobe-anthropic`}))}async function $(e){let t=C(),n=Q.get(t);if(n)return n;let r=await te(e);return r?(Q.set(t,r),r):ne()}function re(){l({api:`adobe-anthropic`,stream:X,streamSimple:Z}),l({api:`adobe-openai`,stream:X,streamSimple:Z})}export{J as __resetAdobeSessionIdWarningCacheForTests,R as config,$ as getAdobeModels,V as getValidAccessToken,H as isTokenExpired,re as register};
+import{E as e,G as t,S as n,U as r,V as i,X as a,et as o,j as s,k as c,q as l,rt as u,tt as d,w as f}from"./kernel-worker-CIvIwZQg.js";import{getOAuthPageOrigin as p}from"./oauth-service-DA4rM4JC.js";var m={proxyEndpoint:`https://adobe-llm-proxy.paolo-moz.workers.dev`,redirectUri:`https://www.sliccy.ai/auth/callback`,extensionRedirectUri:`https://akjjllgokmbgpbdbmafpiefnhidlmbgf.chromiumapp.org/adobe`};const h=[`claude-opus-4-8`,`opus-4-8`];function g(e,t){return(t?[e,t]:[e]).flatMap(e=>{let t=e.toLowerCase();return[t,t.replace(/[\s_.:]+/g,`-`)]})}function _(e,t){return g(e,t).some(e=>h.some(t=>e.includes(t)))}function v(e,t){let n=e?t?.[e]:void 0;if(typeof n==`string`)return n;switch(e){case`minimal`:case`low`:return`low`;case`medium`:return`medium`;case`xhigh`:return`xhigh`;default:return`high`}}function y(e,t){return async(n,r)=>{let i=t?await t(n,r)??n:n,a=i.thinking;return a&&a.type===`enabled`&&(i.thinking={type:`adaptive`,...a.display===void 0?{}:{display:a.display}},i.output_config={...i.output_config??{},effort:e}),i}}function b(e,t){if(!_(e.id,e.name))return t;let n=t,r=n.effort??v(n.reasoning,e.thinkingLevelMap);return{...t,onPayload:y(r,n.onPayload)}}function x(e,t){let n={id:e.id,name:e.name??e.id},r=t?.api??e.api,i=t?.context_window??e.context_window,a=t?.max_tokens??e.max_tokens,o=t?.reasoning??e.reasoning,s=t?.input??e.input;return r&&(n.api=r),i!==void 0&&(n.context_window=i),a!==void 0&&(n.max_tokens=a),o!==void 0&&(n.reasoning=o),s&&(n.input=s),/haiku/i.test(e.id)&&(n.compat={supportsEagerToolInputStreaming:!1}),n}function ee(e=3e5){let t=0;return{async run(n,r=Date.now()){if(r<t)return null;let i=null;try{i=await n()}catch(e){console.debug(`[silent-renew-backoff] renew threw:`,e instanceof Error?e.message:String(e)),i=null}return t=i?0:r+e,i},inCooldown(e=Date.now()){return e<t}}}const S=Object.assign({"/packages/webapp/providers/adobe-config.json":m})[`/packages/webapp/providers/adobe-config.json`]??{clientId:``,proxyEndpoint:``,scopes:`openid,profile,email`};function C(){let t=e(`adobe`);if(t)return t.replace(/\/$/,``);if(S.proxyEndpoint)return S.proxyEndpoint.replace(/\/$/,``);throw Error(`Adobe proxy endpoint not configured — set it in Settings or adobe-config.json`)}const w=new Map,T=new Map,E=`slicc-adobe-models`;function D(e){try{localStorage.setItem(E,JSON.stringify(e))}catch{}}async function O(e){let t=w.get(e);if(t)return t;try{let t=await fetch(`${e}/v1/config`,{headers:{[W]:`3.40.0`}});if(t.ok){let n=await t.json();return w.set(e,n),n}console.warn(`[adobe] Proxy /v1/config returned ${t.status}, falling back to build-time config`)}catch(e){console.warn(`[adobe] Failed to fetch proxy config:`,e instanceof Error?e.message:String(e))}let n={};return w.set(e,n),n}function k(e){let t=e.clientId||S.clientId;if(!t)throw Error(`Could not determine IMS client ID — proxy /v1/config did not return one and adobe-config.json is empty`);return t}function A(e){return e.scopes||S.scopes}function j(e){return e.imsEnvironment||S.imsEnvironment||`prod`}const M={prod:`https://ims-na1.adobelogin.com`,stg1:`https://ims-na1-stg1.adobelogin.com`};function N(e){return M[e??S.imsEnvironment??`prod`]??M.prod}const P=typeof chrome<`u`&&!!chrome?.runtime?.id;function F(){return f().find(e=>e.providerId===`adobe`)}async function I(e,t){try{let n=await fetch(`${N(t)}/ims/userinfo/v2`,{headers:{Authorization:`Bearer ${e}`}});if(n.ok){let e=await n.json();return{name:e.displayName||e.name||e.email,avatar:e.picture||e.avatar_url}}console.warn(`[adobe] User profile fetch returned ${n.status}, account will have no display name`)}catch(e){console.warn(`[adobe] Failed to fetch user profile:`,e instanceof Error?e.message:String(e))}return{}}function L(e){let t=e.indexOf(`#`);if(t<0)return null;let n=new URLSearchParams(e.slice(t+1)),r=n.get(`access_token`);return r?{accessToken:r,expiresIn:parseInt(n.get(`expires_in`)??`86400`,10)}:null}const R={id:`adobe`,name:`Adobe`,description:`Claude via Adobe — login with your Adobe ID`,requiresApiKey:!1,requiresBaseUrl:!S.proxyEndpoint,baseUrlPlaceholder:`https://your-proxy.example.com`,baseUrlDescription:`Anthropic-compatible proxy endpoint`,isOAuth:!0,defaultModelId:`sonnet`,oauthTokenDomains:[`ims-na1.adobelogin.com`,`ims-na1-stg1.adobelogin.com`,`*.adobelogin.com`,`*.adobe.io`,`firefall.adobe.io`,`admin.hlx.page`,`admin.hlx.live`,`admin.aem.page`,`admin.aem.live`],getModelIds:()=>{let e=e=>x(e,T.get(e.id));for(let t of Q.values())if(t.length){let n=t.map(t=>e({id:t.id,name:t.name??t.id}));return D(n),n}for(let t of w.values())if(t.models?.length)return t.models.map(t=>e(t));try{let e=localStorage.getItem(E);if(e){let t=JSON.parse(e);if(t.length)return t}}catch{}return[{id:`claude-sonnet-4-6`,name:`Claude Sonnet 4.6`}]},onOAuthLogin:async(e,t,n)=>{let r=C(),i=await O(r),a=k(i),o=A(i),s=j(i),l=P?null:await p(),u=P?S.extensionRedirectUri??`https://${chrome.runtime.id}.chromiumapp.org/`:S.redirectUri??`${l.origin}/auth/callback`,d=P?void 0:btoa(JSON.stringify({port:parseInt(new URL(l.href).port||`5710`,10),path:`/auth/callback`,nonce:crypto.randomUUID()})),f=d?JSON.parse(atob(d)).nonce:null,m=new URLSearchParams({client_id:a,scope:o,response_type:`token`,redirect_uri:u});d&&m.set(`state`,d),n?.forceReauth&&m.set(`prompt`,`login`);let h=await e(`${N(s)}/ims/authorize/v2?${m}`);if(!h)return;if(f&&h)try{if(new URL(h).searchParams.get(`nonce`)!==f){console.error(`[adobe] OAuth nonce mismatch — possible CSRF`);return}}catch(e){console.warn(`[adobe] Nonce check skipped (URL parse failed):`,e instanceof Error?e.message:String(e))}let g=L(h);if(!g){console.error(`[adobe] Could not extract token from redirect URL`);return}let _=await I(g.accessToken,s);await c({providerId:`adobe`,accessToken:g.accessToken,tokenExpiresAt:Date.now()+g.expiresIn*1e3,userName:_.name,userAvatar:_.avatar,baseUrl:S.proxyEndpoint?void 0:r}),await $().catch(e=>console.warn(`[adobe] Failed to fetch models after login:`,e instanceof Error?e.message:String(e))),t()},onOAuthLogout:async()=>{let e=F();if(e?.accessToken)try{let t=w.values().next().value??{},n=t.clientId||S.clientId,r=j(t);if(n){let t=await fetch(`${N(r)}/ims/revoke`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({token:e.accessToken,token_type_hint:`access_token`,client_id:n})});t.ok||console.warn(`[adobe] Token revocation returned ${t.status}, token may still be valid server-side`)}}catch(e){console.warn(`[adobe] Failed to revoke token:`,e instanceof Error?e.message:String(e))}await c({providerId:`adobe`,accessToken:``})},onSilentRenew:async()=>F()?.accessToken?U():null,refreshModels:async e=>{await $(e);let t=R.getModelIds?.();t?.length&&D(t)}};let z=null;const B=ee();async function V(){let e=F();if(!e?.accessToken)throw Error(`Not logged in to Adobe — please log in first`);if((e.tokenExpiresAt??0)-Date.now()>6e4)return e.accessToken;console.log(`[adobe] Token expired or expiring soon, attempting silent renewal...`);let t=await B.run(()=>U());if(t)return t;let n=F();if((n?.tokenExpiresAt??0)-Date.now()>0&&n?.accessToken)return n.accessToken;throw Error(`Adobe session expired — please log in again`)}function H(){let e=F();return e?.tokenExpiresAt?Date.now()>e.tokenExpiresAt-6e4:!0}async function U(){return typeof window>`u`?null:z||(z=(async()=>{try{let e=C(),t=await O(e),n=k(t),r=A(t),i=j(t),a=P?S.extensionRedirectUri??`https://${chrome.runtime.id}.chromiumapp.org/`:S.redirectUri??`${window.location.origin}/auth/callback`,o=P?void 0:btoa(JSON.stringify({port:parseInt(new URL(window.location.href).port||`5710`,10),path:`/auth/callback`,nonce:crypto.randomUUID()})),s=o?JSON.parse(atob(o)).nonce:null,l=new URLSearchParams({client_id:n,scope:r,response_type:`token`,redirect_uri:a,prompt:`none`});o&&l.set(`state`,o);let u=`${N(i)}/ims/authorize/v2?${l}`,{createOAuthLauncher:d}=await import(`./oauth-service-DA4rM4JC.js`),f=await d()(u,{interactive:!1});if(!f)return null;if(s&&f)try{if(new URL(f).searchParams.get(`nonce`)!==s)return console.error(`[adobe] OAuth nonce mismatch — possible CSRF`),null}catch(e){console.warn(`[adobe] Nonce check skipped (URL parse failed):`,e instanceof Error?e.message:String(e))}let p=L(f);if(!p)return null;let m=F();return await c({providerId:`adobe`,accessToken:p.accessToken,tokenExpiresAt:Date.now()+p.expiresIn*1e3,userName:m?.userName,userAvatar:m?.userAvatar,baseUrl:S.proxyEndpoint?void 0:e}),console.log(`[adobe] Token renewed silently`),await $().catch(e=>console.warn(`[adobe] Failed to refresh models after silent renewal:`,e instanceof Error?e.message:String(e))),p.accessToken}catch(e){return console.warn(`[adobe] Silent renewal error:`,e instanceof Error?e.message:String(e)),null}finally{z=null}})(),z)}const W=`X-Slicc-Version`;function G(e){let t={};if(e.headers)for(let[n,r]of Object.entries(e.headers))n.toLowerCase()!==`x-slicc-version`&&(t[n]=r);return t[W]=`3.40.0`,{...e,headers:t}}const K=new Set;function q(e,t){if(e.headers){for(let t of Object.keys(e.headers))if(t.toLowerCase()===`x-session-id`)return e}return K.has(t)||(K.add(t),console.warn(`[adobe] Missing X-Session-Id from ${t} — using daily fallback. Attach an X-Session-Id header at the call site (see scoop-context.ts streamWithSessionId or docs/pitfalls.md).`)),{...e,headers:{...e.headers??{},"X-Session-Id":n(`adobe-provider-fallback`)}}}function J(){K.clear()}function Y(e,t){return{type:`error`,reason:`error`,error:{role:`assistant`,content:[],api:`adobe-anthropic`,provider:`adobe`,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:`error`,errorMessage:t instanceof Error?t.message:String(t),timestamp:Date.now()}}}const X=(e,t,n={})=>{let o=a();return(async()=>{try{let a=await V();if(String(e.api).includes(`openai`)){let i=r({...e,baseUrl:`${C()}/v1`,api:`openai-completions`,compat:{...e.compat,supportsStore:!1,supportsDeveloperRole:!1}},t,G(q({...n,apiKey:a},`streamAdobe[openai]`)));for await(let e of i)o.push(e)}else{let r=i({...e,baseUrl:C(),api:`anthropic-messages`},t,G(q(b(e,s(e.id,e.name,{...n,apiKey:a})),`streamAdobe[anthropic]`)));for await(let e of r)o.push(e)}o.end()}catch(t){console.error(`[adobe] Stream error:`,t instanceof Error?t.message:String(t)),o.push(Y(e,t)),o.end()}})(),o},Z=(e,n,r)=>{let i=a();return(async()=>{try{let a=await V();if(String(e.api).includes(`openai`)){let t=l({...e,baseUrl:`${C()}/v1`,api:`openai-completions`,compat:{...e.compat,supportsStore:!1,supportsDeveloperRole:!1}},n,G(q({...r,apiKey:a},`streamSimpleAdobe[openai]`)));for await(let e of t)i.push(e)}else{let o=t({...e,baseUrl:C(),api:`anthropic-messages`},n,G(q(b(e,s(e.id,e.name,{...r,apiKey:a})),`streamSimpleAdobe[anthropic]`)));for await(let e of o)i.push(e)}i.end()}catch(t){console.error(`[adobe] Stream error:`,t instanceof Error?t.message:String(t)),i.push(Y(e,t)),i.end()}})(),i};async function te(e){try{let t=e??await V(),n=C(),r=await fetch(`${n}/v1/models`,{headers:{Authorization:`Bearer ${t}`,[W]:`3.40.0`}});if(r.ok){let e=await r.json();if(e.data?.length){for(let t of e.data){let e={id:t.id,name:t.name};t.api!==void 0&&(e.api=t.api),t.context_window!==void 0&&(e.context_window=t.context_window),t.max_tokens!==void 0&&(e.max_tokens=t.max_tokens),t.reasoning!==void 0&&(e.reasoning=t.reasoning),t.input!==void 0&&(e.input=t.input),T.set(t.id,e)}let t=new Map;for(let e of d())try{for(let n of o(e))t.set(n.id,n)}catch{}return e.data.map(e=>{let r=t.get(e.id),i=`adobe-${e.api===`openai`?`openai`:`anthropic`}`;return r?{...r,provider:`adobe`,api:i}:{id:e.id,name:e.name??e.id,provider:`adobe`,api:i,baseUrl:n,contextWindow:2e5,maxTokens:16384,input:[`text`,`image`],cost:{input:0,output:0,cacheRead:0,cacheWrite:0},inputCost:0,outputCost:0,cacheReadCost:0,cacheWriteCost:0,reasoning:!0}})}}else console.warn(`[adobe] Proxy /v1/models returned ${r.status}, falling back to Anthropic models`)}catch(e){console.warn(`[adobe] Failed to fetch proxy models:`,e instanceof Error?e.message:String(e))}return null}const Q=new Map;function ne(){return o(`anthropic`).map(e=>({...e,provider:`adobe`,api:`adobe-anthropic`}))}async function $(e){let t=C(),n=Q.get(t);if(n)return n;let r=await te(e);return r?(Q.set(t,r),r):ne()}function re(){u({api:`adobe-anthropic`,stream:X,streamSimple:Z}),u({api:`adobe-openai`,stream:X,streamSimple:Z})}export{J as __resetAdobeSessionIdWarningCacheForTests,R as config,$ as getAdobeModels,V as getValidAccessToken,H as isTokenExpired,re as register};

package/dist/ui/assets/{adobe-EVDv-oJe.js → adobe-PH-jjYjF.js}

@@ -1,2 +1,2 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/oauth-service-D7FIq6-6.js","assets/main-D7lo-Iw7.js","assets/modulepreload-polyfill-Dezn_h7o.js","assets/main-D683Koa8.css"])))=>i.map(i=>d[i]);
-import{Ft as e,Gt as t,Ht as n,Nt as r,Rt as i,Ut as a,Wt as o,f as s,g as c,jt as l,kt as u,n as d,r as f,s as p}from"./main-D7lo-Iw7.js";import{getOAuthPageOrigin as m}from"./oauth-service-D7FIq6-6.js";var h={proxyEndpoint:`https://adobe-llm-proxy.paolo-moz.workers.dev`,redirectUri:`https://www.sliccy.ai/auth/callback`,extensionRedirectUri:`https://akjjllgokmbgpbdbmafpiefnhidlmbgf.chromiumapp.org/adobe`},g=[`claude-opus-4-8`,`opus-4-8`];function _(e,t){return(t?[e,t]:[e]).flatMap(e=>{let t=e.toLowerCase();return[t,t.replace(/[\s_.:]+/g,`-`)]})}function v(e,t){return _(e,t).some(e=>g.some(t=>e.includes(t)))}function y(e,t){let n=e?t?.[e]:void 0;if(typeof n==`string`)return n;switch(e){case`minimal`:case`low`:return`low`;case`medium`:return`medium`;case`xhigh`:return`xhigh`;default:return`high`}}function ee(e,t){return async(n,r)=>{let i=t?await t(n,r)??n:n,a=i.thinking;return a&&a.type===`enabled`&&(i.thinking={type:`adaptive`,...a.display===void 0?{}:{display:a.display}},i.output_config={...i.output_config??{},effort:e}),i}}function b(e,t){if(!v(e.id,e.name))return t;let n=t,r=n.effort??y(n.reasoning,e.thinkingLevelMap);return{...t,onPayload:ee(r,n.onPayload)}}function x(e,t){let n={id:e.id,name:e.name??e.id},r=t?.api??e.api,i=t?.context_window??e.context_window,a=t?.max_tokens??e.max_tokens,o=t?.reasoning??e.reasoning,s=t?.input??e.input;return r&&(n.api=r),i!==void 0&&(n.context_window=i),a!==void 0&&(n.max_tokens=a),o!==void 0&&(n.reasoning=o),s&&(n.input=s),/haiku/i.test(e.id)&&(n.compat={supportsEagerToolInputStreaming:!1}),n}var S=5*6e4;function C(e=S){let t=0;return{async run(n,r=Date.now()){if(r<t)return null;let i=null;try{i=await n()}catch(e){console.debug(`[silent-renew-backoff] renew threw:`,e instanceof Error?e.message:String(e)),i=null}return t=i?0:r+e,i},inCooldown(e=Date.now()){return e<t}}}var w=Object.assign({"/packages/webapp/providers/adobe-config.json":h})[`/packages/webapp/providers/adobe-config.json`]??{clientId:``,proxyEndpoint:``,scopes:`openid,profile,email`};function T(){let e=p(`adobe`);if(e)return e.replace(/\/$/,``);if(w.proxyEndpoint)return w.proxyEndpoint.replace(/\/$/,``);throw Error(`Adobe proxy endpoint not configured — set it in Settings or adobe-config.json`)}var E=new Map,D=new Map,O=`slicc-adobe-models`;function k(e){try{localStorage.setItem(O,JSON.stringify(e))}catch{}}async function A(e){let t=E.get(e);if(t)return t;try{let t=await fetch(`${e}/v1/config`,{headers:{[G]:`3.39.2`}});if(t.ok){let n=await t.json();return E.set(e,n),n}console.warn(`[adobe] Proxy /v1/config returned ${t.status}, falling back to build-time config`)}catch(e){console.warn(`[adobe] Failed to fetch proxy config:`,e instanceof Error?e.message:String(e))}let n={};return E.set(e,n),n}function j(e){let t=e.clientId||w.clientId;if(!t)throw Error(`Could not determine IMS client ID — proxy /v1/config did not return one and adobe-config.json is empty`);return t}function M(e){return e.scopes||w.scopes}function N(e){return e.imsEnvironment||w.imsEnvironment||`prod`}var P={prod:`https://ims-na1.adobelogin.com`,stg1:`https://ims-na1-stg1.adobelogin.com`};function F(e){return P[e??w.imsEnvironment??`prod`]??P.prod}var I=typeof chrome<`u`&&!!chrome?.runtime?.id;function L(){return f().find(e=>e.providerId===`adobe`)}async function R(e,t){try{let n=await fetch(`${F(t)}/ims/userinfo/v2`,{headers:{Authorization:`Bearer ${e}`}});if(n.ok){let e=await n.json();return{name:e.displayName||e.name||e.email,avatar:e.picture||e.avatar_url}}console.warn(`[adobe] User profile fetch returned ${n.status}, account will have no display name`)}catch(e){console.warn(`[adobe] Failed to fetch user profile:`,e instanceof Error?e.message:String(e))}return{}}function z(e){let t=e.indexOf(`#`);if(t<0)return null;let n=new URLSearchParams(e.slice(t+1)),r=n.get(`access_token`);return r?{accessToken:r,expiresIn:parseInt(n.get(`expires_in`)??`86400`,10)}:null}var B={id:`adobe`,name:`Adobe`,description:`Claude via Adobe — login with your Adobe ID`,requiresApiKey:!1,requiresBaseUrl:!w.proxyEndpoint,baseUrlPlaceholder:`https://your-proxy.example.com`,baseUrlDescription:`Anthropic-compatible proxy endpoint`,isOAuth:!0,defaultModelId:`sonnet`,oauthTokenDomains:[`ims-na1.adobelogin.com`,`ims-na1-stg1.adobelogin.com`,`*.adobelogin.com`,`*.adobe.io`,`firefall.adobe.io`,`admin.hlx.page`,`admin.hlx.live`,`admin.aem.page`,`admin.aem.live`],getModelIds:()=>{let e=e=>x(e,D.get(e.id));for(let t of Q.values())if(t.length){let n=t.map(t=>e({id:t.id,name:t.name??t.id}));return k(n),n}for(let t of E.values())if(t.models?.length)return t.models.map(t=>e(t));try{let e=localStorage.getItem(O);if(e){let t=JSON.parse(e);if(t.length)return t}}catch{}return[{id:`claude-sonnet-4-6`,name:`Claude Sonnet 4.6`}]},onOAuthLogin:async(e,t,n)=>{let r=T(),i=await A(r),a=j(i),o=M(i),c=N(i),l=I?null:await m(),u=I?w.extensionRedirectUri??`https://${chrome.runtime.id}.chromiumapp.org/`:w.redirectUri??`${l.origin}/auth/callback`,d=I?void 0:btoa(JSON.stringify({port:parseInt(new URL(l.href).port||`5710`,10),path:`/auth/callback`,nonce:crypto.randomUUID()})),f=d?JSON.parse(atob(d)).nonce:null,p=new URLSearchParams({client_id:a,scope:o,response_type:`token`,redirect_uri:u});d&&p.set(`state`,d),n?.forceReauth&&p.set(`prompt`,`login`);let h=await e(`${F(c)}/ims/authorize/v2?${p}`);if(!h)return;if(f&&h)try{if(new URL(h).searchParams.get(`nonce`)!==f){console.error(`[adobe] OAuth nonce mismatch — possible CSRF`);return}}catch(e){console.warn(`[adobe] Nonce check skipped (URL parse failed):`,e instanceof Error?e.message:String(e))}let g=z(h);if(!g){console.error(`[adobe] Could not extract token from redirect URL`);return}let _=await R(g.accessToken,c);await s({providerId:`adobe`,accessToken:g.accessToken,tokenExpiresAt:Date.now()+g.expiresIn*1e3,userName:_.name,userAvatar:_.avatar,baseUrl:w.proxyEndpoint?void 0:r}),await $().catch(e=>console.warn(`[adobe] Failed to fetch models after login:`,e instanceof Error?e.message:String(e))),t()},onOAuthLogout:async()=>{let e=L();if(e?.accessToken)try{let t=E.values().next().value??{},n=t.clientId||w.clientId,r=N(t);if(n){let t=await fetch(`${F(r)}/ims/revoke`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({token:e.accessToken,token_type_hint:`access_token`,client_id:n})});t.ok||console.warn(`[adobe] Token revocation returned ${t.status}, token may still be valid server-side`)}}catch(e){console.warn(`[adobe] Failed to revoke token:`,e instanceof Error?e.message:String(e))}await s({providerId:`adobe`,accessToken:``})},onSilentRenew:async()=>L()?.accessToken?W():null,refreshModels:async e=>{await $(e);let t=B.getModelIds?.();t?.length&&k(t)}},V=null,H=C();async function U(){let e=L();if(!e?.accessToken)throw Error(`Not logged in to Adobe — please log in first`);if((e.tokenExpiresAt??0)-Date.now()>6e4)return e.accessToken;console.log(`[adobe] Token expired or expiring soon, attempting silent renewal...`);let t=await H.run(()=>W());if(t)return t;let n=L();if((n?.tokenExpiresAt??0)-Date.now()>0&&n?.accessToken)return n.accessToken;throw Error(`Adobe session expired — please log in again`)}function te(){let e=L();return e?.tokenExpiresAt?Date.now()>e.tokenExpiresAt-6e4:!0}async function W(){return typeof window>`u`?null:V||(V=(async()=>{try{let e=T(),t=await A(e),n=j(t),r=M(t),i=N(t),a=I?w.extensionRedirectUri??`https://${chrome.runtime.id}.chromiumapp.org/`:w.redirectUri??`${window.location.origin}/auth/callback`,c=I?void 0:btoa(JSON.stringify({port:parseInt(new URL(window.location.href).port||`5710`,10),path:`/auth/callback`,nonce:crypto.randomUUID()})),l=c?JSON.parse(atob(c)).nonce:null,u=new URLSearchParams({client_id:n,scope:r,response_type:`token`,redirect_uri:a,prompt:`none`});c&&u.set(`state`,c);let d=`${F(i)}/ims/authorize/v2?${u}`,{createOAuthLauncher:f}=await o(async()=>{let{createOAuthLauncher:e}=await import(`./oauth-service-D7FIq6-6.js`);return{createOAuthLauncher:e}},__vite__mapDeps([0,1,2,3])),p=await f()(d,{interactive:!1});if(!p)return null;if(l&&p)try{if(new URL(p).searchParams.get(`nonce`)!==l)return console.error(`[adobe] OAuth nonce mismatch — possible CSRF`),null}catch(e){console.warn(`[adobe] Nonce check skipped (URL parse failed):`,e instanceof Error?e.message:String(e))}let m=z(p);if(!m)return null;let h=L();return await s({providerId:`adobe`,accessToken:m.accessToken,tokenExpiresAt:Date.now()+m.expiresIn*1e3,userName:h?.userName,userAvatar:h?.userAvatar,baseUrl:w.proxyEndpoint?void 0:e}),console.log(`[adobe] Token renewed silently`),await $().catch(e=>console.warn(`[adobe] Failed to refresh models after silent renewal:`,e instanceof Error?e.message:String(e))),m.accessToken}catch(e){return console.warn(`[adobe] Silent renewal error:`,e instanceof Error?e.message:String(e)),null}finally{V=null}})(),V)}var G=`X-Slicc-Version`;function K(e){let t={},n=G.toLowerCase();if(e.headers)for(let[r,i]of Object.entries(e.headers))r.toLowerCase()!==n&&(t[r]=i);return t[G]=`3.39.2`,{...e,headers:t}}var ne=`adobe-provider-fallback`,q=new Set;function J(e,t){if(e.headers){for(let t of Object.keys(e.headers))if(t.toLowerCase()===`x-session-id`)return e}return q.has(t)||(q.add(t),console.warn(`[adobe] Missing X-Session-Id from ${t} — using daily fallback. Attach an X-Session-Id header at the call site (see scoop-context.ts streamWithSessionId or docs/pitfalls.md).`)),{...e,headers:{...e.headers??{},"X-Session-Id":d(ne)}}}function re(){q.clear()}function Y(e,t){return{type:`error`,reason:`error`,error:{role:`assistant`,content:[],api:`adobe-anthropic`,provider:`adobe`,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:`error`,errorMessage:t instanceof Error?t.message:String(t),timestamp:Date.now()}}}var X=(e,t,n={})=>{let r=i();return(async()=>{try{let i=await U();if(String(e.api).includes(`openai`)){let a=l({...e,baseUrl:`${T()}/v1`,api:`openai-completions`,compat:{...e.compat,supportsStore:!1,supportsDeveloperRole:!1}},t,K(J({...n,apiKey:i},`streamAdobe[openai]`)));for await(let e of a)r.push(e)}else{let a=u({...e,baseUrl:T(),api:`anthropic-messages`},t,K(J(b(e,c(e.id,e.name,{...n,apiKey:i})),`streamAdobe[anthropic]`)));for await(let e of a)r.push(e)}r.end()}catch(t){console.error(`[adobe] Stream error:`,t instanceof Error?t.message:String(t)),r.push(Y(e,t)),r.end()}})(),r},Z=(t,n,a)=>{let o=i();return(async()=>{try{let i=await U();if(String(t.api).includes(`openai`)){let r=e({...t,baseUrl:`${T()}/v1`,api:`openai-completions`,compat:{...t.compat,supportsStore:!1,supportsDeveloperRole:!1}},n,K(J({...a,apiKey:i},`streamSimpleAdobe[openai]`)));for await(let e of r)o.push(e)}else{let e=r({...t,baseUrl:T(),api:`anthropic-messages`},n,K(J(b(t,c(t.id,t.name,{...a,apiKey:i})),`streamSimpleAdobe[anthropic]`)));for await(let t of e)o.push(t)}o.end()}catch(e){console.error(`[adobe] Stream error:`,e instanceof Error?e.message:String(e)),o.push(Y(t,e)),o.end()}})(),o};async function ie(e){try{let t=e??await U(),r=T(),i=await fetch(`${r}/v1/models`,{headers:{Authorization:`Bearer ${t}`,[G]:`3.39.2`}});if(i.ok){let e=await i.json();if(e.data?.length){for(let t of e.data){let e={id:t.id,name:t.name};t.api!==void 0&&(e.api=t.api),t.context_window!==void 0&&(e.context_window=t.context_window),t.max_tokens!==void 0&&(e.max_tokens=t.max_tokens),t.reasoning!==void 0&&(e.reasoning=t.reasoning),t.input!==void 0&&(e.input=t.input),D.set(t.id,e)}let t=new Map;for(let e of a())try{for(let r of n(e))t.set(r.id,r)}catch{}return e.data.map(e=>{let n=t.get(e.id),i=`adobe-${e.api===`openai`?`openai`:`anthropic`}`;return n?{...n,provider:`adobe`,api:i}:{id:e.id,name:e.name??e.id,provider:`adobe`,api:i,baseUrl:r,contextWindow:2e5,maxTokens:16384,input:[`text`,`image`],cost:{input:0,output:0,cacheRead:0,cacheWrite:0},inputCost:0,outputCost:0,cacheReadCost:0,cacheWriteCost:0,reasoning:!0}})}}else console.warn(`[adobe] Proxy /v1/models returned ${i.status}, falling back to Anthropic models`)}catch(e){console.warn(`[adobe] Failed to fetch proxy models:`,e instanceof Error?e.message:String(e))}return null}var Q=new Map;function ae(){return n(`anthropic`).map(e=>({...e,provider:`adobe`,api:`adobe-anthropic`}))}async function $(e){let t=T(),n=Q.get(t);if(n)return n;let r=await ie(e);return r?(Q.set(t,r),r):ae()}function oe(){t({api:`adobe-anthropic`,stream:X,streamSimple:Z}),t({api:`adobe-openai`,stream:X,streamSimple:Z})}export{re as __resetAdobeSessionIdWarningCacheForTests,B as config,$ as getAdobeModels,U as getValidAccessToken,te as isTokenExpired,oe as register};
+const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/oauth-service-zJNIoo1V.js","assets/main-KLdStgNy.js","assets/modulepreload-polyfill-Dezn_h7o.js","assets/main-D683Koa8.css"])))=>i.map(i=>d[i]);
+import{At as e,Gt as t,It as n,Kt as r,Mt as i,Pt as a,Ut as o,Wt as s,_ as c,c as l,i as u,p as d,r as f,zt as p}from"./main-KLdStgNy.js";import{getOAuthPageOrigin as m}from"./oauth-service-zJNIoo1V.js";var h={proxyEndpoint:`https://adobe-llm-proxy.paolo-moz.workers.dev`,redirectUri:`https://www.sliccy.ai/auth/callback`,extensionRedirectUri:`https://akjjllgokmbgpbdbmafpiefnhidlmbgf.chromiumapp.org/adobe`},g=[`claude-opus-4-8`,`opus-4-8`];function _(e,t){return(t?[e,t]:[e]).flatMap(e=>{let t=e.toLowerCase();return[t,t.replace(/[\s_.:]+/g,`-`)]})}function v(e,t){return _(e,t).some(e=>g.some(t=>e.includes(t)))}function y(e,t){let n=e?t?.[e]:void 0;if(typeof n==`string`)return n;switch(e){case`minimal`:case`low`:return`low`;case`medium`:return`medium`;case`xhigh`:return`xhigh`;default:return`high`}}function ee(e,t){return async(n,r)=>{let i=t?await t(n,r)??n:n,a=i.thinking;return a&&a.type===`enabled`&&(i.thinking={type:`adaptive`,...a.display===void 0?{}:{display:a.display}},i.output_config={...i.output_config??{},effort:e}),i}}function b(e,t){if(!v(e.id,e.name))return t;let n=t,r=n.effort??y(n.reasoning,e.thinkingLevelMap);return{...t,onPayload:ee(r,n.onPayload)}}function x(e,t){let n={id:e.id,name:e.name??e.id},r=t?.api??e.api,i=t?.context_window??e.context_window,a=t?.max_tokens??e.max_tokens,o=t?.reasoning??e.reasoning,s=t?.input??e.input;return r&&(n.api=r),i!==void 0&&(n.context_window=i),a!==void 0&&(n.max_tokens=a),o!==void 0&&(n.reasoning=o),s&&(n.input=s),/haiku/i.test(e.id)&&(n.compat={supportsEagerToolInputStreaming:!1}),n}var S=5*6e4;function C(e=S){let t=0;return{async run(n,r=Date.now()){if(r<t)return null;let i=null;try{i=await n()}catch(e){console.debug(`[silent-renew-backoff] renew threw:`,e instanceof Error?e.message:String(e)),i=null}return t=i?0:r+e,i},inCooldown(e=Date.now()){return e<t}}}var w=Object.assign({"/packages/webapp/providers/adobe-config.json":h})[`/packages/webapp/providers/adobe-config.json`]??{clientId:``,proxyEndpoint:``,scopes:`openid,profile,email`};function T(){let e=l(`adobe`);if(e)return e.replace(/\/$/,``);if(w.proxyEndpoint)return w.proxyEndpoint.replace(/\/$/,``);throw Error(`Adobe proxy endpoint not configured — set it in Settings or adobe-config.json`)}var E=new Map,D=new Map,O=`slicc-adobe-models`;function k(e){try{localStorage.setItem(O,JSON.stringify(e))}catch{}}async function A(e){let t=E.get(e);if(t)return t;try{let t=await fetch(`${e}/v1/config`,{headers:{[G]:`3.40.0`}});if(t.ok){let n=await t.json();return E.set(e,n),n}console.warn(`[adobe] Proxy /v1/config returned ${t.status}, falling back to build-time config`)}catch(e){console.warn(`[adobe] Failed to fetch proxy config:`,e instanceof Error?e.message:String(e))}let n={};return E.set(e,n),n}function j(e){let t=e.clientId||w.clientId;if(!t)throw Error(`Could not determine IMS client ID — proxy /v1/config did not return one and adobe-config.json is empty`);return t}function M(e){return e.scopes||w.scopes}function N(e){return e.imsEnvironment||w.imsEnvironment||`prod`}var P={prod:`https://ims-na1.adobelogin.com`,stg1:`https://ims-na1-stg1.adobelogin.com`};function F(e){return P[e??w.imsEnvironment??`prod`]??P.prod}var I=typeof chrome<`u`&&!!chrome?.runtime?.id;function L(){return u().find(e=>e.providerId===`adobe`)}async function R(e,t){try{let n=await fetch(`${F(t)}/ims/userinfo/v2`,{headers:{Authorization:`Bearer ${e}`}});if(n.ok){let e=await n.json();return{name:e.displayName||e.name||e.email,avatar:e.picture||e.avatar_url}}console.warn(`[adobe] User profile fetch returned ${n.status}, account will have no display name`)}catch(e){console.warn(`[adobe] Failed to fetch user profile:`,e instanceof Error?e.message:String(e))}return{}}function z(e){let t=e.indexOf(`#`);if(t<0)return null;let n=new URLSearchParams(e.slice(t+1)),r=n.get(`access_token`);return r?{accessToken:r,expiresIn:parseInt(n.get(`expires_in`)??`86400`,10)}:null}var B={id:`adobe`,name:`Adobe`,description:`Claude via Adobe — login with your Adobe ID`,requiresApiKey:!1,requiresBaseUrl:!w.proxyEndpoint,baseUrlPlaceholder:`https://your-proxy.example.com`,baseUrlDescription:`Anthropic-compatible proxy endpoint`,isOAuth:!0,defaultModelId:`sonnet`,oauthTokenDomains:[`ims-na1.adobelogin.com`,`ims-na1-stg1.adobelogin.com`,`*.adobelogin.com`,`*.adobe.io`,`firefall.adobe.io`,`admin.hlx.page`,`admin.hlx.live`,`admin.aem.page`,`admin.aem.live`],getModelIds:()=>{let e=e=>x(e,D.get(e.id));for(let t of Q.values())if(t.length){let n=t.map(t=>e({id:t.id,name:t.name??t.id}));return k(n),n}for(let t of E.values())if(t.models?.length)return t.models.map(t=>e(t));try{let e=localStorage.getItem(O);if(e){let t=JSON.parse(e);if(t.length)return t}}catch{}return[{id:`claude-sonnet-4-6`,name:`Claude Sonnet 4.6`}]},onOAuthLogin:async(e,t,n)=>{let r=T(),i=await A(r),a=j(i),o=M(i),s=N(i),c=I?null:await m(),l=I?w.extensionRedirectUri??`https://${chrome.runtime.id}.chromiumapp.org/`:w.redirectUri??`${c.origin}/auth/callback`,u=I?void 0:btoa(JSON.stringify({port:parseInt(new URL(c.href).port||`5710`,10),path:`/auth/callback`,nonce:crypto.randomUUID()})),f=u?JSON.parse(atob(u)).nonce:null,p=new URLSearchParams({client_id:a,scope:o,response_type:`token`,redirect_uri:l});u&&p.set(`state`,u),n?.forceReauth&&p.set(`prompt`,`login`);let h=await e(`${F(s)}/ims/authorize/v2?${p}`);if(!h)return;if(f&&h)try{if(new URL(h).searchParams.get(`nonce`)!==f){console.error(`[adobe] OAuth nonce mismatch — possible CSRF`);return}}catch(e){console.warn(`[adobe] Nonce check skipped (URL parse failed):`,e instanceof Error?e.message:String(e))}let g=z(h);if(!g){console.error(`[adobe] Could not extract token from redirect URL`);return}let _=await R(g.accessToken,s);await d({providerId:`adobe`,accessToken:g.accessToken,tokenExpiresAt:Date.now()+g.expiresIn*1e3,userName:_.name,userAvatar:_.avatar,baseUrl:w.proxyEndpoint?void 0:r}),await $().catch(e=>console.warn(`[adobe] Failed to fetch models after login:`,e instanceof Error?e.message:String(e))),t()},onOAuthLogout:async()=>{let e=L();if(e?.accessToken)try{let t=E.values().next().value??{},n=t.clientId||w.clientId,r=N(t);if(n){let t=await fetch(`${F(r)}/ims/revoke`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({token:e.accessToken,token_type_hint:`access_token`,client_id:n})});t.ok||console.warn(`[adobe] Token revocation returned ${t.status}, token may still be valid server-side`)}}catch(e){console.warn(`[adobe] Failed to revoke token:`,e instanceof Error?e.message:String(e))}await d({providerId:`adobe`,accessToken:``})},onSilentRenew:async()=>L()?.accessToken?W():null,refreshModels:async e=>{await $(e);let t=B.getModelIds?.();t?.length&&k(t)}},V=null,H=C();async function U(){let e=L();if(!e?.accessToken)throw Error(`Not logged in to Adobe — please log in first`);if((e.tokenExpiresAt??0)-Date.now()>6e4)return e.accessToken;console.log(`[adobe] Token expired or expiring soon, attempting silent renewal...`);let t=await H.run(()=>W());if(t)return t;let n=L();if((n?.tokenExpiresAt??0)-Date.now()>0&&n?.accessToken)return n.accessToken;throw Error(`Adobe session expired — please log in again`)}function te(){let e=L();return e?.tokenExpiresAt?Date.now()>e.tokenExpiresAt-6e4:!0}async function W(){return typeof window>`u`?null:V||(V=(async()=>{try{let e=T(),n=await A(e),r=j(n),i=M(n),a=N(n),o=I?w.extensionRedirectUri??`https://${chrome.runtime.id}.chromiumapp.org/`:w.redirectUri??`${window.location.origin}/auth/callback`,s=I?void 0:btoa(JSON.stringify({port:parseInt(new URL(window.location.href).port||`5710`,10),path:`/auth/callback`,nonce:crypto.randomUUID()})),c=s?JSON.parse(atob(s)).nonce:null,l=new URLSearchParams({client_id:r,scope:i,response_type:`token`,redirect_uri:o,prompt:`none`});s&&l.set(`state`,s);let u=`${F(a)}/ims/authorize/v2?${l}`,{createOAuthLauncher:f}=await t(async()=>{let{createOAuthLauncher:e}=await import(`./oauth-service-zJNIoo1V.js`);return{createOAuthLauncher:e}},__vite__mapDeps([0,1,2,3])),p=await f()(u,{interactive:!1});if(!p)return null;if(c&&p)try{if(new URL(p).searchParams.get(`nonce`)!==c)return console.error(`[adobe] OAuth nonce mismatch — possible CSRF`),null}catch(e){console.warn(`[adobe] Nonce check skipped (URL parse failed):`,e instanceof Error?e.message:String(e))}let m=z(p);if(!m)return null;let h=L();return await d({providerId:`adobe`,accessToken:m.accessToken,tokenExpiresAt:Date.now()+m.expiresIn*1e3,userName:h?.userName,userAvatar:h?.userAvatar,baseUrl:w.proxyEndpoint?void 0:e}),console.log(`[adobe] Token renewed silently`),await $().catch(e=>console.warn(`[adobe] Failed to refresh models after silent renewal:`,e instanceof Error?e.message:String(e))),m.accessToken}catch(e){return console.warn(`[adobe] Silent renewal error:`,e instanceof Error?e.message:String(e)),null}finally{V=null}})(),V)}var G=`X-Slicc-Version`;function K(e){let t={},n=G.toLowerCase();if(e.headers)for(let[r,i]of Object.entries(e.headers))r.toLowerCase()!==n&&(t[r]=i);return t[G]=`3.40.0`,{...e,headers:t}}var ne=`adobe-provider-fallback`,q=new Set;function J(e,t){if(e.headers){for(let t of Object.keys(e.headers))if(t.toLowerCase()===`x-session-id`)return e}return q.has(t)||(q.add(t),console.warn(`[adobe] Missing X-Session-Id from ${t} — using daily fallback. Attach an X-Session-Id header at the call site (see scoop-context.ts streamWithSessionId or docs/pitfalls.md).`)),{...e,headers:{...e.headers??{},"X-Session-Id":f(ne)}}}function re(){q.clear()}function Y(e,t){return{type:`error`,reason:`error`,error:{role:`assistant`,content:[],api:`adobe-anthropic`,provider:`adobe`,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:`error`,errorMessage:t instanceof Error?t.message:String(t),timestamp:Date.now()}}}var X=(t,n,r={})=>{let a=p();return(async()=>{try{let o=await U();if(String(t.api).includes(`openai`)){let e=i({...t,baseUrl:`${T()}/v1`,api:`openai-completions`,compat:{...t.compat,supportsStore:!1,supportsDeveloperRole:!1}},n,K(J({...r,apiKey:o},`streamAdobe[openai]`)));for await(let t of e)a.push(t)}else{let i=e({...t,baseUrl:T(),api:`anthropic-messages`},n,K(J(b(t,c(t.id,t.name,{...r,apiKey:o})),`streamAdobe[anthropic]`)));for await(let e of i)a.push(e)}a.end()}catch(e){console.error(`[adobe] Stream error:`,e instanceof Error?e.message:String(e)),a.push(Y(t,e)),a.end()}})(),a},Z=(e,t,r)=>{let i=p();return(async()=>{try{let o=await U();if(String(e.api).includes(`openai`)){let a=n({...e,baseUrl:`${T()}/v1`,api:`openai-completions`,compat:{...e.compat,supportsStore:!1,supportsDeveloperRole:!1}},t,K(J({...r,apiKey:o},`streamSimpleAdobe[openai]`)));for await(let e of a)i.push(e)}else{let n=a({...e,baseUrl:T(),api:`anthropic-messages`},t,K(J(b(e,c(e.id,e.name,{...r,apiKey:o})),`streamSimpleAdobe[anthropic]`)));for await(let e of n)i.push(e)}i.end()}catch(t){console.error(`[adobe] Stream error:`,t instanceof Error?t.message:String(t)),i.push(Y(e,t)),i.end()}})(),i};async function ie(e){try{let t=e??await U(),n=T(),r=await fetch(`${n}/v1/models`,{headers:{Authorization:`Bearer ${t}`,[G]:`3.40.0`}});if(r.ok){let e=await r.json();if(e.data?.length){for(let t of e.data){let e={id:t.id,name:t.name};t.api!==void 0&&(e.api=t.api),t.context_window!==void 0&&(e.context_window=t.context_window),t.max_tokens!==void 0&&(e.max_tokens=t.max_tokens),t.reasoning!==void 0&&(e.reasoning=t.reasoning),t.input!==void 0&&(e.input=t.input),D.set(t.id,e)}let t=new Map;for(let e of s())try{for(let n of o(e))t.set(n.id,n)}catch{}return e.data.map(e=>{let r=t.get(e.id),i=`adobe-${e.api===`openai`?`openai`:`anthropic`}`;return r?{...r,provider:`adobe`,api:i}:{id:e.id,name:e.name??e.id,provider:`adobe`,api:i,baseUrl:n,contextWindow:2e5,maxTokens:16384,input:[`text`,`image`],cost:{input:0,output:0,cacheRead:0,cacheWrite:0},inputCost:0,outputCost:0,cacheReadCost:0,cacheWriteCost:0,reasoning:!0}})}}else console.warn(`[adobe] Proxy /v1/models returned ${r.status}, falling back to Anthropic models`)}catch(e){console.warn(`[adobe] Failed to fetch proxy models:`,e instanceof Error?e.message:String(e))}return null}var Q=new Map;function ae(){return o(`anthropic`).map(e=>({...e,provider:`adobe`,api:`adobe-anthropic`}))}async function $(e){let t=T(),n=Q.get(t);if(n)return n;let r=await ie(e);return r?(Q.set(t,r),r):ae()}function oe(){r({api:`adobe-anthropic`,stream:X,streamSimple:Z}),r({api:`adobe-openai`,stream:X,streamSimple:Z})}export{re as __resetAdobeSessionIdWarningCacheForTests,B as config,$ as getAdobeModels,U as getValidAccessToken,te as isTokenExpired,oe as register};

package/dist/ui/assets/{agent-bridge-C_uLyvTI.js → agent-bridge-DDNenR2p.js}

@@ -1 +1 @@
-import{St as e}from"./main-D7lo-Iw7.js";var t=e(`agent-bridge`),n=`__slicc_agent`,r=`agent-spawn-request`;function i(){let e={spawn(e){return new Promise((t,n)=>{let i=globalThis.chrome?.runtime;if(!i||typeof i.sendMessage!=`function`){n(Error(`agent: chrome.runtime.sendMessage not available`));return}let a=e=>{let r=i.lastError;if(r){n(Error(r.message??`chrome.runtime error`));return}if(e==null){n(Error(`agent: empty response from offscreen bridge`));return}let a=e;if(!a.ok){n(Error(a.error??`agent: offscreen bridge error`));return}if(!a.result){n(Error(`agent: offscreen bridge returned no result`));return}t(a.result)};try{i.sendMessage({source:`panel`,payload:{type:r,options:e}},a)}catch(e){n(e instanceof Error?e:Error(String(e)))}})}};return globalThis[n]=e,t.info(`agent bridge proxy published on globalThis.__slicc_agent`),e}export{i as publishAgentBridgeProxy};
+import{Ct as e}from"./main-KLdStgNy.js";var t=e(`agent-bridge`),n=`__slicc_agent`,r=`agent-spawn-request`;function i(){let e={spawn(e){return new Promise((t,n)=>{let i=globalThis.chrome?.runtime;if(!i||typeof i.sendMessage!=`function`){n(Error(`agent: chrome.runtime.sendMessage not available`));return}let a=e=>{let r=i.lastError;if(r){n(Error(r.message??`chrome.runtime error`));return}if(e==null){n(Error(`agent: empty response from offscreen bridge`));return}let a=e;if(!a.ok){n(Error(a.error??`agent: offscreen bridge error`));return}if(!a.result){n(Error(`agent: offscreen bridge returned no result`));return}t(a.result)};try{i.sendMessage({source:`panel`,payload:{type:r,options:e}},a)}catch(e){n(e instanceof Error?e:Error(String(e)))}})}};return globalThis[n]=e,t.info(`agent bridge proxy published on globalThis.__slicc_agent`),e}export{i as publishAgentBridgeProxy};

package/dist/ui/assets/{agent-message-to-chat-CeS0fVHu.js → agent-message-to-chat-Cs1a90IF.js}

@@ -1,4 +1,4 @@
-import{ht as e}from"./kernel-worker-C_bNzCH6.js";const t=new Set([`webhook`,`cron`,`sprinkle`,`fswatch`,`session-reload`,`navigate`,`upgrade`,`scoop-notify`,`scoop-idle`,`scoop-wait`]);function n(e){return e!=null&&t.has(e)}function r(t,n={}){let{source:r=`cone`,idSeed:c=d,hiddenToolNames:l=e}=n,f=[],h=null,g=new Set;for(let e of t){if(i(e)){let t=s(e.content);if(t.length===0)continue;let n=p(t);for(let t of n){if(t.body.length===0&&t.sender==null)continue;let n=t.sender?m(t.sender):null,r={id:c(),role:`user`,content:t.body,timestamp:e.timestamp};n&&(r.source=`lick`,r.channel=n),f.push(r)}h=null;continue}if(a(e)){let t=s(e.content),n=u(e),i=[];for(let e of n)l.has(e.name)?g.add(e.id):i.push(e);let a={id:c(),role:`assistant`,content:t,timestamp:e.timestamp,source:r};i.length>0&&(a.toolCalls=i),f.push(a),h=a;continue}if(o(e)){if(g.has(e.toolCallId))continue;let t=h?.toolCalls?.find(t=>t.id===e.toolCallId);if(!t)continue;t.result=s(e.content),t.isError=e.isError}}return f}function i(e){return e.role===`user`}function a(e){return e.role===`assistant`}function o(e){return e.role===`toolResult`}function s(e){if(typeof e==`string`)return e;if(!Array.isArray(e))return``;let t=[];for(let n of e)c(n)&&t.push(n.text);return t.join(``)}function c(e){return e.type===`text`}function l(e){return e.type===`toolCall`}function u(e){if(!Array.isArray(e.content))return[];let t=[];for(let n of e.content)l(n)&&t.push({id:n.id,name:n.name,input:n.arguments});return t}function d(){return Date.now().toString(36)+Math.random().toString(36).slice(2,8)}function f(e){if(!e.startsWith(`[`))return null;let n=e.indexOf(`] `);if(n<=0||e.lastIndexOf(`
+import{ht as e}from"./kernel-worker-CIvIwZQg.js";const t=new Set([`webhook`,`cron`,`sprinkle`,`fswatch`,`session-reload`,`navigate`,`upgrade`,`scoop-notify`,`scoop-idle`,`scoop-wait`]);function n(e){return e!=null&&t.has(e)}function r(t,n={}){let{source:r=`cone`,idSeed:c=d,hiddenToolNames:l=e}=n,f=[],h=null,g=new Set;for(let e of t){if(i(e)){let t=s(e.content);if(t.length===0)continue;let n=p(t);for(let t of n){if(t.body.length===0&&t.sender==null)continue;let n=t.sender?m(t.sender):null,r={id:c(),role:`user`,content:t.body,timestamp:e.timestamp};n&&(r.source=`lick`,r.channel=n),f.push(r)}h=null;continue}if(a(e)){let t=s(e.content),n=u(e),i=[];for(let e of n)l.has(e.name)?g.add(e.id):i.push(e);let a={id:c(),role:`assistant`,content:t,timestamp:e.timestamp,source:r};i.length>0&&(a.toolCalls=i),f.push(a),h=a;continue}if(o(e)){if(g.has(e.toolCallId))continue;let t=h?.toolCalls?.find(t=>t.id===e.toolCallId);if(!t)continue;t.result=s(e.content),t.isError=e.isError}}return f}function i(e){return e.role===`user`}function a(e){return e.role===`assistant`}function o(e){return e.role===`toolResult`}function s(e){if(typeof e==`string`)return e;if(!Array.isArray(e))return``;let t=[];for(let n of e)c(n)&&t.push(n.text);return t.join(``)}function c(e){return e.type===`text`}function l(e){return e.type===`toolCall`}function u(e){if(!Array.isArray(e.content))return[];let t=[];for(let n of e.content)l(n)&&t.push({id:n.id,name:n.name,input:n.arguments});return t}function d(){return Date.now().toString(36)+Math.random().toString(36).slice(2,8)}function f(e){if(!e.startsWith(`[`))return null;let n=e.indexOf(`] `);if(n<=0||e.lastIndexOf(`
 `,n)!==-1)return null;let r=e.slice(n+2);if(r.startsWith(`User: `))return{sender:`User`,body:r.slice(6)};for(let e of t){let t=`${e}:`;if(!r.startsWith(t))continue;let n=r.indexOf(`
 `),i=n===-1?r.length:n,a=r.slice(0,i),o=-1,s=a.indexOf(`[`,t.length);if(s>t.length&&(o=a.lastIndexOf(`: `,s)),o<t.length&&(o=r.indexOf(`: `,t.length)),!(o<0||o>=i))return{sender:r.slice(0,o),body:r.slice(o+2)}}let i=r.indexOf(`
 `),a=i===-1?r.length:i,o=r.indexOf(`: `);if(o<=0||o>=a)return null;let s=r.slice(0,o);return s.includes(`