sliccy 6.232.2 → 6.233.0

package/dist/ui/assets/welcome-detection-DtBPdXpG.js

@@ -0,0 +1 @@
+import{n as e}from"./wc-onboarding-C2RS0W29.js";export{e as hasOnboardingFinalLickInHistory};

package/dist/ui/assets/whisper-session-O3Gzp4bw.js

@@ -0,0 +1,2 @@
+const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/speak-BX-VG7dD.js","assets/preload-helper-Czpn1I53.js","assets/logger-DDBAeTLF.js","assets/runtime-env-Dlaokqg1.js","assets/speech-assets-bridge-CFYafE89.js","assets/transformers-env-BCKpGSnX.js","assets/wc-shell-BcFO-uxW.js","assets/rolldown-runtime-Dd_uD5pT.js","assets/mime-types-D0xZwlMO.js","assets/base64-ELzoYfwP.js","assets/bridge-protocol-C52CnDIj.js","assets/account-store-8pdjPGXe.js","assets/core-Cx9N3lmn.js","assets/compat-BAGLwgqY.js","assets/models-Xc0Gclrk.js","assets/diagnostics-Cag7MsZI.js","assets/env-api-keys-BXRkymgV.js","assets/provider-env-CTOcDKrQ.js","assets/__vite-browser-external-5eBdwsFd.js","assets/openrouter.models-DHpsqCCC.js","assets/libesm-BypnjKEL.js","assets/feature-flags-DvsApnS-.js","assets/proxied-fetch-4VBgrEIu.js","assets/proxy-error-BSFYY7jj.js","assets/api-endpoint-DuEQRZ4g.js","assets/secret-topology-hMRoGGjt.js","assets/float-topology-C_iRKPQK.js","assets/secrets-bridge-client-D734Xx8G.js","assets/port-bridge-client-B-gpiOVR.js","assets/panel-rpc-accessor-B4BfPLSo.js","assets/image-markers-q8JQTtid.js","assets/tool-ui-eSQ1g2I1.js","assets/providers-DGOyFpbk.js","assets/stored-accounts-ChNHYF68.js","assets/bedrock-camp-compat-B1oHsbyo.js","assets/bedrock-camp-extra-models-BYrxX19D.js","assets/claude-model-version-DZmbk9E2.js","assets/telemetry-B0sKnLBU.js","assets/types-D8gIX-W-.js","assets/same-file-identity-DuEcSmPX.js","assets/icons-2DY2vYOc.js","assets/wc-shell-WkeczD9x.css","assets/shared-DSEuryGJ.js","assets/transformers.web-BBJR2ai3.js"])))=>i.map(i=>d[i]);
+import{t as e}from"./preload-helper-Czpn1I53.js";import{t}from"./logger-DDBAeTLF.js";import{a as n,n as r,o as i,r as a,t as o}from"./transformers-env-BCKpGSnX.js";var s=t(`speech:whisper`),c=null,l=`idle`,u=null,d=new Set;function f(){return l}function p(){return u}function m(e){return e&&d.add(e),c||=(l=`loading`,g().then(e=>(l=`ready`,h(),e),e=>{throw l=`failed`,c=null,s.error(`whisper load failed`,e),e})),c}function h(){e(async()=>{let{kokoroWarmup:e}=await import(`./speak-BX-VG7dD.js`);return{kokoroWarmup:e}},__vite__mapDeps([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42])).then(({kokoroWarmup:e})=>e()).catch(e=>s.warn(`kokoro warmup (chained after whisper) failed`,e))}async function g(){let{pipeline:t,env:c}=await e(async()=>{let{pipeline:e,env:t}=await import(`./transformers.web-BBJR2ai3.js`);return{pipeline:e,env:t}},__vite__mapDeps([43,7,1]));r(c),await o(n),await a();let l=i(),f=e=>{if(e?.file){if(e.status===`progress`)l.update(e.file,e.loaded??0,e.total??0);else if(e.status===`done`)l.complete(e.file);else return;u=l.snapshot();for(let e of d)e(u)}},p=async e=>await t(`automatic-speech-recognition`,n,{device:e,dtype:e===`webgpu`?`fp32`:`q8`,progress_callback:f}),m=typeof navigator<`u`&&`gpu`in navigator,h;if(m)try{h=await p(`webgpu`)}catch(e){s.warn(`whisper webgpu init failed; retrying on wasm`,e),h=await p(`wasm`)}else h=await p(`wasm`);return s.info(`whisper ready`,{model:n,device:m?`webgpu`:`wasm`}),{async transcribe(e,t){let n=performance.now(),r=await h(e,{chunk_length_s:30,task:`transcribe`,...t?.language?{language:t.language}:{}}),i=Array.isArray(r)?r.map(e=>e.text??``).join(` `):r.text??``;return s.info(`whisper transcribe`,{elapsedMs:Math.round(performance.now()-n),audioSeconds:Math.round(e.length/160)/100,numThreads:c.backends?.onnx?.wasm?.numThreads,device:m?`webgpu`:`wasm`}),i.trim()}}}var _=16e3;async function v(e){if(typeof AudioContext>`u`||typeof OfflineAudioContext>`u`)throw Error(`audio decoding requires a window/page realm (AudioContext unavailable)`);let t=new AudioContext,n;try{n=await t.decodeAudioData(e.slice(0))}finally{await t.close().catch(()=>{})}let r=Math.max(1,Math.ceil(n.duration*_)),i=new OfflineAudioContext(1,r,_),a=i.createBufferSource();return a.buffer=n,a.connect(i.destination),a.start(),(await i.startRendering()).getChannelData(0).slice(0)}var y=t(`speech:whisper-session`),b=2e3,x=500,S=5e3,C=3e4,w=(e,t,n)=>new Promise((r,i)=>{let a=setTimeout(()=>i(Error(`${n} timed out after ${t}ms`)),t);e.then(e=>{clearTimeout(a),r(e)},e=>{clearTimeout(a),i(e)})});function T(e){return e?.split(`-`)[0]?.toLowerCase()||void 0}async function E(e,t){let n;if(t.stream)n=t.stream;else{if(!navigator.mediaDevices?.getUserMedia)throw Error(`microphone capture unavailable in this realm`);n=await navigator.mediaDevices.getUserMedia({audio:t.deviceId&&t.deviceId!=="default"?{deviceId:{exact:t.deviceId}}:!0})}let r=new MediaRecorder(n),i=[],a=T(t.lang),o=!1,s=!1;r.ondataavailable=e=>{e.data.size>0&&i.push(e.data)};let c=async()=>{if(i.length===0)return``;let t=await v(await new Blob(i,{type:r.mimeType||`audio/webm`}).arrayBuffer());return e.transcribe(t,{language:a})},l=Promise.resolve(``),u=()=>{let e=l.catch(()=>``).then(()=>c());return l=e.catch(()=>``),e},d=setInterval(()=>{o||s||i.length===0||(o=!0,u().then(e=>{!s&&e&&t.onPartial?.(e)}).catch(e=>{y.warn(`partial transcription failed`,e)}).finally(()=>{o=!1}))},b),f=()=>{if(clearInterval(d),r.state!==`inactive`)try{r.stop()}catch{}for(let e of n.getTracks())e.stop()},p=()=>new Promise(e=>{if(r.state===`inactive`){e();return}r.onstop=()=>e();try{r.stop()}catch{e()}});return r.start(x),{async stop(){if(s)return``;s=!0,clearInterval(d);try{await w(p(),S,`recorder flush`);for(let e of n.getTracks())e.stop();return await w(u(),C,`transcription`)}catch(e){for(let e of n.getTracks())e.stop();let r=e instanceof Error?e.message:String(e);return t.onError?.(`transcription failed: ${r}`),``}},cancel(){s||(s=!0,f())}}}export{p as a,m as i,T as n,f as o,v as r,E as t};

package/dist/ui/assets/{xai-grok-DgGOq90R.js → xai-grok-DRR_8B5L.js}

@@ -1 +1 @@
-import{_ as e,r as t}from"./account-store-C8W_QB2_.js";import{a as n}from"./diagnostics-Cag7MsZI.js";import{a as r}from"./compat-nGhSz-U1.js";import{a as i}from"./core-ButDwsf2.js";import{c as a,i as o,r as s,s as c}from"./legacy-api-aliases--xyLjPgC.js";import{n as l}from"./pi-transcript-context-4pjVPiVC.js";import"./provider-settings-5llrPtIb.js";import{n as u,r as d}from"./bridge-token-required-BYgoMwr7.js";import{n as f,r as p,t as m}from"./pkce-hGf_TEnP.js";import{XaiErrorCode as h,XaiOAuthError as g}from"./xai-grok-errors-ByEMMSoz.js";function _(e){return typeof e==`object`&&!!e}function v(e){if(!_(e))return null;let t=_(e.config)?e.config:e,n=t.creditUsagePercent;if(typeof n!=`number`||!Number.isFinite(n))return null;let r=Math.min(1e3,Math.max(0,n)),i=_(t.currentPeriod)?t.currentPeriod:{},a=i.type,o=typeof a==`string`?a.replace(`USAGE_PERIOD_TYPE_`,``).toLowerCase():``,s=i.end??t.billingPeriodEnd,c=typeof s==`string`&&Number.isFinite(Date.parse(s))?s:void 0;return{percent:r,status:`ok`,window:o&&o!==`unspecified`?o:`billing`,...c?{resetsAt:c}:{}}}async function y(e,t,n={}){let r=new AbortController,i=setTimeout(()=>r.abort(),n.timeoutMs??8e3);try{let n=await t(`https://cli-chat-proxy.grok.com/v1/billing?format=credits`,{headers:{Authorization:`Bearer ${e}`},signal:r.signal}),{status:i}=n;if(i===404||i===501)return null;if(!n.ok)throw Error(`xAI Grok usage: ${i===401||i===403?`re-login required`:`failed`} (${i})`);let a=await n.text();if(a.length>65536)return null;try{return v(JSON.parse(a))}catch{return null}}finally{clearTimeout(i)}}const b=`xai-grok`,x=`https://auth.x.ai`,S=`${x}/oauth2/authorize`,C=`${x}/oauth2/token`,w=`b1a00492-073a-47ea-816f-4c329264a828`,T=`http://127.0.0.1:56121/callback`,E=`https://api.x.ai/v1`,D=`grok-4.7`,O=`${b}-openai`;function k(e){if(e.some(e=>e.id===D))return e;let t=e.find(e=>e.id===`grok-4.6`)??e.find(e=>e.api===`openai-responses`)??e[0];return t?[{...t,id:D,name:`Grok 4.7`,api:`openai-responses`,reasoning:!0,input:[`text`,`image`],cost:{input:2,output:6,cacheRead:.5,cacheWrite:0},contextWindow:5e5,maxTokens:5e5,thinkingLevelMap:{off:null,minimal:null,low:`low`,medium:`medium`,high:`high`,xhigh:`xhigh`,max:null}},...e]:e}function A(){return k(i(`xai`))}function j(e){return{id:e.id,name:e.name,api:`openai`,reasoning:e.reasoning,input:e.input,context_window:e.contextWindow,max_tokens:e.maxTokens,compat:e.compat,thinkingLevelMap:e.thinkingLevelMap,cost:e.cost}}function M(e){let t=A(),n=t.find(t=>t.id===e.id);if(!n&&(console.warn(`xAI model "${e.id}" is no longer in the pi-ai catalog; falling back to default "${D}"`),n=t.find(e=>e.id===D),!n))throw Error(`xAI default model "${D}" is not registered by pi-ai`);if(n.api!==`openai-responses`&&n.api!==`openai-completions`)throw Error(`Unsupported pi-ai API "${n.api}" for xAI model "${e.id}"`);return{...e,...n,baseUrl:E}}async function N(e,t){let n=new URLSearchParams({grant_type:`authorization_code`,code:e,redirect_uri:T,client_id:w,code_verifier:t}),r=await fetch(C,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:n});if(!r.ok)throw new g(`xAI token exchange failed: ${r.status} ${await r.text()}`,h.TOKEN_EXCHANGE_FAILED);let i=await r.json();if(!i.access_token)throw new g(`xAI token exchange did not return access_token.`,h.TOKEN_EXCHANGE_INVALID);return i}async function P(e){if(u())return null;try{let t=new URLSearchParams({grant_type:`refresh_token`,refresh_token:e,client_id:w}),n=await fetch(C,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:t});if(!n.ok){let e=await n.text();return d(n.status,e)||console.error(`[xai-grok] refresh failed:`,n.status,e),null}return await n.json()}catch(e){return console.error(`[xai-grok] refresh error:`,e instanceof Error?e.message:String(e)),null}}function F(){return t().find(e=>e.providerId===b)}async function I(){let t=F();if(!t?.accessToken)throw new g("Not signed in to xAI Grok — run /login or `oauth-token xai-grok`",h.AUTH_MISSING,!0);let n=t.tokenExpiresAt??0;if(n&&Date.now()+6e4<n)return t.accessToken;if(t.refreshToken){let n=await P(t.refreshToken);if(n?.access_token)return await e({providerId:b,accessToken:n.access_token,refreshToken:n.refresh_token??t.refreshToken,tokenExpiresAt:Date.now()+(n.expires_in??21600)*1e3,scopes:n.scope??t.scopes}),n.access_token}return t.accessToken}async function L(){if(!F()?.accessToken)throw Error(`xAI Grok budget: not signed in`);return y(await I(),fetch)}function R(e,t){return{type:`error`,reason:`error`,error:{role:`assistant`,content:[],api:O,provider:b,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:`error`,errorMessage:t instanceof Error?t.message:String(t),timestamp:Date.now()}}}function z(e,t){return t?{...e??{},"x-grok-conv-id":t}:e}function B(e){console.error(`[xai-grok] Stream error:`,e instanceof Error?e.message:String(e))}async function V(e,t,n,r){try{let i=await I(),a=r.sessionId,c=M(t),u={...r,apiKey:i,headers:z(r.headers,a)},d=c.api===`openai-responses`?o(c,l(n),u):s(c,l(n),u);for await(let t of d)e.push(t);e.end()}catch(n){B(n),e.push(R(t,n)),e.end()}}async function H(e,t,n,r){try{let i=await I(),o=r?.sessionId,s=M(t),u={...r,apiKey:i,headers:z(r?.headers,o)},d=s.api===`openai-responses`?a(s,l(n),u):c(s,l(n),u);for await(let t of d)e.push(t);e.end()}catch(n){B(n),e.push(R(t,n)),e.end()}}const U=(e,t,r={})=>{let i=n();return V(i,e,t,r).catch(B),i},W=(e,t,r)=>{let i=n();return H(i,e,t,r).catch(B),i},G={id:b,name:`xAI Grok (SuperGrok OAuth)`,description:`Grok via xAI OAuth — uses your SuperGrok subscription, no API key needed. Default model is Grok 4.7.`,requiresApiKey:!1,requiresBaseUrl:!1,isOAuth:!0,defaultModelId:D,oauthTokenDomains:[`api.x.ai`,`*.x.ai`,`auth.x.ai`,`accounts.x.ai`,`cli-chat-proxy.grok.com`],getModelIds:()=>A().map(j),getBudgetUsage:L,onOAuthLoginIntercepted:async(t,n,r)=>{let i=f(),a=await m(i),o=p(),s=p(),c=new URL(S);c.searchParams.set(`response_type`,`code`),c.searchParams.set(`client_id`,w),c.searchParams.set(`redirect_uri`,T),c.searchParams.set(`scope`,r?.scopes??`openid profile email offline_access grok-cli:access api:access`),c.searchParams.set(`code_challenge`,a),c.searchParams.set(`code_challenge_method`,`S256`),c.searchParams.set(`state`,o),c.searchParams.set(`nonce`,s),c.searchParams.set(`plan`,`generic`),c.searchParams.set(`referrer`,`slicc`);let l=await t({authorizeUrl:c.toString(),redirectUriPattern:`http://127.0.0.1:56121/*`,onCapture:`close`});if(!l)throw new g(`xAI OAuth login was cancelled or timed out`,h.CALLBACK_TIMEOUT);let u=new URL(l),d=u.searchParams.get(`code`),_=u.searchParams.get(`state`);if(!d)throw new g(`xAI OAuth redirect did not include a code`,h.CODE_MISSING);if(_!==o)throw new g(`xAI OAuth state mismatch — possible CSRF, aborting`,h.STATE_MISMATCH);let v=await N(d,i);await e({providerId:b,accessToken:v.access_token,refreshToken:v.refresh_token,tokenExpiresAt:Date.now()+(v.expires_in??21600)*1e3,baseUrl:E,scopes:v.scope}),n()},onOAuthLogout:async()=>{await e({providerId:b,accessToken:``})},onSilentRenew:async()=>{let t=F();if(!t?.refreshToken)return null;let n=await P(t.refreshToken);return n?.access_token?(await e({providerId:b,accessToken:n.access_token,refreshToken:n.refresh_token??t.refreshToken,tokenExpiresAt:Date.now()+(n.expires_in??21600)*1e3,scopes:n.scope??t.scopes}),n.access_token):null}};function K(){r({api:O,stream:U,streamSimple:W})}export{h as XaiErrorCode,g as XaiOAuthError,G as config,K as register};
+import{_ as e,r as t}from"./account-store-CYgyHiaa.js";import{a as n}from"./diagnostics-Cag7MsZI.js";import{a as r}from"./compat-nGhSz-U1.js";import{a as i}from"./core-C1m4D34S.js";import{c as a,i as o,r as s,s as c}from"./legacy-api-aliases--xyLjPgC.js";import{n as l}from"./pi-transcript-context-4pjVPiVC.js";import"./provider-settings-nWfCs5Ea.js";import{n as u,r as d}from"./bridge-token-required-BYgoMwr7.js";import{n as f,r as p,t as m}from"./pkce-hGf_TEnP.js";import{XaiErrorCode as h,XaiOAuthError as g}from"./xai-grok-errors-ByEMMSoz.js";function _(e){return typeof e==`object`&&!!e}function v(e){if(!_(e))return null;let t=_(e.config)?e.config:e,n=t.creditUsagePercent;if(typeof n!=`number`||!Number.isFinite(n))return null;let r=Math.min(1e3,Math.max(0,n)),i=_(t.currentPeriod)?t.currentPeriod:{},a=i.type,o=typeof a==`string`?a.replace(`USAGE_PERIOD_TYPE_`,``).toLowerCase():``,s=i.end??t.billingPeriodEnd,c=typeof s==`string`&&Number.isFinite(Date.parse(s))?s:void 0;return{percent:r,status:`ok`,window:o&&o!==`unspecified`?o:`billing`,...c?{resetsAt:c}:{}}}async function y(e,t,n={}){let r=new AbortController,i=setTimeout(()=>r.abort(),n.timeoutMs??8e3);try{let n=await t(`https://cli-chat-proxy.grok.com/v1/billing?format=credits`,{headers:{Authorization:`Bearer ${e}`},signal:r.signal}),{status:i}=n;if(i===404||i===501)return null;if(!n.ok)throw Error(`xAI Grok usage: ${i===401||i===403?`re-login required`:`failed`} (${i})`);let a=await n.text();if(a.length>65536)return null;try{return v(JSON.parse(a))}catch{return null}}finally{clearTimeout(i)}}const b=`xai-grok`,x=`https://auth.x.ai`,S=`${x}/oauth2/authorize`,C=`${x}/oauth2/token`,w=`b1a00492-073a-47ea-816f-4c329264a828`,T=`http://127.0.0.1:56121/callback`,E=`https://api.x.ai/v1`,D=`grok-4.7`,O=`${b}-openai`;function k(e){if(e.some(e=>e.id===D))return e;let t=e.find(e=>e.id===`grok-4.6`)??e.find(e=>e.api===`openai-responses`)??e[0];return t?[{...t,id:D,name:`Grok 4.7`,api:`openai-responses`,reasoning:!0,input:[`text`,`image`],cost:{input:2,output:6,cacheRead:.5,cacheWrite:0},contextWindow:5e5,maxTokens:5e5,thinkingLevelMap:{off:null,minimal:null,low:`low`,medium:`medium`,high:`high`,xhigh:`xhigh`,max:null}},...e]:e}function A(){return k(i(`xai`))}function j(e){return{id:e.id,name:e.name,api:`openai`,reasoning:e.reasoning,input:e.input,context_window:e.contextWindow,max_tokens:e.maxTokens,compat:e.compat,thinkingLevelMap:e.thinkingLevelMap,cost:e.cost}}function M(e){let t=A(),n=t.find(t=>t.id===e.id);if(!n&&(console.warn(`xAI model "${e.id}" is no longer in the pi-ai catalog; falling back to default "${D}"`),n=t.find(e=>e.id===D),!n))throw Error(`xAI default model "${D}" is not registered by pi-ai`);if(n.api!==`openai-responses`&&n.api!==`openai-completions`)throw Error(`Unsupported pi-ai API "${n.api}" for xAI model "${e.id}"`);return{...e,...n,baseUrl:E}}async function N(e,t){let n=new URLSearchParams({grant_type:`authorization_code`,code:e,redirect_uri:T,client_id:w,code_verifier:t}),r=await fetch(C,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:n});if(!r.ok)throw new g(`xAI token exchange failed: ${r.status} ${await r.text()}`,h.TOKEN_EXCHANGE_FAILED);let i=await r.json();if(!i.access_token)throw new g(`xAI token exchange did not return access_token.`,h.TOKEN_EXCHANGE_INVALID);return i}async function P(e){if(u())return null;try{let t=new URLSearchParams({grant_type:`refresh_token`,refresh_token:e,client_id:w}),n=await fetch(C,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:t});if(!n.ok){let e=await n.text();return d(n.status,e)||console.error(`[xai-grok] refresh failed:`,n.status,e),null}return await n.json()}catch(e){return console.error(`[xai-grok] refresh error:`,e instanceof Error?e.message:String(e)),null}}function F(){return t().find(e=>e.providerId===b)}async function I(){let t=F();if(!t?.accessToken)throw new g("Not signed in to xAI Grok — run /login or `oauth-token xai-grok`",h.AUTH_MISSING,!0);let n=t.tokenExpiresAt??0;if(n&&Date.now()+6e4<n)return t.accessToken;if(t.refreshToken){let n=await P(t.refreshToken);if(n?.access_token)return await e({providerId:b,accessToken:n.access_token,refreshToken:n.refresh_token??t.refreshToken,tokenExpiresAt:Date.now()+(n.expires_in??21600)*1e3,scopes:n.scope??t.scopes}),n.access_token}return t.accessToken}async function L(){if(!F()?.accessToken)throw Error(`xAI Grok budget: not signed in`);return y(await I(),fetch)}function R(e,t){return{type:`error`,reason:`error`,error:{role:`assistant`,content:[],api:O,provider:b,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:`error`,errorMessage:t instanceof Error?t.message:String(t),timestamp:Date.now()}}}function z(e,t){return t?{...e??{},"x-grok-conv-id":t}:e}function B(e){console.error(`[xai-grok] Stream error:`,e instanceof Error?e.message:String(e))}async function V(e,t,n,r){try{let i=await I(),a=r.sessionId,c=M(t),u={...r,apiKey:i,headers:z(r.headers,a)},d=c.api===`openai-responses`?o(c,l(n),u):s(c,l(n),u);for await(let t of d)e.push(t);e.end()}catch(n){B(n),e.push(R(t,n)),e.end()}}async function H(e,t,n,r){try{let i=await I(),o=r?.sessionId,s=M(t),u={...r,apiKey:i,headers:z(r?.headers,o)},d=s.api===`openai-responses`?a(s,l(n),u):c(s,l(n),u);for await(let t of d)e.push(t);e.end()}catch(n){B(n),e.push(R(t,n)),e.end()}}const U=(e,t,r={})=>{let i=n();return V(i,e,t,r).catch(B),i},W=(e,t,r)=>{let i=n();return H(i,e,t,r).catch(B),i},G={id:b,name:`xAI Grok (SuperGrok OAuth)`,description:`Grok via xAI OAuth — uses your SuperGrok subscription, no API key needed. Default model is Grok 4.7.`,requiresApiKey:!1,requiresBaseUrl:!1,isOAuth:!0,defaultModelId:D,oauthTokenDomains:[`api.x.ai`,`*.x.ai`,`auth.x.ai`,`accounts.x.ai`,`cli-chat-proxy.grok.com`],getModelIds:()=>A().map(j),getBudgetUsage:L,onOAuthLoginIntercepted:async(t,n,r)=>{let i=f(),a=await m(i),o=p(),s=p(),c=new URL(S);c.searchParams.set(`response_type`,`code`),c.searchParams.set(`client_id`,w),c.searchParams.set(`redirect_uri`,T),c.searchParams.set(`scope`,r?.scopes??`openid profile email offline_access grok-cli:access api:access`),c.searchParams.set(`code_challenge`,a),c.searchParams.set(`code_challenge_method`,`S256`),c.searchParams.set(`state`,o),c.searchParams.set(`nonce`,s),c.searchParams.set(`plan`,`generic`),c.searchParams.set(`referrer`,`slicc`);let l=await t({authorizeUrl:c.toString(),redirectUriPattern:`http://127.0.0.1:56121/*`,onCapture:`close`});if(!l)throw new g(`xAI OAuth login was cancelled or timed out`,h.CALLBACK_TIMEOUT);let u=new URL(l),d=u.searchParams.get(`code`),_=u.searchParams.get(`state`);if(!d)throw new g(`xAI OAuth redirect did not include a code`,h.CODE_MISSING);if(_!==o)throw new g(`xAI OAuth state mismatch — possible CSRF, aborting`,h.STATE_MISMATCH);let v=await N(d,i);await e({providerId:b,accessToken:v.access_token,refreshToken:v.refresh_token,tokenExpiresAt:Date.now()+(v.expires_in??21600)*1e3,baseUrl:E,scopes:v.scope}),n()},onOAuthLogout:async()=>{await e({providerId:b,accessToken:``})},onSilentRenew:async()=>{let t=F();if(!t?.refreshToken)return null;let n=await P(t.refreshToken);return n?.access_token?(await e({providerId:b,accessToken:n.access_token,refreshToken:n.refresh_token??t.refreshToken,tokenExpiresAt:Date.now()+(n.expires_in??21600)*1e3,scopes:n.scope??t.scopes}),n.access_token):null}};function K(){r({api:O,stream:U,streamSimple:W})}export{h as XaiErrorCode,g as XaiOAuthError,G as config,K as register};

package/dist/ui/assets/{xai-grok-B11VgjUo.js → xai-grok-DUHWrBsy.js}

@@ -1 +1 @@
-import{a as e}from"./core-4boN-CgI.js";import{a as t}from"./diagnostics-Cag7MsZI.js";import{a as n}from"./compat-BAGLwgqY.js";import{c as r,i,r as a,s as o}from"./legacy-api-aliases-BjgG1CsY.js";import{K as s,f as c}from"./account-store-B857f9Kw.js";import"./main-CxkrqswY.js";import{n as l}from"./pi-transcript-context-miZCMig3.js";import{n as u,r as d}from"./bridge-token-required-DMk2va9k.js";import{n as f,r as p,t as m}from"./pkce-hGf_TEnP.js";import{XaiErrorCode as h,XaiOAuthError as g}from"./xai-grok-errors-bnlIBeu-.js";var _=`https://cli-chat-proxy.grok.com/v1/billing?format=credits`,v=8e3,y=65536,b=1e3;function x(e){return typeof e==`object`&&!!e}function S(e){if(!x(e))return null;let t=x(e.config)?e.config:e,n=t.creditUsagePercent;if(typeof n!=`number`||!Number.isFinite(n))return null;let r=Math.min(b,Math.max(0,n)),i=x(t.currentPeriod)?t.currentPeriod:{},a=i.type,o=typeof a==`string`?a.replace(`USAGE_PERIOD_TYPE_`,``).toLowerCase():``,s=i.end??t.billingPeriodEnd,c=typeof s==`string`&&Number.isFinite(Date.parse(s))?s:void 0;return{percent:r,status:`ok`,window:o&&o!==`unspecified`?o:`billing`,...c?{resetsAt:c}:{}}}async function C(e,t,n={}){let r=new AbortController,i=setTimeout(()=>r.abort(),n.timeoutMs??v);try{let n=await t(_,{headers:{Authorization:`Bearer ${e}`},signal:r.signal}),{status:i}=n;if(i===404||i===501)return null;if(!n.ok)throw Error(`xAI Grok usage: ${i===401||i===403?`re-login required`:`failed`} (${i})`);let a=await n.text();if(a.length>y)return null;try{return S(JSON.parse(a))}catch{return null}}finally{clearTimeout(i)}}var w=`xai-grok`,T=`https://auth.x.ai`,E=`${T}/oauth2/authorize`,D=`${T}/oauth2/token`,O=`b1a00492-073a-47ea-816f-4c329264a828`,k=`openid profile email offline_access grok-cli:access api:access`,A=`http://127.0.0.1:56121/callback`,j=`http://127.0.0.1:56121/*`,M=`https://api.x.ai/v1`,N=`grok-4.7`,P=`${w}-openai`;function F(e){if(e.some(e=>e.id===N))return e;let t=e.find(e=>e.id===`grok-4.6`)??e.find(e=>e.api===`openai-responses`)??e[0];return t?[{...t,id:N,name:`Grok 4.7`,api:`openai-responses`,reasoning:!0,input:[`text`,`image`],cost:{input:2,output:6,cacheRead:.5,cacheWrite:0},contextWindow:5e5,maxTokens:5e5,thinkingLevelMap:{off:null,minimal:null,low:`low`,medium:`medium`,high:`high`,xhigh:`xhigh`,max:null}},...e]:e}function I(){return F(e(`xai`))}function L(e){return{id:e.id,name:e.name,api:`openai`,reasoning:e.reasoning,input:e.input,context_window:e.contextWindow,max_tokens:e.maxTokens,compat:e.compat,thinkingLevelMap:e.thinkingLevelMap,cost:e.cost}}function R(e){let t=I(),n=t.find(t=>t.id===e.id);if(!n&&(console.warn(`xAI model "${e.id}" is no longer in the pi-ai catalog; falling back to default "${N}"`),n=t.find(e=>e.id===N),!n))throw Error(`xAI default model "${N}" is not registered by pi-ai`);if(n.api!==`openai-responses`&&n.api!==`openai-completions`)throw Error(`Unsupported pi-ai API "${n.api}" for xAI model "${e.id}"`);return{...e,...n,baseUrl:M}}async function z(e,t){let n=new URLSearchParams({grant_type:`authorization_code`,code:e,redirect_uri:A,client_id:O,code_verifier:t}),r=await fetch(D,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:n});if(!r.ok)throw new g(`xAI token exchange failed: ${r.status} ${await r.text()}`,h.TOKEN_EXCHANGE_FAILED);let i=await r.json();if(!i.access_token)throw new g(`xAI token exchange did not return access_token.`,h.TOKEN_EXCHANGE_INVALID);return i}async function B(e){if(u())return null;try{let t=new URLSearchParams({grant_type:`refresh_token`,refresh_token:e,client_id:O}),n=await fetch(D,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:t});if(!n.ok){let e=await n.text();return d(n.status,e)||console.error(`[xai-grok] refresh failed:`,n.status,e),null}return await n.json()}catch(e){return console.error(`[xai-grok] refresh error:`,e instanceof Error?e.message:String(e)),null}}function V(){return c().find(e=>e.providerId===w)}async function H(){let e=V();if(!e?.accessToken)throw new g("Not signed in to xAI Grok — run /login or `oauth-token xai-grok`",h.AUTH_MISSING,!0);let t=e.tokenExpiresAt??0;if(t&&Date.now()+6e4<t)return e.accessToken;if(e.refreshToken){let t=await B(e.refreshToken);if(t?.access_token)return await s({providerId:w,accessToken:t.access_token,refreshToken:t.refresh_token??e.refreshToken,tokenExpiresAt:Date.now()+(t.expires_in??21600)*1e3,scopes:t.scope??e.scopes}),t.access_token}return e.accessToken}async function U(){if(!V()?.accessToken)throw Error(`xAI Grok budget: not signed in`);return C(await H(),fetch)}function W(e,t){return{type:`error`,reason:`error`,error:{role:`assistant`,content:[],api:P,provider:w,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:`error`,errorMessage:t instanceof Error?t.message:String(t),timestamp:Date.now()}}}function G(e,t){return t?{...e??{},"x-grok-conv-id":t}:e}function K(e){console.error(`[xai-grok] Stream error:`,e instanceof Error?e.message:String(e))}async function q(e,t,n,r){try{let o=await H(),s=r.sessionId,c=R(t),u={...r,apiKey:o,headers:G(r.headers,s)},d=c.api===`openai-responses`?i(c,l(n),u):a(c,l(n),u);for await(let t of d)e.push(t);e.end()}catch(n){K(n),e.push(W(t,n)),e.end()}}async function J(e,t,n,i){try{let a=await H(),s=i?.sessionId,c=R(t),u={...i,apiKey:a,headers:G(i?.headers,s)},d=c.api===`openai-responses`?r(c,l(n),u):o(c,l(n),u);for await(let t of d)e.push(t);e.end()}catch(n){K(n),e.push(W(t,n)),e.end()}}var Y=(e,n,r={})=>{let i=t();return q(i,e,n,r).catch(K),i},X=(e,n,r)=>{let i=t();return J(i,e,n,r).catch(K),i},Z={id:w,name:`xAI Grok (SuperGrok OAuth)`,description:`Grok via xAI OAuth — uses your SuperGrok subscription, no API key needed. Default model is Grok 4.7.`,requiresApiKey:!1,requiresBaseUrl:!1,isOAuth:!0,defaultModelId:N,oauthTokenDomains:[`api.x.ai`,`*.x.ai`,`auth.x.ai`,`accounts.x.ai`,`cli-chat-proxy.grok.com`],getModelIds:()=>I().map(L),getBudgetUsage:U,onOAuthLoginIntercepted:async(e,t,n)=>{let r=f(),i=await m(r),a=p(),o=p(),c=new URL(E);c.searchParams.set(`response_type`,`code`),c.searchParams.set(`client_id`,O),c.searchParams.set(`redirect_uri`,A),c.searchParams.set(`scope`,n?.scopes??k),c.searchParams.set(`code_challenge`,i),c.searchParams.set(`code_challenge_method`,`S256`),c.searchParams.set(`state`,a),c.searchParams.set(`nonce`,o),c.searchParams.set(`plan`,`generic`),c.searchParams.set(`referrer`,`slicc`);let l=await e({authorizeUrl:c.toString(),redirectUriPattern:j,onCapture:`close`});if(!l)throw new g(`xAI OAuth login was cancelled or timed out`,h.CALLBACK_TIMEOUT);let u=new URL(l),d=u.searchParams.get(`code`),_=u.searchParams.get(`state`);if(!d)throw new g(`xAI OAuth redirect did not include a code`,h.CODE_MISSING);if(_!==a)throw new g(`xAI OAuth state mismatch — possible CSRF, aborting`,h.STATE_MISMATCH);let v=await z(d,r);await s({providerId:w,accessToken:v.access_token,refreshToken:v.refresh_token,tokenExpiresAt:Date.now()+(v.expires_in??21600)*1e3,baseUrl:M,scopes:v.scope}),t()},onOAuthLogout:async()=>{await s({providerId:w,accessToken:``})},onSilentRenew:async()=>{let e=V();if(!e?.refreshToken)return null;let t=await B(e.refreshToken);return t?.access_token?(await s({providerId:w,accessToken:t.access_token,refreshToken:t.refresh_token??e.refreshToken,tokenExpiresAt:Date.now()+(t.expires_in??21600)*1e3,scopes:t.scope??e.scopes}),t.access_token):null}};function Q(){n({api:P,stream:Y,streamSimple:X})}export{h as XaiErrorCode,g as XaiOAuthError,Z as config,Q as register};
+import{a as e}from"./core-Cx9N3lmn.js";import{a as t}from"./diagnostics-Cag7MsZI.js";import{a as n}from"./compat-BAGLwgqY.js";import{c as r,i,r as a,s as o}from"./legacy-api-aliases-BjgG1CsY.js";import{W as s,u as c}from"./account-store-8pdjPGXe.js";import"./main-DE492KKE.js";import{n as l}from"./pi-transcript-context-miZCMig3.js";import{n as u,r as d}from"./bridge-token-required-DMk2va9k.js";import{n as f,r as p,t as m}from"./pkce-hGf_TEnP.js";import{XaiErrorCode as h,XaiOAuthError as g}from"./xai-grok-errors-bnlIBeu-.js";var _=`https://cli-chat-proxy.grok.com/v1/billing?format=credits`,v=8e3,y=65536,b=1e3;function x(e){return typeof e==`object`&&!!e}function S(e){if(!x(e))return null;let t=x(e.config)?e.config:e,n=t.creditUsagePercent;if(typeof n!=`number`||!Number.isFinite(n))return null;let r=Math.min(b,Math.max(0,n)),i=x(t.currentPeriod)?t.currentPeriod:{},a=i.type,o=typeof a==`string`?a.replace(`USAGE_PERIOD_TYPE_`,``).toLowerCase():``,s=i.end??t.billingPeriodEnd,c=typeof s==`string`&&Number.isFinite(Date.parse(s))?s:void 0;return{percent:r,status:`ok`,window:o&&o!==`unspecified`?o:`billing`,...c?{resetsAt:c}:{}}}async function C(e,t,n={}){let r=new AbortController,i=setTimeout(()=>r.abort(),n.timeoutMs??v);try{let n=await t(_,{headers:{Authorization:`Bearer ${e}`},signal:r.signal}),{status:i}=n;if(i===404||i===501)return null;if(!n.ok)throw Error(`xAI Grok usage: ${i===401||i===403?`re-login required`:`failed`} (${i})`);let a=await n.text();if(a.length>y)return null;try{return S(JSON.parse(a))}catch{return null}}finally{clearTimeout(i)}}var w=`xai-grok`,T=`https://auth.x.ai`,E=`${T}/oauth2/authorize`,D=`${T}/oauth2/token`,O=`b1a00492-073a-47ea-816f-4c329264a828`,k=`openid profile email offline_access grok-cli:access api:access`,A=`http://127.0.0.1:56121/callback`,j=`http://127.0.0.1:56121/*`,M=`https://api.x.ai/v1`,N=`grok-4.7`,P=`${w}-openai`;function F(e){if(e.some(e=>e.id===N))return e;let t=e.find(e=>e.id===`grok-4.6`)??e.find(e=>e.api===`openai-responses`)??e[0];return t?[{...t,id:N,name:`Grok 4.7`,api:`openai-responses`,reasoning:!0,input:[`text`,`image`],cost:{input:2,output:6,cacheRead:.5,cacheWrite:0},contextWindow:5e5,maxTokens:5e5,thinkingLevelMap:{off:null,minimal:null,low:`low`,medium:`medium`,high:`high`,xhigh:`xhigh`,max:null}},...e]:e}function I(){return F(e(`xai`))}function L(e){return{id:e.id,name:e.name,api:`openai`,reasoning:e.reasoning,input:e.input,context_window:e.contextWindow,max_tokens:e.maxTokens,compat:e.compat,thinkingLevelMap:e.thinkingLevelMap,cost:e.cost}}function R(e){let t=I(),n=t.find(t=>t.id===e.id);if(!n&&(console.warn(`xAI model "${e.id}" is no longer in the pi-ai catalog; falling back to default "${N}"`),n=t.find(e=>e.id===N),!n))throw Error(`xAI default model "${N}" is not registered by pi-ai`);if(n.api!==`openai-responses`&&n.api!==`openai-completions`)throw Error(`Unsupported pi-ai API "${n.api}" for xAI model "${e.id}"`);return{...e,...n,baseUrl:M}}async function z(e,t){let n=new URLSearchParams({grant_type:`authorization_code`,code:e,redirect_uri:A,client_id:O,code_verifier:t}),r=await fetch(D,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:n});if(!r.ok)throw new g(`xAI token exchange failed: ${r.status} ${await r.text()}`,h.TOKEN_EXCHANGE_FAILED);let i=await r.json();if(!i.access_token)throw new g(`xAI token exchange did not return access_token.`,h.TOKEN_EXCHANGE_INVALID);return i}async function B(e){if(u())return null;try{let t=new URLSearchParams({grant_type:`refresh_token`,refresh_token:e,client_id:O}),n=await fetch(D,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:t});if(!n.ok){let e=await n.text();return d(n.status,e)||console.error(`[xai-grok] refresh failed:`,n.status,e),null}return await n.json()}catch(e){return console.error(`[xai-grok] refresh error:`,e instanceof Error?e.message:String(e)),null}}function V(){return c().find(e=>e.providerId===w)}async function H(){let e=V();if(!e?.accessToken)throw new g("Not signed in to xAI Grok — run /login or `oauth-token xai-grok`",h.AUTH_MISSING,!0);let t=e.tokenExpiresAt??0;if(t&&Date.now()+6e4<t)return e.accessToken;if(e.refreshToken){let t=await B(e.refreshToken);if(t?.access_token)return await s({providerId:w,accessToken:t.access_token,refreshToken:t.refresh_token??e.refreshToken,tokenExpiresAt:Date.now()+(t.expires_in??21600)*1e3,scopes:t.scope??e.scopes}),t.access_token}return e.accessToken}async function U(){if(!V()?.accessToken)throw Error(`xAI Grok budget: not signed in`);return C(await H(),fetch)}function W(e,t){return{type:`error`,reason:`error`,error:{role:`assistant`,content:[],api:P,provider:w,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:`error`,errorMessage:t instanceof Error?t.message:String(t),timestamp:Date.now()}}}function G(e,t){return t?{...e??{},"x-grok-conv-id":t}:e}function K(e){console.error(`[xai-grok] Stream error:`,e instanceof Error?e.message:String(e))}async function q(e,t,n,r){try{let o=await H(),s=r.sessionId,c=R(t),u={...r,apiKey:o,headers:G(r.headers,s)},d=c.api===`openai-responses`?i(c,l(n),u):a(c,l(n),u);for await(let t of d)e.push(t);e.end()}catch(n){K(n),e.push(W(t,n)),e.end()}}async function J(e,t,n,i){try{let a=await H(),s=i?.sessionId,c=R(t),u={...i,apiKey:a,headers:G(i?.headers,s)},d=c.api===`openai-responses`?r(c,l(n),u):o(c,l(n),u);for await(let t of d)e.push(t);e.end()}catch(n){K(n),e.push(W(t,n)),e.end()}}var Y=(e,n,r={})=>{let i=t();return q(i,e,n,r).catch(K),i},X=(e,n,r)=>{let i=t();return J(i,e,n,r).catch(K),i},Z={id:w,name:`xAI Grok (SuperGrok OAuth)`,description:`Grok via xAI OAuth — uses your SuperGrok subscription, no API key needed. Default model is Grok 4.7.`,requiresApiKey:!1,requiresBaseUrl:!1,isOAuth:!0,defaultModelId:N,oauthTokenDomains:[`api.x.ai`,`*.x.ai`,`auth.x.ai`,`accounts.x.ai`,`cli-chat-proxy.grok.com`],getModelIds:()=>I().map(L),getBudgetUsage:U,onOAuthLoginIntercepted:async(e,t,n)=>{let r=f(),i=await m(r),a=p(),o=p(),c=new URL(E);c.searchParams.set(`response_type`,`code`),c.searchParams.set(`client_id`,O),c.searchParams.set(`redirect_uri`,A),c.searchParams.set(`scope`,n?.scopes??k),c.searchParams.set(`code_challenge`,i),c.searchParams.set(`code_challenge_method`,`S256`),c.searchParams.set(`state`,a),c.searchParams.set(`nonce`,o),c.searchParams.set(`plan`,`generic`),c.searchParams.set(`referrer`,`slicc`);let l=await e({authorizeUrl:c.toString(),redirectUriPattern:j,onCapture:`close`});if(!l)throw new g(`xAI OAuth login was cancelled or timed out`,h.CALLBACK_TIMEOUT);let u=new URL(l),d=u.searchParams.get(`code`),_=u.searchParams.get(`state`);if(!d)throw new g(`xAI OAuth redirect did not include a code`,h.CODE_MISSING);if(_!==a)throw new g(`xAI OAuth state mismatch — possible CSRF, aborting`,h.STATE_MISMATCH);let v=await z(d,r);await s({providerId:w,accessToken:v.access_token,refreshToken:v.refresh_token,tokenExpiresAt:Date.now()+(v.expires_in??21600)*1e3,baseUrl:M,scopes:v.scope}),t()},onOAuthLogout:async()=>{await s({providerId:w,accessToken:``})},onSilentRenew:async()=>{let e=V();if(!e?.refreshToken)return null;let t=await B(e.refreshToken);return t?.access_token?(await s({providerId:w,accessToken:t.access_token,refreshToken:t.refresh_token??e.refreshToken,tokenExpiresAt:Date.now()+(t.expires_in??21600)*1e3,scopes:t.scope??e.scopes}),t.access_token):null}};function Q(){n({api:P,stream:Y,streamSimple:X})}export{h as XaiErrorCode,g as XaiOAuthError,Z as config,Q as register};

package/dist/ui/index.html

@@ -5,7 +5,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>slicc</title>
     <link rel="icon" type="image/png" href="/logos/sliccy-color-1scoops-32x32.png" />
-    <script type="module" crossorigin src="/assets/main-CxkrqswY.js"></script>
+    <script type="module" crossorigin src="/assets/main-DE492KKE.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-Dd_uD5pT.js">
     <link rel="modulepreload" crossorigin href="/assets/modulepreload-polyfill-P2Xu9kJm.js">
     <link rel="modulepreload" crossorigin href="/assets/diagnostics-Cag7MsZI.js">
@@ -23,21 +23,22 @@
     <link rel="modulepreload" crossorigin href="/assets/proxy-error-BSFYY7jj.js">
     <link rel="modulepreload" crossorigin href="/assets/runtime-env-Dlaokqg1.js">
     <link rel="modulepreload" crossorigin href="/assets/api-endpoint-DuEQRZ4g.js">
-    <link rel="modulepreload" crossorigin href="/assets/proxied-fetch-Cplb-Tee.js">
-    <link rel="modulepreload" crossorigin href="/assets/float-topology-C9GjBEv-.js">
-    <link rel="modulepreload" crossorigin href="/assets/secret-topology-Dm_PZRZx.js">
-    <link rel="modulepreload" crossorigin href="/assets/port-bridge-client-D_erEovW.js">
-    <link rel="modulepreload" crossorigin href="/assets/secrets-bridge-client-CWv2_nw7.js">
+    <link rel="modulepreload" crossorigin href="/assets/proxied-fetch-4VBgrEIu.js">
+    <link rel="modulepreload" crossorigin href="/assets/float-topology-C_iRKPQK.js">
+    <link rel="modulepreload" crossorigin href="/assets/secret-topology-hMRoGGjt.js">
+    <link rel="modulepreload" crossorigin href="/assets/panel-rpc-accessor-B4BfPLSo.js">
+    <link rel="modulepreload" crossorigin href="/assets/port-bridge-client-B-gpiOVR.js">
+    <link rel="modulepreload" crossorigin href="/assets/secrets-bridge-client-D734Xx8G.js">
     <link rel="modulepreload" crossorigin href="/assets/image-markers-q8JQTtid.js">
     <link rel="modulepreload" crossorigin href="/assets/tool-ui-eSQ1g2I1.js">
-    <link rel="modulepreload" crossorigin href="/assets/core-4boN-CgI.js">
+    <link rel="modulepreload" crossorigin href="/assets/core-Cx9N3lmn.js">
     <link rel="modulepreload" crossorigin href="/assets/bridge-protocol-C52CnDIj.js">
-    <link rel="modulepreload" crossorigin href="/assets/providers-jygoVQBo.js">
-    <link rel="modulepreload" crossorigin href="/assets/panel-rpc-D3EPRnmw.js">
+    <link rel="modulepreload" crossorigin href="/assets/providers-DGOyFpbk.js">
+    <link rel="modulepreload" crossorigin href="/assets/stored-accounts-ChNHYF68.js">
     <link rel="modulepreload" crossorigin href="/assets/bedrock-camp-compat-B1oHsbyo.js">
     <link rel="modulepreload" crossorigin href="/assets/bedrock-camp-extra-models-BYrxX19D.js">
     <link rel="modulepreload" crossorigin href="/assets/claude-model-version-DZmbk9E2.js">
-    <link rel="modulepreload" crossorigin href="/assets/account-store-B857f9Kw.js">
+    <link rel="modulepreload" crossorigin href="/assets/account-store-8pdjPGXe.js">
     <link rel="modulepreload" crossorigin href="/assets/telemetry-B0sKnLBU.js">
     <link rel="modulepreload" crossorigin href="/assets/tray-follower-status-BAjnN7Ar.js">
     <link rel="modulepreload" crossorigin href="/assets/clipboard-eqmn97SP.js">

package/dist/ui/packages/webapp/index.html

@@ -5,7 +5,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>slicc</title>
     <link rel="icon" type="image/png" href="/logos/sliccy-color-1scoops-32x32.png" />
-    <script type="module" crossorigin src="/assets/main-CxkrqswY.js"></script>
+    <script type="module" crossorigin src="/assets/main-DE492KKE.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-Dd_uD5pT.js">
     <link rel="modulepreload" crossorigin href="/assets/modulepreload-polyfill-P2Xu9kJm.js">
     <link rel="modulepreload" crossorigin href="/assets/diagnostics-Cag7MsZI.js">
@@ -23,21 +23,22 @@
     <link rel="modulepreload" crossorigin href="/assets/proxy-error-BSFYY7jj.js">
     <link rel="modulepreload" crossorigin href="/assets/runtime-env-Dlaokqg1.js">
     <link rel="modulepreload" crossorigin href="/assets/api-endpoint-DuEQRZ4g.js">
-    <link rel="modulepreload" crossorigin href="/assets/proxied-fetch-Cplb-Tee.js">
-    <link rel="modulepreload" crossorigin href="/assets/float-topology-C9GjBEv-.js">
-    <link rel="modulepreload" crossorigin href="/assets/secret-topology-Dm_PZRZx.js">
-    <link rel="modulepreload" crossorigin href="/assets/port-bridge-client-D_erEovW.js">
-    <link rel="modulepreload" crossorigin href="/assets/secrets-bridge-client-CWv2_nw7.js">
+    <link rel="modulepreload" crossorigin href="/assets/proxied-fetch-4VBgrEIu.js">
+    <link rel="modulepreload" crossorigin href="/assets/float-topology-C_iRKPQK.js">
+    <link rel="modulepreload" crossorigin href="/assets/secret-topology-hMRoGGjt.js">
+    <link rel="modulepreload" crossorigin href="/assets/panel-rpc-accessor-B4BfPLSo.js">
+    <link rel="modulepreload" crossorigin href="/assets/port-bridge-client-B-gpiOVR.js">
+    <link rel="modulepreload" crossorigin href="/assets/secrets-bridge-client-D734Xx8G.js">
     <link rel="modulepreload" crossorigin href="/assets/image-markers-q8JQTtid.js">
     <link rel="modulepreload" crossorigin href="/assets/tool-ui-eSQ1g2I1.js">
-    <link rel="modulepreload" crossorigin href="/assets/core-4boN-CgI.js">
+    <link rel="modulepreload" crossorigin href="/assets/core-Cx9N3lmn.js">
     <link rel="modulepreload" crossorigin href="/assets/bridge-protocol-C52CnDIj.js">
-    <link rel="modulepreload" crossorigin href="/assets/providers-jygoVQBo.js">
-    <link rel="modulepreload" crossorigin href="/assets/panel-rpc-D3EPRnmw.js">
+    <link rel="modulepreload" crossorigin href="/assets/providers-DGOyFpbk.js">
+    <link rel="modulepreload" crossorigin href="/assets/stored-accounts-ChNHYF68.js">
     <link rel="modulepreload" crossorigin href="/assets/bedrock-camp-compat-B1oHsbyo.js">
     <link rel="modulepreload" crossorigin href="/assets/bedrock-camp-extra-models-BYrxX19D.js">
     <link rel="modulepreload" crossorigin href="/assets/claude-model-version-DZmbk9E2.js">
-    <link rel="modulepreload" crossorigin href="/assets/account-store-B857f9Kw.js">
+    <link rel="modulepreload" crossorigin href="/assets/account-store-8pdjPGXe.js">
     <link rel="modulepreload" crossorigin href="/assets/telemetry-B0sKnLBU.js">
     <link rel="modulepreload" crossorigin href="/assets/tray-follower-status-BAjnN7Ar.js">
     <link rel="modulepreload" crossorigin href="/assets/clipboard-eqmn97SP.js">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sliccy",
-  "version": "6.232.2",
+  "version": "6.233.0",
   "description": "Browser-based coding agent with thin CLI server",
   "license": "Apache-2.0",
   "type": "module",

package/dist/ui/assets/SKILL-B4YYagrM.js

@@ -1 +0,0 @@
-var e='---\nname: delegation\ndescription: |\n  Use this when deciding whether to do work yourself or delegate to a scoop, when\n  fanning out parallel scoops, or when picking models for sub-agents. Covers\n  scoop lifecycle (when to drop), parallel orchestration (`scoop_mute`,\n  `scoop_unmute`, `scoop_wait`), one-shot ephemeral sub-agents via the `agent`\n  shell command, and model selection. Read this BEFORE running `scoop_scoop` for\n  non-trivial work.\nallowed-tools: bash\n---\n\n# Delegation\n\nScoops do the heavy lifting; the cone orchestrates and synthesizes. This skill is about choosing how to delegate, not about administering scoops.\n\n## When to delegate\n\n**Default to delegation.** Parallel scoops almost always finish faster, and the cone\'s job is synthesis.\n\nDelegate when:\n\n- Multiple independent sources (scraping 3 sites = 3 scoops).\n- Time-consuming work that doesn\'t need direct oversight.\n- Work expressible as a clear, self-contained brief.\n\nDo it yourself when:\n\n- Single quick lookup (one page, one API call).\n- Real-time adaptation needed (navigating broken URLs).\n- Overhead of spawning exceeds benefit.\n\n## Brief for authority, not for execution\n\nThe most common delegation failure is **the cone doing too much pre-work before delegating**. The cone researches the topic, makes the design decisions, picks the approach, and then hands the scoop a pre-cooked plan to type out. This is bad on three axes:\n\n- **Pollutes the scoop\'s context.** The brief is bloated with conclusions the scoop now has to re-derive an opinion on, instead of facts it can act on.\n- **Strips the scoop of autonomy.** A scoop that\'s been told what to think can\'t push back on a bad call or notice a better path mid-task. You get a typist, not a collaborator.\n- **Wastes the cone\'s tokens.** The cone\'s strength is orchestration — picking the right scoops, synthesizing their outputs. Doing the research itself burns the cone\'s context on work that\'s parallelizable.\n\n**Heuristic: if the cone reads files, runs commands, or makes decisions before delegating, that should have been part of the scoop\'s brief.** Hand the scoop the question, the constraints, and the access — let it decide.\n\n| Bad (cone over-prepares)                                                                        | Good (scoop decides)                                                                                                                            |\n| ----------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- |\n| Cone reads 5 files, picks an approach, tells scoop "implement approach X in file Y."            | Scoop is told "the user wants Z; the relevant code is under `/workspace/src/`. Pick an approach and implement it."                              |\n| Cone scrapes 3 docs, summarizes, then asks scoop to "write a comparison based on this summary." | Scoop is told "compare libraries A, B, C for this use case. Their docs are at <urls>. Decide and write the comparison."                         |\n| Cone debugs a failure, isolates the bug, then asks scoop to "fix the off-by-one in line 42."    | Scoop is told "this command fails with `<output>`. Find and fix the bug." (Even better: a one-shot `agent` for cheap, deterministic bug-fixes.) |\n\nTwo carve-outs where pre-work IS the cone\'s job:\n\n1. **Routing decisions.** Picking which scoop gets which slice of a fan-out is orchestration, not pre-cooking.\n2. **Synthesis after the fact.** Reading scoop outputs to combine them is the cone\'s whole point.\n\nIf a scoop comes back with a wrong call, **drop it and re-spawn with a better brief** — don\'t feed a correction. Corrections compound the autonomy problem.\n\n## Scoop lifecycle\n\nDrop scoops when done — but **NEVER drop a scoop that owns a sprinkle**.\n\nDrop when:\n\n- Task completed and results synthesized.\n- Stuck or misbehaving (drop and re-spawn with a better brief).\n\nNever drop when:\n\n- It owns an open sprinkle (must stay alive for the sprinkle\'s lifetime).\n- Running a recurring/long-running task (feed watcher, webhook handler).\n- Work is still in progress (dropping loses all context).\n\n## Three delegation primitives\n\n| Primitive                    | Conversation             | Sprinkle ownership | Auto-cleanup      | When to use                                                 |\n| ---------------------------- | ------------------------ | ------------------ | ----------------- | ----------------------------------------------------------- |\n| `scoop_scoop` + `feed_scoop` | Persistent (multi-turn)  | Yes                | No (`drop_scoop`) | Long-lived work; sprinkle owners; conversational follow-ups |\n| `scoop_wait` / `scoop_mute`  | Persistent (multi-turn)  | Yes                | No                | Parallel fan-out where you want one synthesis turn          |\n| `agent` (shell command)      | One-shot (single prompt) | No                 | Yes (on exit)     | Cheap, predictable, composable; no cone follow-up needed    |\n\n### `agent` — one-shot ephemeral sub-agents\n\n`agent` is a shell command that spawns a one-shot sub-scoop, feeds it a prompt, blocks until the agent loop completes, and prints the final message on stdout. Runs from any bash context (terminal, `feed_scoop` prompt, `.jsh` script, dip lick handler, sprinkle button handler).\n\n```\nagent <cwd> <allowed-commands> <prompt> [--model <id>] [--workspace-mode <mode>] [--read-only <paths>] [--background-after <s>]\n```\n\n- `<cwd>` — sole writable prefix (plus `/shared/`, the scoop\'s scratch folder, and `/tmp/` — the whole shared scratch tree, so a scoop can always reach its `$TMPDIR`). Relative paths resolve against the caller\'s cwd.\n- `<allowed-commands>` — comma-separated allow-list; `*` for unrestricted.\n- `<prompt>` — forwarded verbatim. The spawned scoop has no access to the caller\'s history; pack context into the prompt.\n- `--model` — defaults to the parent scoop\'s model (or the cone\'s, when invoked from the terminal). Accepts an exact id, a shorthand (`haiku`, `sonnet`, `claude-haiku-4-5`), or the `provider:model` form `models` prints (`openrouter:openai/gpt-5.6-terra-pro`). A bare id resolves against the selected provider first, then against any other configured provider that offers it; if several do, the error lists the qualified ids to pick from. The scoop runs on the provider the model resolved from. An id that cannot be resolved is a hard error (exit 1) — it never silently falls back to the parent\'s model. Models from a provider other than the selected one must additionally be allowed in `/etc/models` (see [Model access policy](#model-access-policy)); a blocked model exits 1 and the error quotes the line to add.\n- `--workspace-mode` — isolation policy. Default `shared-readonly` is today\'s sandbox (parent workspace visible, cwd + `/shared/` + scratch writable, mounts readable). `private` is an isolated sandbox: own cwd/scratch only — no parent workspace, no implicit `/shared/`, mounts are **not** auto-visible. `snapshot` and `shared-live` are not implemented and exit 1.\n- `--read-only` — pure-replace list of read-only paths. Default: the **owning cone\'s** workspace (plus `/workspace/skills/`) and the invoking shell\'s cwd. When replacing it, name your own cone\'s workspace — a literal `/workspace/` is the primary cone\'s, not yours. Under `--workspace-mode private` the default visible list is empty.\n- `--background-after <seconds>` — how long the spawned scoop\'s `bash` waits for a command before detaching it and moving on (default 600). Nobody can cancel a spawned scoop\'s turn, so a command that never returns would otherwise burn the whole run on one call; a detached command reports its exit code back to that scoop as a `Background Command` lick. `0` detaches every command immediately.\n\n**Critical property: no handoff.** Ephemeral scoops do NOT notify the cone on completion. Running `agent` from a non-cone shell does not trigger an unsolicited cone turn. The caller gets the result on stdout, nothing else. This makes `agent` the right choice for cheap, predictable interactions inside dips and sprinkles where you don\'t want the cone or owning scoop woken up.\n\n```bash\n# Parallel, collected to one file. No cone turns spawned.\nfor url in site-a site-b site-c; do\n  agent "$TMPDIR" "curl,jq" "Fetch https://$url/api, return the top-level title field." >> "$TMPDIR/titles.txt" &\ndone\nwait\n\n# Focused refactor with a restricted allow-list.\nagent /workspace/src "rg,sed,node" "Rename getCwd to getCurrentWorkingDirectory across *.ts"\n\n# Cheap one-shot from a faster model.\nagent . \'*\' \'Summarize the README in one sentence.\' --model claude-haiku-4-5\n```\n\nFor dip and sprinkle interaction patterns built on `agent`, see `/workspace/skills/dips/SKILL.md` and `/workspace/skills/sprinkles/SKILL.md`.\n\n## Shaping the scoop\'s sandbox: `workspaceMode`, `visiblePaths`, `writablePaths`, `allowedCommands`\n\n`scoop_scoop` accepts a named isolation mode plus three sandbox-shaping parameters. **They are how you give a scoop authority — by widening or narrowing what it can read, write, and run.** A scoop that can\'t reach the files it needs has no autonomy; pre-cooking the brief is what you do to compensate. Get the sandbox right and the brief gets shorter.\n\nA rarely used argument — `canCreateChildren: true` — is an explicit nested-delegation grant. The new scoop may then `scoop_scoop` / `feed_scoop` / `drop_scoop` its own children. Omit it (the default) so the scoop stays a leaf. A scoop that was not itself granted this cannot pass it on.\n\n| Param               | What it controls                        | Default                                                                                | Pure replace? |\n| ------------------- | --------------------------------------- | -------------------------------------------------------------------------------------- | ------------- |\n| `workspaceMode`     | Sharing policy for the parent workspace | `"shared-readonly"` (today\'s scoop). `"private"` isolates.                             | Yes           |\n| `visiblePaths`      | Read-only VFS paths the scoop can SEE   | shared-readonly: `["/workspace/"]`; private: `[]`                                      | Yes           |\n| `writablePaths`     | VFS paths the scoop can READ AND WRITE  | shared-readonly: `["/scoops/<folder>/", "/shared/"]`; private: `["/scoops/<folder>/"]` | Yes           |\n| `allowedCommands`   | Shell command allow-list                | unrestricted (every built-in + `.jsh`)                                                 | Yes           |\n| `canCreateChildren` | Nested-delegation grant                 | `false` (leaf scoop)                                                                   | Yes           |\n\n"Pure replace" means what you set is what you get — the value isn\'t merged with the default. Pass `[]` to drop it entirely. Trailing slashes recommended on path entries (e.g. `/shared/data/`).\n\nSubtleties:\n\n- **`writablePaths` are always readable too.** A true read-nothing sandbox needs both `visiblePaths: []` AND `writablePaths: []`.\n- **Mounts remain readable in `shared-readonly`** (the default) regardless of `visiblePaths`. `private` does **not** auto-include mounts — name a mount in `visiblePaths` / `writablePaths` if the scoop needs it. That\'s how a mount cannot silently expand every child\'s authority.\n- **`allowedCommands` applies recursively** — pipelines, command substitutions, and network commands are all gated. Pass `["*"]` for explicit unrestricted.\n- **List every absolute root the scoop\'s tools write to.** Include any root outside the scoop\'s folder and `/tmp/` in `writablePaths` (any spelling works: `/x`, `/x/`, `/x/**`), or every such write escalates to you for approval. `playwright-cli` needs nothing here: in a scoop its session log, snapshots and screenshot archive go to the scoop\'s own `$TMPDIR/.playwright/`, not `/.playwright/`. Prefer pointing skills at `/scoops/<folder>/`, `/shared/`, or `/tmp/` over inventing new VFS roots.\n\n### How to choose\n\nAsk three questions, in order:\n\n1. **What does the scoop need to read?** Files it must consume — source tree, docs, mounted data — go in `visiblePaths`. Default `/workspace/` is fine for most "do something in the project" briefs. Add specific paths (`/shared/data/`, `/mnt/da/`) for narrower scopes.\n2. **What is it allowed to change?** Output dirs, the file it\'s editing, the sprinkle path it owns. Default writable scratch (`/scoops/<folder>/`) plus `/shared/` is fine for scoops producing artifacts. **Tighten this when the scoop should not modify production code** — e.g. a research scoop with `writablePaths: ["/scoops/<folder>/"]` only.\n3. **What commands does it need?** Default unrestricted is right when the scoop will figure out its own toolchain. Tighten only when narrowing to a known set of tools improves reliability or safety — e.g. a scraper with `["curl","jq"]`, or a refactor scoop with `["rg","sed","node"]`.\n\n### Patterns\n\n```\n# Default sandbox (shared-readonly): full project, own scratch dir, all commands.\n# Right for most "do this in the project" briefs.\nscoop_scoop({ name: "fix-bug", prompt: "..." })\n\n# Isolated sandbox. Cannot see the parent workspace or mounts.\nscoop_scoop({ name: "scratch-only", workspaceMode: "private", prompt: "..." })\n\n# Read-only research scoop. Can read everything, can\'t change anything,\n# can use whatever commands it needs to investigate.\nscoop_scoop({\n  name: "auth-research",\n  visiblePaths: ["/workspace/", "/shared/"],\n  writablePaths: ["/scoops/auth-research/"],\n  prompt: "Map the auth flow across the codebase and write findings to /scoops/auth-research/notes.md."\n})\n\n# Sprinkle-owning scoop. Needs write access to its sprinkle path.\nscoop_scoop({\n  name: "giro-winners",\n  writablePaths: ["/scoops/giro-winners/", "/shared/sprinkles/giro-winners/"],\n  prompt: "..."\n})\n\n# Tight scraper. Only sees public docs, only runs network/json tools,\n# writes to its own scratch.\nscoop_scoop({\n  name: "scraper",\n  visiblePaths: [],\n  writablePaths: ["/scoops/scraper/"],\n  allowedCommands: ["curl", "jq", "rg"],\n  prompt: "Fetch <urls>, extract the price field from each, write a CSV to /scoops/scraper/out.csv."\n})\n\n# Mount-only scoop. Sees just the DA mount, can write back to it.\n# Under shared-readonly, mounts stay readable even with visiblePaths: [].\n# Under private, name the mount in writablePaths (or visiblePaths) or it is hidden.\nscoop_scoop({\n  name: "da-editor",\n  writablePaths: ["/mnt/da/", "/scoops/da-editor/"],\n  prompt: "Edit /mnt/da/index.html to ..."\n})\n```\n\n### Don\'t\n\n- Don\'t widen `writablePaths` "just in case." A scoop with surprise write access can clobber files outside its task — drop and re-spawn with a tighter scope is cheaper than recovering from that.\n- Don\'t narrow `allowedCommands` to "look secure" if you don\'t know which commands the scoop will need. The agent will hit a wall mid-task and either lie ("I\'ll skip that step") or spam tool errors.\n- Don\'t forget the `writablePaths`-also-readable rule. `visiblePaths: []` alone does not produce a blind sandbox.\n\n### `background_after` — bounding a scoop\'s slow commands\n\n`scoop_scoop({ background_after: <seconds> })` sets how long that scoop\'s `bash`\ntool waits for a command before detaching it and continuing the turn (default\n600). This is a resilience knob, not a sandbox one: a scoop\'s turn cannot be\ncancelled by anyone, so a command that never returns would hang the scoop (and,\nfor a blocking `agent` call, its caller) indefinitely. When a detached command\nfinishes, that scoop receives a `Background Command` lick with the exit code, a\npreview, and the path to the full output.\n\n```\n# A scoop whose commands must never stall it for more than a minute.\nscoop_scoop({ name: "flaky-net", background_after: 60, allowedCommands: ["curl", "jq"], prompt: "..." })\n```\n\nThe scoop can also override the budget per call (`bash({ command, background_after, timeout })`). Each run is a real pid: `ps` lists a detached job and `kill <pid>` stops it, so `timeout` is a kill rather than just a detach.\n\n### Filesystem work limits\n\nScoop shell commands that use the upstream limits stop at 100,000 traversal entries,\n256 levels, 32 MiB input, or 64 MiB of tracked live buffers. Split large trees or\ninputs across calls when a command reports a limit. Environment variables cannot\nraise these limits. They are not an OPFS quota and do not cover custom `tar`,\n`unzip`, JavaScript, Python, Git, or browser command implementations. Existing\n`timeout` and `background_after` controls still apply independently.\n\n## Parallel orchestration: `scoop_mute` / `scoop_unmute` / `scoop_wait`\n\nBy default, every non-ephemeral scoop completion fires a `scoop-notify` event that wakes the cone for a fresh turn. Fanning out N scoops in parallel produces N extra cone turns whose only job is to acknowledge "scoop X finished" — expensive in tokens, disruptive to orchestration.\n\nThese three cone-only tools collapse the fan-out into a single follow-up turn:\n\n- **`scoop_mute({ scoop_names })`** — suspends `scoop-notify` for the listed scoops. Completions arriving while muted are stashed (full response persisted to `/shared/scoop-notifications/*.md`); they do NOT trigger a cone turn.\n- **`scoop_unmute({ scoop_names })`** — resumes notifications AND returns every stashed completion inline as the tool\'s result. The cone reads the summaries in the current turn instead of one extra turn per scoop.\n- **`scoop_wait({ scoop_names, timeout_ms? })`** — schedules a NON-BLOCKING wait. Returns immediately so the cone can keep working; when every listed scoop completes (or the timeout fires) the orchestrator delivers a single `scoop-wait` channel lick with all captured summaries. Target scoops are implicitly muted for the wait\'s duration so individual `scoop-notify` events don\'t pre-empt the eventual lick. `timeout_ms: 0` fires on the next tick with whatever is already done. Omit `timeout_ms` to wait indefinitely. Pre-existing `scoop_mute` state survives the wait.\n\n### When to use which\n\n> Every scoop name you pass to `feed_scoop`, `drop_scoop`, `scoop_mute`, `scoop_unmute` or `scoop_wait` is resolved against what `list_scoops` shows you. Another cone\'s identically named scoop is never matched by a bare name; the call errors instead (#2360).\n>\n> If you are the LEADING cone, `list_scoops` also shows scoops you do not own, tagged `[INHERITED]` (their owning cone is gone) or `[FOREIGN: <cone>]` (another cone owns them). You can feed, wait on, mute and drop those — but only by passing `cross_cone: true` in the same call. Omitting it is an error, not a no-op, so you never touch another cone\'s work by accident. Two things to know before you do: a cross-cone `feed_scoop` sends its completion notice to the scoop\'s OWN owner, so use `scoop_wait ({ …, cross_cone: true })` if you need the result yourself; and a batch call refuses the whole batch when any listed scoop needs the flag.\n\n- **Fan-out + synthesis** (your next useful step depends on all scoops) → `scoop_wait`.\n- **Background work you\'ll check later** → `scoop_mute` now, `scoop_unmute` when you want the summaries.\n- **Single delegation, no parallelism** → don\'t mute. Default `scoop-notify` is fine.\n\n### Examples\n\n```\n# Fan-out + synthesize:\nfeed_scoop({ scoop_name: "writer-a", prompt: "Draft intro" })\nfeed_scoop({ scoop_name: "writer-b", prompt: "Draft outro" })\nscoop_wait({ scoop_names: ["writer-a", "writer-b"], timeout_ms: 600000 })\n# Returns immediately. Cone keeps working. When both finish (or 10 min), a single\n# `scoop-wait` lick wakes the cone with both summaries; the next turn synthesizes.\n\n# Background, poll non-blockingly:\nscoop_mute({ scoop_names: ["scraper"] })\nfeed_scoop({ scoop_name: "scraper", prompt: "Collect URLs from the sitemap" })\n# ... do other work ...\nscoop_unmute({ scoop_names: ["scraper"] })\n# Tool result has the stashed summary or "No stashed completions".\n```\n\n### Liveness: a quiet fan-out is not a finished fan-out\n\n"Files look stable and the scoops are still processing" does NOT mean the work\nis done or progressing. A common stall mode: one or more scoops are blocked on\na pending approval (`sudo_request`) that never reached you, and the whole\nfan-out sits idle while you wait for a `scoop-wait` lick that can\'t arrive.\n\nWhen a fan-out goes quiet — no completions, no file changes, no progress\nmessages — run `list_sudo_requests` before concluding anything. Resolve or\ndeny each pending request, then keep waiting. Only treat a fan-out as\ncomplete when every scoop has actually reported completion (via `scoop_wait`\nlick or `scoop_unmute` summaries), not because output files stopped changing.\n\nWhen you **deny** one, pass `reason` to `lick_dismiss`. The scoop sees the\nsubject of its own request and your verdict; without a reason it cannot tell a\nrefusal from a misunderstanding, so it retries the same thing or invents a\nworkaround. Say what would make it acceptable, if anything would.\n\n### Notes\n\n- Full response is always persisted to `/shared/scoop-notifications/<timestamp>-<folder>-<id>.md` (bounded to the 200 most recent). The summary string in the tool result is truncated at 20 000 characters; read the VFS path when you need the full output.\n- Unknown scoop names are reported in the result but do not abort the call.\n- Dropping or re-registering a muted scoop is safe: `unregisterScoop` releases waiters (resolving as `timedOut: true`) and clears mute/pending state.\n\n## Inspecting delegation cost\n\nRun `cost` to inspect spend for the cone and currently live scoops. The table labels each row\'s source, and `--json` returns the same live-only scope for scripts as `{"budget": <window|null>, "scoops": [ ... ]}` — read the rows from `.scoops`. The Model column (JSON `model`) is the model that unit is running now — its provider-qualified pin, the id half of `models`\' "Currently using" line (a provider-less legacy pin yields to the latest turn when they differ) — not whichever model took the most turns. JSON `models` lists each distinct model once: a bare id and a region- or version-qualified id of the same model are one entry (a suffixed variant such as `-fast` is not), and the entry for the model in use now keeps that current spelling.\n\nOn a provider billing against a rolling allowance (rather than per token), `cost` leads with that budget: percent USED of the window and when it resets. That number, not the dollar total, is what says whether long runs will finish — the allowance is shared, so it can be most of the way gone before this session has cost a cent.\n\nUse `cost --all` only when you need the historical picture: it adds dropped scoops from the current runtime and frozen sessions recorded in `/sessions/index.json`. Combine it with `--json` for structured historical output. Legacy frozen sessions that predate cost persistence are retained with unknown cost rather than reported as zero.\n\n## Model selection for scoops\n\n**Always run `models` to verify available models before specifying one.** Model availability depends on the configured provider and API key. `model` accepts an exact id, a shorthand (`haiku`, `sonnet`, `claude-haiku-4-5`), or the `provider:model` form `models` prints (`openrouter:openai/gpt-5.6-terra-pro`). A bare id resolves against the selected provider first, then against any other configured provider that offers it; matching several is an error listing the qualified ids. The scoop runs on the provider the model resolved from. An id that cannot be resolved is rejected outright — it never silently falls back to the cone\'s model. Cross-provider models also need an `/etc/models` allow entry (see [Model access policy](#model-access-policy)).\n\nUse `models --json` to compare. Intelligence, speed, and cost are independent dimensions:\n\n- **Cost-sensitive** (renames, formatting, grep-and-replace) → low-cost models.\n- **Complex** (architecture, multi-file refactors, subtle debugging) → high-intelligence.\n- **Latency-sensitive** (interactive workflows, quick lookups) → high-speed.\n- **Default** → omit the parameter; inherits the cone\'s model.\n\n```bash\n# 1. Verify available models.\nmodels\n\n# 2. Create scoops with verified IDs.\nscoop_scoop({ name: "fix-typos", model: "claude-haiku-4-5", prompt: "Fix all typos in /workspace/docs/" })\nscoop_scoop({ name: "architect", model: "claude-opus-4-6", prompt: "Design the new plugin system..." })\n```\n\n**Error handling**: scoops retry up to 3 times with exponential backoff for transient errors (rate limits, server errors). Non-retryable errors (invalid model, auth failures) fail immediately and notify the cone, bypassing any `scoop_mute` settings.\n\n## Browser tabs\n\nBrowser-tab handling rules (track your IDs, never close tabs you didn\'t open, handle "tab not found" gracefully) live in `/workspace/skills/playwright-cli/SKILL.md` under "Multi-Agent Tab Behavior". Read that skill before delegating browser work.\n\n### Browser-driving scoops: one tab per scoop\n\nAll scoops share ONE browser, but `playwright-cli` locks **per tab**: commands\non different tabs run in parallel, and commands on the same tab serialize. One\nscoop\'s slow or hung navigation stalls only its own tab. Fan-out across tabs\ngenuinely multiplies browser throughput.\n\n- **Give every browser-driving scoop its own tab; no fan-out cap is needed\n  for correctness.** Browser scoops fan out like any other work, and commands\n  on distinct tabs really do run side by side.\n- **Two scoops on the SAME tab still queue.** If a slice needs a shared tab,\n  hand it to one scoop rather than splitting it.\n- A hung navigation stalls only its own tab, so one stuck scoop no longer\n  detaches every sibling\'s commands past `background_after`.\n- When a command emits `note: browser bridge contended — ...` on stderr (total\n  lock wait + queue depth, and whether the wait was on **this tab** or\n  **bridge-wide**), that is back-off guidance: instruct the scoop to stagger or\n  move to its own tab, never to re-run the command — it already ran; it was\n  just slow to get the lock. A bridge-wide wait points at the few genuinely\n  global operations (`tab-select`, `--foreground`, attaching to a tab), not at\n  your tab.\n- Scoops doing CPU/VFS/network work (curl, file edits, analysis) fan out\n  freely, as before.\n\n## Model access policy\n\n`/etc/models` decides which `provider:model` combinations you may spawn against. It\nis keyed by the **selected** provider:\n\n```ini\n[adobe]              # while `adobe` is selected…\nopenrouter:*         # …any openrouter model may be targeted\n-adobe:claude-opus-5 # …but never adobe\'s own Opus 5\n```\n\n- The selected provider\'s own models are allowed by default — you never list them.\n- Any other provider\'s model is denied until an entry allows it. This is a spend\n  boundary: the user may keep separate work and personal accounts.\n- `models` and the picker hide only what a `-` entry denies, so a model you can see\n  is not automatically one you may spawn against; the rejection names the exact\n  line to add.\n\nDo not edit `/etc/models` to unblock yourself — the write requires a human approval\n(`Write /etc/models` in `/etc/sudoers`). Ask the user instead, quoting the line.\n';export{e as default};

package/dist/ui/assets/account-store-B857f9Kw.js

@@ -1,2 +0,0 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/oauth-service-B-vKfxAF.js","assets/preload-helper-Czpn1I53.js","assets/proxied-fetch-Cplb-Tee.js","assets/rolldown-runtime-Dd_uD5pT.js","assets/base64-ELzoYfwP.js","assets/proxy-error-BSFYY7jj.js","assets/api-endpoint-DuEQRZ4g.js","assets/runtime-env-Dlaokqg1.js","assets/panel-rpc-D3EPRnmw.js","assets/permissions-surface-registry-CilCRwhh.js"])))=>i.map(i=>d[i]);
-import{n as e}from"./rolldown-runtime-Dd_uD5pT.js";import{a as t,i as n,o as r}from"./core-4boN-CgI.js";import{t as i}from"./preload-helper-Czpn1I53.js";import{t as a}from"./logger-DDBAeTLF.js";import"./proxied-fetch-Cplb-Tee.js";import{s as o,t as s}from"./api-endpoint-DuEQRZ4g.js";import{n as c}from"./float-topology-C9GjBEv-.js";import"./secret-topology-Dm_PZRZx.js";import{n as l}from"./secrets-bridge-client-CWv2_nw7.js";import{n as ee,o as u,t as d}from"./providers-jygoVQBo.js";import{n as te,t as ne}from"./panel-rpc-D3EPRnmw.js";import{a as re,c as ie,i as ae,l as oe}from"./bedrock-camp-compat-B1oHsbyo.js";import{r as se,t as ce}from"./bedrock-camp-extra-models-BYrxX19D.js";import{o as le}from"./claude-model-version-DZmbk9E2.js";var ue=`slicc_oauth_extra_domains`;function f(e){try{let t=e.getItem(ue);if(!t)return{};let n=JSON.parse(t);if(typeof n!=`object`||!n||Array.isArray(n))return{};let r={};for(let[e,t]of Object.entries(n)){if(typeof e!=`string`||!Array.isArray(t))continue;let n=t.filter(e=>typeof e==`string`&&e.length>0);n.length>0&&(r[e]=n)}return r}catch{return{}}}function de(e,t){try{e.setItem(ue,JSON.stringify(t))}catch(e){throw Error(`Failed to persist OAuth extras (localStorage quota exceeded?): ${e instanceof Error?e.message:String(e)}`)}}function fe(e,t){let n={input:0,output:0,cacheRead:0,cacheWrite:0},r=le(e);if(!r)return n;let i;for(let e of t.values()){let t=le(e.id);!t||t.family!==r.family||(!i||t.major>i.major||t.major===i.major&&t.minor>i.minor)&&(i={major:t.major,minor:t.minor,cost:e.cost})}return i?.cost??n}a(`model-policy`);var pe=`/etc/models`;function me(){return{sections:{}}}function p(e,t,n){return e.providerId===t?e.modelId===`*`||e.modelId===n:!1}function he(e,t){return e.sections[t]??[]}function ge(e,t,n,r){return he(e,t).some(e=>e.deny&&p(e,n,r))}function _e(e,t,n,r){let i=he(e,t);return i.some(e=>e.deny&&p(e,n,r))?!1:n===t||i.some(e=>!e.deny&&p(e,n,r))}var ve=me();function ye(){return ve}function be(e,t,n){return`add \`${t}:${n}\` (or \`${t}:*\`) under \`[${e}]\` in ${pe}`}var xe=e({ACCOUNTS_KEY:()=>g,__test__:()=>Ee,addAccount:()=>P,applyProviderDefaults:()=>je,clearAllSettings:()=>ut,clearApiKey:()=>at,clearBaseUrl:()=>ct,clearSelectedProvider:()=>nt,ensureOAuthMaskReplica:()=>qe,exportProviders:()=>lt,getAccounts:()=>A,getAllAvailableModels:()=>k,getAllExtraOAuthDomains:()=>Ie,getAlternativeModelProviders:()=>Pe,getApiKey:()=>rt,getApiKeyForProvider:()=>V,getApiVersionForProvider:()=>Qe,getAvailableProviders:()=>x,getBaseUrl:()=>ot,getBaseUrlForProvider:()=>H,getDeploymentForProvider:()=>Ze,getExtraOAuthDomains:()=>j,getModelCatalogProviderIds:()=>ft,getOAuthAccountInfo:()=>ke,getProviderConfig:()=>C,getProviderModels:()=>T,getRawApiKeyForProvider:()=>B,getSelectedModelId:()=>U,getSelectedProvider:()=>W,isModelHiddenFromPicker:()=>D,isUsableOAuthMaskReplica:()=>R,logoutOAuthAccount:()=>I,maskOAuthTokenWithRetry:()=>L,migrateLegacyAuthOnlySelection:()=>b,modelRunsOnProvider:()=>gt,persistOAuthMaskViaServiceWorker:()=>z,policyVisible:()=>O,providerOffersLlmModels:()=>S,removeAccount:()=>F,resolveCurrentModel:()=>J,resolveModelById:()=>q,resolveModelByShorthand:()=>_t,resolveModelIdForScoop:()=>Tt,resolveModelSelectionForScoop:()=>Q,saveOAuthAccount:()=>Ye,setApiKey:()=>it,setBaseUrl:()=>st,setExtraOAuthDomains:()=>M,setExtraOAuthDomainsAsync:()=>Fe,setSelectedModelId:()=>$e,setSelectedProvider:()=>tt}),m=n,h=t,g=`slicc_accounts`,_=`selected-model`,Se=[`slicc_provider`,`slicc_api_key`,`slicc_base_url`,`anthropic_api_key`,`api_provider`,`azure_resource`,`bedrock_region`],Ce=new Set([`github`]);function v(e){let t;try{t=r()}catch{return!1}return t.includes(e)&&!u(e)}var y=!1;function we(){if(!y){y=!0;for(let e of Se)try{localStorage.removeItem(e)}catch{}b()}}function b(){try{let e=localStorage.getItem(_);if(e){let t=e.indexOf(`:`);if(t>0){let n=e.slice(0,t);(Ce.has(n)||v(n))&&localStorage.removeItem(_)}}}catch{}try{let e=localStorage.getItem(g);if(!e)return;let t=JSON.parse(e);if(!Array.isArray(t))return;let n=t.filter(e=>!(typeof e==`object`&&e&&typeof e.providerId==`string`&&v(e.providerId)));n.length!==t.length&&localStorage.setItem(g,JSON.stringify(n))}catch{}}function Te(){y=!1}var Ee={_resetLegacyCleanup:Te};function x(){let e=r().filter(u),t=ee();return[...new Set([...e,...t])].filter(e=>!d(e)?.hidden)}function S(e){try{if(T(e).length>0)return!0}catch{}try{if(t(e).length>0)return!0}catch{}let n=d(e);return!!(n?.modelOverrides&&Object.keys(n.modelOverrides).length>0)}function De(e,n){try{if(T(e).some(e=>e.id===n))return!0}catch{}try{if(t(e).some(e=>e.id===n))return!0}catch{}let r=d(e);return!!(r?.modelOverrides&&Object.hasOwn(r.modelOverrides,n))}function C(e){return d(e)||{id:e,name:e.split(`-`).map(e=>e.charAt(0).toUpperCase()+e.slice(1)).join(` `),description:`${e} provider`,requiresApiKey:!0,requiresBaseUrl:!1}}function w(e,t){t.context_window!==void 0&&(e.contextWindow=t.context_window),t.max_tokens!==void 0&&(e.maxTokens=t.max_tokens),t.reasoning!==void 0&&(e.reasoning=t.reasoning),t.input!==void 0&&(e.input=t.input),t.cost!==void 0&&(e.cost=t.cost,e.inputCost=t.cost.input,e.outputCost=t.cost.output,e.cacheReadCost=t.cost.cacheRead,e.cacheWriteCost=t.cost.cacheWrite),t.compat!==void 0&&(e.compat={...e.compat??{},...t.compat}),t.thinkingLevelMap!==void 0&&(e.thinkingLevelMap={...e.thinkingLevelMap??{},...t.thinkingLevelMap})}function Oe(e){let t=ae(e);return{...e,api:`bedrock-camp-converse`,provider:`bedrock-camp`,reasoning:e.reasoning===!0&&(ie(e)||t!==null),...t?{thinkingLevelMap:{...t}}:{}}}function T(e){try{if(e===`bedrock-camp`){let e=re(H(`bedrock-camp`));return se(h(`amazon-bedrock`),ce).filter(t=>oe(t,e)).map(Oe)}let t=C(e);if(t.getModelIds){let n;try{n=t.getModelIds()}catch(t){return E.error(`Provider getModelIds callback failed`,{providerId:e,error:t instanceof Error?t.message:String(t)}),[]}let i=new Map;for(let e of r())try{for(let t of h(e))i.set(t.id,t)}catch{}return n.map(n=>{let r=n.api===`openai`?`openai`:`anthropic`,a=`${e}-${r}`,o=i.get(n.id),s;if(o)s={...o,api:a,provider:e};else if(s=G(e,n.id,``,a),n.name&&(s.name=n.name),r===`anthropic`){let e=fe(n.id,i);s.cost=e,s.inputCost=e.input,s.outputCost=e.output,s.cacheReadCost=e.cacheRead,s.cacheWriteCost=e.cacheWrite}let c=t.modelOverrides?.[n.id];return c&&w(s,c),w(s,n),s})}if(t.isOAuth){let n=h(`anthropic`),r=`${e}-anthropic`;return n.map(n=>{let i={...n,api:r,provider:e},a=t.modelOverrides?.[n.id];return a&&w(i,a),i})}return h(e===`azure-ai-foundry`?`anthropic`:e)}catch(t){return E.error(`Failed to load models`,{providerId:e,error:t instanceof Error?t.message:String(t)}),[]}}function ke(e){let t=A().find(t=>t.providerId===e);if(!t?.accessToken)return null;let n=!!t.tokenExpiresAt&&Date.now()>t.tokenExpiresAt-6e4;return{token:t.accessToken,maskedValue:t.maskedValue,expiresAt:t.tokenExpiresAt,userName:t.userName,userAvatar:t.userAvatar,scopes:t.scopes,expired:n}}var Ae=Object.assign({})[`/packages/webapp/providers.json`]??[],E=a(`provider-settings`);function je(e=Ae){if(e.length===0||A().length>0)return;let t=new Set(x());for(let n of e)if(!(!n.providerId||!n.apiKey)){if(!t.has(n.providerId)){E.warn(`Unknown provider "${n.providerId}" in providers.json — skipping`);continue}P(n.providerId,n.apiKey,n.baseUrl)}let n=e.find(e=>e.providerId&&e.apiKey&&t.has(e.providerId));n?.model&&!localStorage.getItem(_)&&localStorage.setItem(_,`${n.providerId}:${n.model}`)}var Me=[/haiku/i];function D(e){return Me.some(t=>t.test(e))}function Ne(e){return e.filter(e=>!D(e.id))}function O(e,t){let n=$();if(n===null)return e;let r=ye();return e.filter(e=>!ge(r,n,t,e.id))}function k(){let e=A();if(e.length===0)return[];let t=new Map;for(let n of e){if(t.has(n.providerId))continue;let e=C(n.providerId);if(e.hidden||v(n.providerId))continue;let r=O(Ne(T(n.providerId)),n.providerId);if(r.length===0)continue;let i={providerId:n.providerId,providerName:e.name,models:r};t.set(n.providerId,i)}return[...t.values()]}function Pe(e){return k().map(e=>e.providerId).filter(t=>t!==e)}function A(){we();let e=localStorage.getItem(g);if(!e)return[];try{let t=JSON.parse(e);return Array.isArray(t)?t.filter(e=>typeof e==`object`&&!!e&&typeof e.providerId==`string`&&typeof e.apiKey==`string`):[]}catch{return[]}}function j(e){return f(localStorage)[e]??[]}function M(e,t){let n=f(localStorage),r=t.map(e=>e.trim()).filter(e=>e.length>0);r.length===0?delete n[e]:n[e]=r,de(localStorage,n)}async function Fe(e,t){if(te()){M(e,t);return}let n=ne();if(!n)throw Error(`setExtraOAuthDomainsAsync: no DOM and no panel-rpc client — cannot persist to page localStorage`);let{storeAfter:r}=await n.call(`oauth-extras-set`,{providerId:e,domains:t});try{de(localStorage,r)}catch(t){E.warn(`worker-shim mirror failed after successful page write — reload to refresh`,{providerId:e,error:t instanceof Error?t.message:String(t)})}}function Ie(){return f(localStorage)}function Le(e){localStorage.setItem(g,JSON.stringify(e))}async function N(e){if(te()){Le(e);return}let t=ne();if(!t)throw Error(`saveAccountsAsync: no DOM and no panel-rpc client — cannot persist to page localStorage`);let n=JSON.stringify(e),{storedJson:r}=await t.call(`save-oauth-accounts`,{accountsJson:n});try{localStorage.setItem(g,r)}catch(e){E.warn(`worker-shim mirror failed after successful page write — reload to refresh`,{error:e instanceof Error?e.message:String(e)})}}function P(e,t,n,r,i){let a=A().filter(t=>t.providerId!==e),o={providerId:e,apiKey:t};n&&(o.baseUrl=n),r&&(o.deployment=r),i&&(o.apiVersion=i),a.push(o),Le(a)}async function Re(e){let t=c();try{if(t===`extension-direct`){let t=await new Promise(t=>{chrome.runtime.sendMessage({type:`secrets.delete`,name:`oauth.${e}.token`},n=>{chrome.runtime.lastError&&E.error(`SW secrets.delete transport failed`,{providerId:e,error:chrome.runtime.lastError.message}),t(n??{})})});t.error&&E.error(`SW secrets.delete returned error`,{providerId:e,error:t.error})}else if(t===`extension-delegate`){let t=await l(`secrets.delete`,{name:`oauth.${e}.token`});t?.error&&E.error(`Bridge secrets.delete returned error`,{providerId:e,error:t.error})}else if(t!==`connect`){let t=await fetch(o(`/api/secrets/oauth/${e}`),{method:`DELETE`,headers:s()});!t.ok&&t.status!==404&&E.warn(`OAuth replica DELETE non-ok`,{providerId:e,status:t.status})}}catch(n){E.error(`OAuth replica removal failed`,{providerId:e,topology:t,error:n instanceof Error?n.message:String(n)})}}async function F(e){let t=A().find(t=>t.providerId===e),n=C(e);t&&n?.isOAuth&&await I(e),await Re(e),await N(A().filter(t=>t.providerId!==e));let r=localStorage.getItem(_)??``,i=r.indexOf(`:`);i>0&&r.slice(0,i)===e&&localStorage.removeItem(_)}async function I(e){let t=A().find(t=>t.providerId===e);if(!t)return;let n=C(e);if(n?.isOAuth){if(n.onOAuthLogout)try{await n.onOAuthLogout()}catch(t){E.warn(`onOAuthLogout failed`,{providerId:e,error:t instanceof Error?t.message:String(t)})}if(n.getOAuthLogoutUrl){let r=n.getOAuthLogoutUrl(t);if(r){let{openIdpLogoutUrl:t}=await i(async()=>{let{openIdpLogoutUrl:e}=await import(`./oauth-service-B-vKfxAF.js`);return{openIdpLogoutUrl:e}},__vite__mapDeps([0,1,2,3,4,5,6,7,8,9]));await t(r).catch(t=>{E.warn(`IdP logout popup failed`,{providerId:e,error:t instanceof Error?t.message:String(t)})})}}await N(A().map(t=>t.providerId===e?{providerId:t.providerId,apiKey:``,baseUrl:t.baseUrl,userName:t.userName,userAvatar:t.userAvatar,loggedOut:!0}:t)),await Re(e)}}async function L(e,t={}){let n=Math.max(1,t.attempts??3),r=t.delayMs??150,i=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),a;for(let t=0;t<n;t++){let o=await e();if(o.maskedValue)return{maskedValue:o.maskedValue};o.error&&(a=o.error),t<n-1&&await i(r)}return{lastError:a}}var ze=`access token rotated during mask write`;function Be(e,t,n,r){let i=r.find(t=>t.providerId===e);return i?.accessToken?i.accessToken===t?(i.maskedValue=n,{maskedValue:n}):(E.warn(`OAuth mask write raced with token rotation; discarding replica`,{providerId:e}),{error:ze}):{error:`account gone after mask write`}}function R(e,t){return!!e&&e!==t}async function z(e,t,n){let r={providerId:e.providerId,accessToken:e.accessToken,domains:e.domains.join(`,`)},{maskedValue:i,lastError:a}=await L(()=>t.sendMaskRequest(r),n);if(!R(i,e.accessToken)){let t=i?`mask replica equals the access token`:a??`no error reported (cold SW or empty reply)`;return E.error(`OAuth mask give-up: no masked value after retries`,{providerId:e.providerId,reason:t}),{error:t}}let o=t.getAccounts(),s=Be(e.providerId,e.accessToken,i,o);return s.maskedValue&&await t.saveAccounts(o),s}function Ve(e){let t=C(e).oauthTokenDomains??[],n=j(e),r=new Set,i=[];for(let e of[...t,...n]){let t=e.toLowerCase();r.has(t)||(r.add(t),i.push(e))}return i}function He(e){return new Promise(t=>{chrome.runtime.sendMessage({type:`secrets.mask-oauth-token`,...e},n=>{chrome.runtime.lastError&&E.error(`SW mask-oauth-token transport failed`,{providerId:e.providerId,error:chrome.runtime.lastError.message});let r=typeof n==`object`&&n?n:void 0;r?.error&&E.warn(`SW mask-oauth-token returned error`,{providerId:e.providerId,error:r.error}),t(r??{})})})}function Ue(e){return l(`secrets.mask-oauth-token`,e).then(t=>(t?.error&&E.warn(`Bridge mask-oauth-token returned error`,{providerId:e.providerId,error:t.error}),t??{})).catch(t=>(E.error(`Bridge mask-oauth-token transport failed`,{providerId:e.providerId,error:t instanceof Error?t.message:String(t)}),{}))}async function We(e,t,n){let r=o(`/api/secrets/oauth-update`),i=await fetch(r,{method:`POST`,headers:s({"Content-Type":`application/json`}),body:JSON.stringify({providerId:e,accessToken:t,domains:n})});if(!i.ok)return E.warn(`OAuth replica POST non-ok`,{providerId:e,status:i.status,url:r}),{error:`OAuth replica POST HTTP ${i.status}`};let a=await i.json();if(typeof a.maskedValue!=`string`)return E.warn(`OAuth replica POST ok but missing maskedValue`,{providerId:e,url:r}),{error:`OAuth replica POST ok but missing maskedValue`};if(!R(a.maskedValue,t))return E.error(`OAuth mask replica equals the access token; refusing to persist`,{providerId:e}),{error:`mask replica equals the access token`};let c=A(),l=Be(e,t,a.maskedValue,c);return l.maskedValue&&await N(c),l}async function Ge(e,t){let n=await Ke(e,t);if(n.error!==ze)return n;let r=A().find(t=>t.providerId===e)?.accessToken;return!r||r===t?n:Ke(e,r)}async function Ke(e,t){let n=Ve(e);if(n.length===0)return{error:`no oauth token domains configured`};let r=c();try{return r===`extension-direct`?z({providerId:e,accessToken:t,domains:n},{sendMaskRequest:He,getAccounts:A,saveAccounts:N}):r===`extension-delegate`?z({providerId:e,accessToken:t,domains:n},{sendMaskRequest:Ue,getAccounts:A,saveAccounts:N}):r===`connect`?{error:`no replica store in connect mode`}:await We(e,t,n)}catch(t){let n=t instanceof Error?t.message:String(t);return E.error(`OAuth replica sync failed`,{providerId:e,topology:r,error:n}),{error:n}}}async function qe(e){let t=A().find(t=>t.providerId===e);return t?.accessToken?R(t.maskedValue,t.accessToken)?{maskedValue:t.maskedValue}:Ge(e,t.accessToken):{error:`no access token held`}}function Je(e,t){if(e.accessToken)return`scopes`in e?e.scopes:t?.scopes}async function Ye(e){let t=A().find(t=>t.providerId===e.providerId),n=A().filter(t=>t.providerId!==e.providerId);n.push({providerId:e.providerId,apiKey:``,accessToken:e.accessToken,refreshToken:e.refreshToken,tokenExpiresAt:e.tokenExpiresAt,userName:e.userName,userAvatar:e.userAvatar,baseUrl:e.baseUrl??t?.baseUrl,scopes:Je(e,t)}),await N(n),await Ge(e.providerId,e.accessToken)}var Xe=`local`;function B(e){let t=A().find(t=>t.providerId===e);return t&&(t.accessToken||t.apiKey)||null}function V(e){let t=A().find(t=>t.providerId===e);return t?t.accessToken||t.apiKey||(C(e).optionalApiKey?Xe:null):null}function H(e){return A().find(t=>t.providerId===e)?.baseUrl??null}function Ze(e){return A().find(t=>t.providerId===e)?.deployment??null}function Qe(e){return A().find(t=>t.providerId===e)?.apiVersion??null}function U(){let e=localStorage.getItem(_)||``,t=e.indexOf(`:`);return t>=0?e.slice(t+1):e}function $e(e){let t=e.indexOf(`:`);if(t>0){let n=e.slice(0,t),r=new Set([...ee(),...x()]),i=n.includes(`.`);if(r.has(n)||!i){localStorage.setItem(_,e);return}}let n=W();localStorage.setItem(_,`${n}:${e}`)}function et(){return localStorage.getItem(_)||``}function W(){let e=et(),t=e.indexOf(`:`);if(t>0)return e.slice(0,t);let n=A(),r=U();if(r){let e=n.find(e=>S(e.providerId)&&De(e.providerId,r));if(e)return e.providerId}let i=n.find(e=>S(e.providerId));return i?i.providerId:n.length>0?n[0].providerId:`anthropic`}function tt(e){let t=U();localStorage.setItem(_,`${e}:${t}`)}function nt(){let e=U();localStorage.setItem(_,e)}function rt(){return V(W())}function it(e){let t=W();P(t,e,H(t)??void 0)}async function at(){await F(W())}function ot(){return H(W())}function st(e){let t=W(),n=B(t);n&&P(t,n,e||void 0)}function ct(){let e=W(),t=B(e);t&&P(e,t)}function lt(){let e=A(),t=W(),n=U();return e.map(e=>{let r={providerId:e.providerId,apiKey:e.apiKey};return e.baseUrl&&(r.baseUrl=e.baseUrl),e.providerId===t&&n&&(r.model=n),r})}async function ut(){let e=A();await Promise.allSettled(e.map(e=>F(e.providerId))),localStorage.removeItem(g),localStorage.removeItem(_);for(let e of Se)localStorage.removeItem(e)}function dt(e){return/^(?:gpt[-.]?|o[0-9]|chatgpt)/i.test(e)?`openai`:`anthropic`}function G(e,t,n,r){return{id:t,name:t,provider:e,api:r??`${e}-${dt(t)}`,baseUrl:n??``,contextWindow:2e5,maxTokens:16384,input:[`text`,`image`],cost:{input:0,output:0,cacheRead:0,cacheWrite:0},reasoning:!0}}function K(e,t){return t.isOAuth||e===`azure-ai-foundry`?`anthropic`:e===`bedrock-camp`?`amazon-bedrock`:e}function ft(){let e=new Set;for(let t of A())t.loggedOut||(e.add(t.providerId),e.add(K(t.providerId,C(t.providerId))));return[...e]}function pt(e,t,n){let r=T(e).find(e=>e.id===t);return r?n?{...r,baseUrl:n}:r:null}function mt(e,t,n,r){return n.isOAuth?T(t).find(e=>e.id===r)||{...e,api:`${t}-anthropic`,provider:t}:t===`bedrock-camp`?{...e,api:`bedrock-camp-converse`,provider:`bedrock-camp`}:e}function ht(e,t,n,r,i){let a=pt(e,n,r);if(a)return a;if(t.isOAuth)return G(e,n,r);if(i)throw Error(`Model ${n} is not available from provider ${e}`);return J()}function q(e,t){if(!e)return J();let n=t??W(),r=H(n),i=C(n);if(t!==void 0){let t=pt(n,e,r);if(t)return t}try{let t=m(K(n,i),e);if(!t?.id)throw Error(`Model ${e} not found`);let a=mt(t,n,i,e);return r?{...a,baseUrl:r}:a}catch(a){return E.debug(`resolveModelById: pi-ai lookup miss, using provider fallback`,{providerId:n,modelId:e,error:a instanceof Error?a.message:String(a)}),ht(n,i,e,r,t!==void 0)}}function gt(e,t){return e.provider===t||e.provider===K(t,C(t))}function J(){let e=W(),t=U(),n=H(e),r=T(e),i=C(e),a=i.defaultModelId?r.find(e=>e.id.toLowerCase().includes(i.defaultModelId.toLowerCase()))?.id:void 0,o=t||a||r[0]?.id||`claude-sonnet-4-6`;try{let t=K(e,i),a=m(t,o);if(!a?.id)throw Error(`Model ${o} not found in ${t} registry`);let s=a;return i.isOAuth?s=r.find(e=>e.id===o)||{...s,api:`${e}-anthropic`,provider:e}:e===`bedrock-camp`&&(s={...s,api:`bedrock-camp-converse`,provider:`bedrock-camp`}),n&&(s={...s,baseUrl:n}),s}catch(t){E.debug(`resolveCurrentModel: pi-ai lookup miss, using provider fallback`,{providerId:e,effectiveModelId:o,error:t instanceof Error?t.message:String(t)});let a=r.find(e=>e.id===o);return a?n?{...a,baseUrl:n}:a:i.isOAuth?G(e,o,n):m(`anthropic`,`claude-sonnet-4-0`)}}function _t(e){let t=e.toLowerCase();if(!t)return null;let n=null;try{n=W()}catch{}if(n!==null){let e=Y(t,[n]);if(e!==null)return e}return Y(t,A().map(e=>e.providerId))}function Y(e,t){let n=null,r=-1;for(let i of t)for(let t of T(i)){let i=t.id.toLowerCase(),a=(t.name??``).toLowerCase();if(!i.includes(e)&&!a.includes(e))continue;let o=t.contextWindow??0;(o>r||o===r&&Et(t.id,n??``)>0)&&(r=o,n=t.id)}return n}function X(){let e=[];try{for(let t of A())e.includes(t.providerId)||e.push(t.providerId)}catch{}try{let t=W();e.includes(t)||e.push(t)}catch{}return e}function vt(e){let t=e.indexOf(`:`);if(t<=0||t===e.length-1)return null;let n=e.slice(0,t),r=e.slice(t+1),i=X().includes(n);if(i)return{providerId:n,modelId:r,configured:i};let a=!1;try{a=x().includes(n)}catch{}return a?{providerId:n,modelId:r,configured:!1}:null}function Z(e,t,n=!0){let r=[e],i=n?Y(e.toLowerCase(),[t]):null;i!==null&&i!==e&&r.push(i);let a=[];try{a=T(t)}catch{}for(let n of r)if(!(a.length>0&&!a.some(e=>e.id===n)))try{if(q(n,t).id===n)return{modelId:n,providerId:t}}catch(r){E.debug(`selectModelFromProvider: candidate did not resolve`,{input:e,candidate:n,providerId:t,error:r instanceof Error?r.message:String(r)})}return null}function yt(e){return e.map(e=>`${e.providerId}:${e.modelId}`).join(`, `)}function Q(e){if(!e)return{ok:!1,error:`unknown model: (empty)`};let t=vt(e);if(t)return Ct(e,t);let n=null;try{n=W()}catch{}if(n!==null){let t=Z(e,n);if(t)return St(t)}return wt(e,n)}function $(){try{return W()}catch{return null}}function bt(e){let t=$();return t===null||_e(ye(),t,e.providerId,e.modelId)}function xt(e){let t=$()??`<none>`;return{ok:!1,error:`model not allowed: ${`${e.providerId}:${e.modelId}`} is blocked by ${pe} while "${t}" is selected — ${be(t,e.providerId,e.modelId)}`}}function St(e){return bt(e)?{ok:!0,selection:e}:xt(e)}function Ct(e,t){if(!t.configured){let n=X();return{ok:!1,error:`unknown model: ${e} (provider "${t.providerId}" is not configured${n.length>0?`; configured: ${n.join(`, `)}`:``})`}}let n=Z(t.modelId,t.providerId);return n?St(n):{ok:!1,error:`unknown model: ${e} (provider "${t.providerId}" does not offer "${t.modelId}")`}}function wt(e,t){let n=X().filter(e=>e!==t);for(let t of[`exact`,`shorthand`]){let r=[];for(let i of n){let n=t===`exact`?e:Y(e.toLowerCase(),[i]);if(n===null)continue;let a=Z(n,i,!1);a&&r.push(a)}let i=r.filter(bt);if(i.length===0&&r.length>0)return xt(r[0]);if(i.length===1)return{ok:!0,selection:i[0]};if(i.length>1)return{ok:!1,error:`ambiguous model: ${e} matches ${yt(i)} — qualify it as provider:model`}}return{ok:!1,error:`unknown model: ${e}`}}function Tt(e){let t=Q(e);return t.ok?t.selection.modelId:null}function Et(e,t){let n=e.match(/\d+/g)?.map(Number)??[],r=t.match(/\d+/g)?.map(Number)??[],i=Math.max(n.length,r.length);for(let e=0;e<i;e++){let t=(n[e]??0)-(r[e]??0);if(t!==0)return t}return 0}export{fe as $,W as A,F as B,j as C,T as D,C as E,b as F,Q as G,q as H,gt as I,st as J,Ye as K,z as L,R as M,I as N,B as O,L as P,tt as Q,O as R,Ze as S,ke as T,_t as U,J as V,Tt as W,Fe as X,M as Y,$e as Z,V as _,je as a,ot as b,ct as c,lt as d,A as f,rt as g,Pe as h,P as i,D as j,U as k,nt as l,Ie as m,Ee as n,ut as o,k as p,it as q,xe as r,at as s,g as t,qe as u,Qe as v,ft as w,H as x,x as y,S as z};

package/dist/ui/assets/account-store-C8W_QB2_.js

@@ -1 +0,0 @@
-import{n as e}from"./rolldown-runtime-Dd_uD5pT.js";import{t}from"./logger-LESFN7Hj.js";import"./proxied-fetch-CoZ8jHud.js";import{i as n,r}from"./panel-rpc-DW7W4w6_.js";import{n as i,o as a,t as o}from"./providers-DSWENZNJ.js";import{s,t as c}from"./api-endpoint-D8lUKmPu.js";import{a as l,i as ee,o as u}from"./core-ButDwsf2.js";import{n as d}from"./float-topology-DIH6ujZe.js";import{t as f}from"./secrets-bridge-client-EgBSROu5.js";import{a as te,c as ne,i as re,l as ie}from"./bedrock-camp-compat-ByR2ly4i.js";import{r as ae,t as oe}from"./bedrock-camp-extra-models-DIuCBjcJ.js";import{s as se}from"./claude-model-version-ceOteQ2f.js";const ce=`slicc_oauth_extra_domains`;function p(e){try{let t=e.getItem(ce);if(!t)return{};let n=JSON.parse(t);if(typeof n!=`object`||!n||Array.isArray(n))return{};let r={};for(let[e,t]of Object.entries(n)){if(typeof e!=`string`||!Array.isArray(t))continue;let n=t.filter(e=>typeof e==`string`&&e.length>0);n.length>0&&(r[e]=n)}return r}catch{return{}}}function le(e,t){try{e.setItem(ce,JSON.stringify(t))}catch(e){throw Error(`Failed to persist OAuth extras (localStorage quota exceeded?): ${e instanceof Error?e.message:String(e)}`)}}function ue(e,t){let n={input:0,output:0,cacheRead:0,cacheWrite:0},r=se(e);if(!r)return n;let i;for(let e of t.values()){let t=se(e.id);!t||t.family!==r.family||(!i||t.major>i.major||t.major===i.major&&t.minor>i.minor)&&(i={major:t.major,minor:t.minor,cost:e.cost})}return i?.cost??n}const de=t(`model-policy`),m=`/etc/models`;function h(){return{sections:{}}}function fe(e){let t=e.indexOf(`#`);return(t===-1?e:e.slice(0,t)).trim()}function pe(e){let t=h();if(typeof e!=`string`)return t;let n=null;for(let r of e.split(/\r?\n/)){let e=fe(r);if(!e)continue;let i=/^\[([^\]]+)\]$/.exec(e);if(i){n=i[1].trim(),t.sections[n]??=[];continue}if(n===null){de.warn(`model policy entry before any [provider] section — ignored`,{entry:e});continue}let a=e.startsWith(`-`),o=a?e.slice(1).trim():e,s=o.indexOf(`:`);if(s<=0||s===o.length-1){de.warn(`model policy entry is not provider:model — ignored`,{entry:e});continue}t.sections[n].push({providerId:o.slice(0,s).trim(),modelId:o.slice(s+1).trim(),deny:a})}return t}function g(e,t,n){return e.providerId===t?e.modelId===`*`||e.modelId===n:!1}function _(e,t){return e.sections[t]??[]}function me(e,t,n,r){return _(e,t).some(e=>e.deny&&g(e,n,r))}function he(e,t,n,r){let i=_(e,t);return i.some(e=>e.deny&&g(e,n,r))?!1:n===t||i.some(e=>!e.deny&&g(e,n,r))}let ge=h();function _e(e){ge=e}function ve(){return ge}function ye(e,t,n){return`add \`${t}:${n}\` (or \`${t}:*\`) under \`[${e}]\` in ${m}`}var be=e({ACCOUNTS_KEY:()=>b,__test__:()=>Ee,addAccount:()=>F,applyProviderDefaults:()=>Ae,clearAllSettings:()=>ft,clearApiKey:()=>st,clearBaseUrl:()=>ut,clearSelectedProvider:()=>it,ensureOAuthMaskReplica:()=>Xe,exportProviders:()=>dt,getAccounts:()=>N,getAllAvailableModels:()=>Ne,getAllExtraOAuthDomains:()=>Re,getAlternativeModelProviders:()=>Pe,getApiKey:()=>at,getApiKeyForProvider:()=>V,getApiVersionForProvider:()=>et,getAvailableProviders:()=>w,getBaseUrl:()=>ct,getBaseUrlForProvider:()=>H,getDeploymentForProvider:()=>$e,getExtraOAuthDomains:()=>Fe,getModelCatalogProviderIds:()=>mt,getOAuthAccountInfo:()=>k,getProviderConfig:()=>E,getProviderModels:()=>O,getRawApiKeyForProvider:()=>B,getSelectedModelId:()=>U,getSelectedProvider:()=>W,isModelHiddenFromPicker:()=>j,isUsableOAuthMaskReplica:()=>R,logoutOAuthAccount:()=>Ve,maskOAuthTokenWithRetry:()=>He,migrateLegacyAuthOnlySelection:()=>we,modelRunsOnProvider:()=>vt,persistOAuthMaskViaServiceWorker:()=>z,policyVisible:()=>M,providerOffersLlmModels:()=>T,removeAccount:()=>I,resolveCurrentModel:()=>J,resolveModelById:()=>q,resolveModelByShorthand:()=>yt,resolveModelIdForScoop:()=>Dt,resolveModelSelectionForScoop:()=>Q,saveOAuthAccount:()=>Qe,setApiKey:()=>ot,setBaseUrl:()=>lt,setExtraOAuthDomains:()=>Ie,setExtraOAuthDomainsAsync:()=>Le,setSelectedModelId:()=>tt,setSelectedProvider:()=>rt});const v=ee,y=l,b=`slicc_accounts`,x=`selected-model`,xe=[`slicc_provider`,`slicc_api_key`,`slicc_base_url`,`anthropic_api_key`,`api_provider`,`azure_resource`,`bedrock_region`],Se=new Set([`github`]);function S(e){let t;try{t=u()}catch{return!1}return t.includes(e)&&!a(e)}let C=!1;function Ce(){if(!C){C=!0;for(let e of xe)try{localStorage.removeItem(e)}catch{}we()}}function we(){try{let e=localStorage.getItem(x);if(e){let t=e.indexOf(`:`);if(t>0){let n=e.slice(0,t);(Se.has(n)||S(n))&&localStorage.removeItem(x)}}}catch{}try{let e=localStorage.getItem(b);if(!e)return;let t=JSON.parse(e);if(!Array.isArray(t))return;let n=t.filter(e=>!(typeof e==`object`&&e&&typeof e.providerId==`string`&&S(e.providerId)));n.length!==t.length&&localStorage.setItem(b,JSON.stringify(n))}catch{}}function Te(){C=!1}const Ee={_resetLegacyCleanup:Te};function w(){let e=u().filter(a),t=i();return[...new Set([...e,...t])].filter(e=>!o(e)?.hidden)}function T(e){try{if(O(e).length>0)return!0}catch{}try{if(l(e).length>0)return!0}catch{}let t=o(e);return!!(t?.modelOverrides&&Object.keys(t.modelOverrides).length>0)}function De(e,t){try{if(O(e).some(e=>e.id===t))return!0}catch{}try{if(l(e).some(e=>e.id===t))return!0}catch{}let n=o(e);return!!(n?.modelOverrides&&Object.hasOwn(n.modelOverrides,t))}function E(e){return o(e)||{id:e,name:e.split(`-`).map(e=>e.charAt(0).toUpperCase()+e.slice(1)).join(` `),description:`${e} provider`,requiresApiKey:!0,requiresBaseUrl:!1}}function D(e,t){t.context_window!==void 0&&(e.contextWindow=t.context_window),t.max_tokens!==void 0&&(e.maxTokens=t.max_tokens),t.reasoning!==void 0&&(e.reasoning=t.reasoning),t.input!==void 0&&(e.input=t.input),t.cost!==void 0&&(e.cost=t.cost,e.inputCost=t.cost.input,e.outputCost=t.cost.output,e.cacheReadCost=t.cost.cacheRead,e.cacheWriteCost=t.cost.cacheWrite),t.compat!==void 0&&(e.compat={...e.compat??{},...t.compat}),t.thinkingLevelMap!==void 0&&(e.thinkingLevelMap={...e.thinkingLevelMap??{},...t.thinkingLevelMap})}function Oe(e){let t=re(e);return{...e,api:`bedrock-camp-converse`,provider:`bedrock-camp`,reasoning:e.reasoning===!0&&(ne(e)||t!==null),...t?{thinkingLevelMap:{...t}}:{}}}function O(e){try{if(e===`bedrock-camp`){let e=te(H(`bedrock-camp`));return ae(y(`amazon-bedrock`),oe).filter(t=>ie(t,e)).map(Oe)}let t=E(e);if(t.getModelIds){let n;try{n=t.getModelIds()}catch(t){return A.error(`Provider getModelIds callback failed`,{providerId:e,error:t instanceof Error?t.message:String(t)}),[]}let r=new Map;for(let e of u())try{for(let t of y(e))r.set(t.id,t)}catch{}return n.map(n=>{let i=n.api===`openai`?`openai`:`anthropic`,a=`${e}-${i}`,o=r.get(n.id),s;if(o)s={...o,api:a,provider:e};else if(s=G(e,n.id,``,a),n.name&&(s.name=n.name),i===`anthropic`){let e=ue(n.id,r);s.cost=e,s.inputCost=e.input,s.outputCost=e.output,s.cacheReadCost=e.cacheRead,s.cacheWriteCost=e.cacheWrite}let c=t.modelOverrides?.[n.id];return c&&D(s,c),D(s,n),s})}if(t.isOAuth){let n=y(`anthropic`),r=`${e}-anthropic`;return n.map(n=>{let i={...n,api:r,provider:e},a=t.modelOverrides?.[n.id];return a&&D(i,a),i})}return y(e===`azure-ai-foundry`?`anthropic`:e)}catch(t){return A.error(`Failed to load models`,{providerId:e,error:t instanceof Error?t.message:String(t)}),[]}}function k(e){let t=N().find(t=>t.providerId===e);if(!t?.accessToken)return null;let n=!!t.tokenExpiresAt&&Date.now()>t.tokenExpiresAt-6e4;return{token:t.accessToken,maskedValue:t.maskedValue,expiresAt:t.tokenExpiresAt,userName:t.userName,userAvatar:t.userAvatar,scopes:t.scopes,expired:n}}const ke=Object.assign({})[`/packages/webapp/providers.json`]??[],A=t(`provider-settings`);function Ae(e=ke){if(e.length===0||N().length>0)return;let t=new Set(w());for(let n of e)if(!(!n.providerId||!n.apiKey)){if(!t.has(n.providerId)){A.warn(`Unknown provider "${n.providerId}" in providers.json — skipping`);continue}F(n.providerId,n.apiKey,n.baseUrl)}let n=e.find(e=>e.providerId&&e.apiKey&&t.has(e.providerId));n?.model&&!localStorage.getItem(x)&&localStorage.setItem(x,`${n.providerId}:${n.model}`)}const je=[/haiku/i];function j(e){return je.some(t=>t.test(e))}function Me(e){return e.filter(e=>!j(e.id))}function M(e,t){let n=$();if(n===null)return e;let r=ve();return e.filter(e=>!me(r,n,t,e.id))}function Ne(){let e=N();if(e.length===0)return[];let t=new Map;for(let n of e){if(t.has(n.providerId))continue;let e=E(n.providerId);if(e.hidden||S(n.providerId))continue;let r=M(Me(O(n.providerId)),n.providerId);if(r.length===0)continue;let i={providerId:n.providerId,providerName:e.name,models:r};t.set(n.providerId,i)}return[...t.values()]}function Pe(e){return Ne().map(e=>e.providerId).filter(t=>t!==e)}function N(){Ce();let e=localStorage.getItem(b);if(!e)return[];try{let t=JSON.parse(e);return Array.isArray(t)?t.filter(e=>typeof e==`object`&&!!e&&typeof e.providerId==`string`&&typeof e.apiKey==`string`):[]}catch{return[]}}function Fe(e){return p(localStorage)[e]??[]}function Ie(e,t){let n=p(localStorage),r=t.map(e=>e.trim()).filter(e=>e.length>0);r.length===0?delete n[e]:n[e]=r,le(localStorage,n)}async function Le(e,t){if(n()){Ie(e,t);return}let i=r();if(!i)throw Error(`setExtraOAuthDomainsAsync: no DOM and no panel-rpc client — cannot persist to page localStorage`);let{storeAfter:a}=await i.call(`oauth-extras-set`,{providerId:e,domains:t});try{le(localStorage,a)}catch(t){A.warn(`worker-shim mirror failed after successful page write — reload to refresh`,{providerId:e,error:t instanceof Error?t.message:String(t)})}}function Re(){return p(localStorage)}function ze(e){localStorage.setItem(b,JSON.stringify(e))}async function P(e){if(n()){ze(e);return}let t=r();if(!t)throw Error(`saveAccountsAsync: no DOM and no panel-rpc client — cannot persist to page localStorage`);let i=JSON.stringify(e),{storedJson:a}=await t.call(`save-oauth-accounts`,{accountsJson:i});try{localStorage.setItem(b,a)}catch(e){A.warn(`worker-shim mirror failed after successful page write — reload to refresh`,{error:e instanceof Error?e.message:String(e)})}}function F(e,t,n,r,i){let a=N().filter(t=>t.providerId!==e),o={providerId:e,apiKey:t};n&&(o.baseUrl=n),r&&(o.deployment=r),i&&(o.apiVersion=i),a.push(o),ze(a)}async function Be(e){let t=d();try{if(t===`extension-direct`){let t=await new Promise(t=>{chrome.runtime.sendMessage({type:`secrets.delete`,name:`oauth.${e}.token`},n=>{chrome.runtime.lastError&&A.error(`SW secrets.delete transport failed`,{providerId:e,error:chrome.runtime.lastError.message}),t(n??{})})});t.error&&A.error(`SW secrets.delete returned error`,{providerId:e,error:t.error})}else if(t===`extension-delegate`){let t=await f(`secrets.delete`,{name:`oauth.${e}.token`});t?.error&&A.error(`Bridge secrets.delete returned error`,{providerId:e,error:t.error})}else if(t!==`connect`){let t=await fetch(s(`/api/secrets/oauth/${e}`),{method:`DELETE`,headers:c()});!t.ok&&t.status!==404&&A.warn(`OAuth replica DELETE non-ok`,{providerId:e,status:t.status})}}catch(n){A.error(`OAuth replica removal failed`,{providerId:e,topology:t,error:n instanceof Error?n.message:String(n)})}}async function I(e){let t=N().find(t=>t.providerId===e),n=E(e);t&&n?.isOAuth&&await Ve(e),await Be(e),await P(N().filter(t=>t.providerId!==e));let r=localStorage.getItem(x)??``,i=r.indexOf(`:`);i>0&&r.slice(0,i)===e&&localStorage.removeItem(x)}async function Ve(e){let t=N().find(t=>t.providerId===e);if(!t)return;let n=E(e);if(n?.isOAuth){if(n.onOAuthLogout)try{await n.onOAuthLogout()}catch(t){A.warn(`onOAuthLogout failed`,{providerId:e,error:t instanceof Error?t.message:String(t)})}if(n.getOAuthLogoutUrl){let r=n.getOAuthLogoutUrl(t);if(r){let{openIdpLogoutUrl:t}=await import(`./oauth-service-Bx_Dy3GC.js`);await t(r).catch(t=>{A.warn(`IdP logout popup failed`,{providerId:e,error:t instanceof Error?t.message:String(t)})})}}await P(N().map(t=>t.providerId===e?{providerId:t.providerId,apiKey:``,baseUrl:t.baseUrl,userName:t.userName,userAvatar:t.userAvatar,loggedOut:!0}:t)),await Be(e)}}async function He(e,t={}){let n=Math.max(1,t.attempts??3),r=t.delayMs??150,i=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),a;for(let t=0;t<n;t++){let o=await e();if(o.maskedValue)return{maskedValue:o.maskedValue};o.error&&(a=o.error),t<n-1&&await i(r)}return{lastError:a}}const Ue=`access token rotated during mask write`;function L(e,t,n,r){let i=r.find(t=>t.providerId===e);return i?.accessToken?i.accessToken===t?(i.maskedValue=n,{maskedValue:n}):(A.warn(`OAuth mask write raced with token rotation; discarding replica`,{providerId:e}),{error:Ue}):{error:`account gone after mask write`}}function R(e,t){return!!e&&e!==t}async function z(e,t,n){let r={providerId:e.providerId,accessToken:e.accessToken,domains:e.domains.join(`,`)},{maskedValue:i,lastError:a}=await He(()=>t.sendMaskRequest(r),n);if(!R(i,e.accessToken)){let t=i?`mask replica equals the access token`:a??`no error reported (cold SW or empty reply)`;return A.error(`OAuth mask give-up: no masked value after retries`,{providerId:e.providerId,reason:t}),{error:t}}let o=t.getAccounts(),s=L(e.providerId,e.accessToken,i,o);return s.maskedValue&&await t.saveAccounts(o),s}function We(e){let t=E(e).oauthTokenDomains??[],n=Fe(e),r=new Set,i=[];for(let e of[...t,...n]){let t=e.toLowerCase();r.has(t)||(r.add(t),i.push(e))}return i}function Ge(e){return new Promise(t=>{chrome.runtime.sendMessage({type:`secrets.mask-oauth-token`,...e},n=>{chrome.runtime.lastError&&A.error(`SW mask-oauth-token transport failed`,{providerId:e.providerId,error:chrome.runtime.lastError.message});let r=typeof n==`object`&&n?n:void 0;r?.error&&A.warn(`SW mask-oauth-token returned error`,{providerId:e.providerId,error:r.error}),t(r??{})})})}function Ke(e){return f(`secrets.mask-oauth-token`,e).then(t=>(t?.error&&A.warn(`Bridge mask-oauth-token returned error`,{providerId:e.providerId,error:t.error}),t??{})).catch(t=>(A.error(`Bridge mask-oauth-token transport failed`,{providerId:e.providerId,error:t instanceof Error?t.message:String(t)}),{}))}async function qe(e,t,n){let r=s(`/api/secrets/oauth-update`),i=await fetch(r,{method:`POST`,headers:c({"Content-Type":`application/json`}),body:JSON.stringify({providerId:e,accessToken:t,domains:n})});if(!i.ok)return A.warn(`OAuth replica POST non-ok`,{providerId:e,status:i.status,url:r}),{error:`OAuth replica POST HTTP ${i.status}`};let a=await i.json();if(typeof a.maskedValue!=`string`)return A.warn(`OAuth replica POST ok but missing maskedValue`,{providerId:e,url:r}),{error:`OAuth replica POST ok but missing maskedValue`};if(!R(a.maskedValue,t))return A.error(`OAuth mask replica equals the access token; refusing to persist`,{providerId:e}),{error:`mask replica equals the access token`};let o=N(),l=L(e,t,a.maskedValue,o);return l.maskedValue&&await P(o),l}async function Je(e,t){let n=await Ye(e,t);if(n.error!==Ue)return n;let r=N().find(t=>t.providerId===e)?.accessToken;return!r||r===t?n:Ye(e,r)}async function Ye(e,t){let n=We(e);if(n.length===0)return{error:`no oauth token domains configured`};let r=d();try{return r===`extension-direct`?z({providerId:e,accessToken:t,domains:n},{sendMaskRequest:Ge,getAccounts:N,saveAccounts:P}):r===`extension-delegate`?z({providerId:e,accessToken:t,domains:n},{sendMaskRequest:Ke,getAccounts:N,saveAccounts:P}):r===`connect`?{error:`no replica store in connect mode`}:await qe(e,t,n)}catch(t){let n=t instanceof Error?t.message:String(t);return A.error(`OAuth replica sync failed`,{providerId:e,topology:r,error:n}),{error:n}}}async function Xe(e){let t=N().find(t=>t.providerId===e);return t?.accessToken?R(t.maskedValue,t.accessToken)?{maskedValue:t.maskedValue}:Je(e,t.accessToken):{error:`no access token held`}}function Ze(e,t){if(e.accessToken)return`scopes`in e?e.scopes:t?.scopes}async function Qe(e){let t=N().find(t=>t.providerId===e.providerId),n=N().filter(t=>t.providerId!==e.providerId);n.push({providerId:e.providerId,apiKey:``,accessToken:e.accessToken,refreshToken:e.refreshToken,tokenExpiresAt:e.tokenExpiresAt,userName:e.userName,userAvatar:e.userAvatar,baseUrl:e.baseUrl??t?.baseUrl,scopes:Ze(e,t)}),await P(n),await Je(e.providerId,e.accessToken)}function B(e){let t=N().find(t=>t.providerId===e);return t&&(t.accessToken||t.apiKey)||null}function V(e){let t=N().find(t=>t.providerId===e);return t?t.accessToken||t.apiKey||(E(e).optionalApiKey?`local`:null):null}function H(e){return N().find(t=>t.providerId===e)?.baseUrl??null}function $e(e){return N().find(t=>t.providerId===e)?.deployment??null}function et(e){return N().find(t=>t.providerId===e)?.apiVersion??null}function U(){let e=localStorage.getItem(x)||``,t=e.indexOf(`:`);return t>=0?e.slice(t+1):e}function tt(e){let t=e.indexOf(`:`);if(t>0){let n=e.slice(0,t),r=new Set([...i(),...w()]),a=n.includes(`.`);if(r.has(n)||!a){localStorage.setItem(x,e);return}}let n=W();localStorage.setItem(x,`${n}:${e}`)}function nt(){return localStorage.getItem(x)||``}function W(){let e=nt(),t=e.indexOf(`:`);if(t>0)return e.slice(0,t);let n=N(),r=U();if(r){let e=n.find(e=>T(e.providerId)&&De(e.providerId,r));if(e)return e.providerId}let i=n.find(e=>T(e.providerId));return i?i.providerId:n.length>0?n[0].providerId:`anthropic`}function rt(e){let t=U();localStorage.setItem(x,`${e}:${t}`)}function it(){let e=U();localStorage.setItem(x,e)}function at(){return V(W())}function ot(e){let t=W();F(t,e,H(t)??void 0)}async function st(){await I(W())}function ct(){return H(W())}function lt(e){let t=W(),n=B(t);n&&F(t,n,e||void 0)}function ut(){let e=W(),t=B(e);t&&F(e,t)}function dt(){let e=N(),t=W(),n=U();return e.map(e=>{let r={providerId:e.providerId,apiKey:e.apiKey};return e.baseUrl&&(r.baseUrl=e.baseUrl),e.providerId===t&&n&&(r.model=n),r})}async function ft(){let e=N();await Promise.allSettled(e.map(e=>I(e.providerId))),localStorage.removeItem(b),localStorage.removeItem(x);for(let e of xe)localStorage.removeItem(e)}function pt(e){return/^(?:gpt[-.]?|o[0-9]|chatgpt)/i.test(e)?`openai`:`anthropic`}function G(e,t,n,r){return{id:t,name:t,provider:e,api:r??`${e}-${pt(t)}`,baseUrl:n??``,contextWindow:2e5,maxTokens:16384,input:[`text`,`image`],cost:{input:0,output:0,cacheRead:0,cacheWrite:0},reasoning:!0}}function K(e,t){return t.isOAuth||e===`azure-ai-foundry`?`anthropic`:e===`bedrock-camp`?`amazon-bedrock`:e}function mt(){let e=new Set;for(let t of N())t.loggedOut||(e.add(t.providerId),e.add(K(t.providerId,E(t.providerId))));return[...e]}function ht(e,t,n){let r=O(e).find(e=>e.id===t);return r?n?{...r,baseUrl:n}:r:null}function gt(e,t,n,r){return n.isOAuth?O(t).find(e=>e.id===r)||{...e,api:`${t}-anthropic`,provider:t}:t===`bedrock-camp`?{...e,api:`bedrock-camp-converse`,provider:`bedrock-camp`}:e}function _t(e,t,n,r,i){let a=ht(e,n,r);if(a)return a;if(t.isOAuth)return G(e,n,r);if(i)throw Error(`Model ${n} is not available from provider ${e}`);return J()}function q(e,t){if(!e)return J();let n=t??W(),r=H(n),i=E(n);if(t!==void 0){let t=ht(n,e,r);if(t)return t}try{let t=K(n,i),a=v(t,e);if(!a?.id)throw Error(`Model ${e} not found`);let o=gt(a,n,i,e);return r?{...o,baseUrl:r}:o}catch(a){return A.debug(`resolveModelById: pi-ai lookup miss, using provider fallback`,{providerId:n,modelId:e,error:a instanceof Error?a.message:String(a)}),_t(n,i,e,r,t!==void 0)}}function vt(e,t){return e.provider===t||e.provider===K(t,E(t))}function J(){let e=W(),t=U(),n=H(e),r=O(e),i=E(e),a=i.defaultModelId?r.find(e=>e.id.toLowerCase().includes(i.defaultModelId.toLowerCase()))?.id:void 0,o=t||a||r[0]?.id||`claude-sonnet-4-6`;try{let t=K(e,i),a=v(t,o);if(!a?.id)throw Error(`Model ${o} not found in ${t} registry`);let s=a;return i.isOAuth?s=r.find(e=>e.id===o)||{...s,api:`${e}-anthropic`,provider:e}:e===`bedrock-camp`&&(s={...s,api:`bedrock-camp-converse`,provider:`bedrock-camp`}),n&&(s={...s,baseUrl:n}),s}catch(t){A.debug(`resolveCurrentModel: pi-ai lookup miss, using provider fallback`,{providerId:e,effectiveModelId:o,error:t instanceof Error?t.message:String(t)});let a=r.find(e=>e.id===o);return a?n?{...a,baseUrl:n}:a:i.isOAuth?G(e,o,n):v(`anthropic`,`claude-sonnet-4-0`)}}function yt(e){let t=e.toLowerCase();if(!t)return null;let n=null;try{n=W()}catch{}if(n!==null){let e=Y(t,[n]);if(e!==null)return e}return Y(t,N().map(e=>e.providerId))}function Y(e,t){let n=null,r=-1;for(let i of t)for(let t of O(i)){let i=t.id.toLowerCase(),a=(t.name??``).toLowerCase();if(!i.includes(e)&&!a.includes(e))continue;let o=t.contextWindow??0;(o>r||o===r&&Ot(t.id,n??``)>0)&&(r=o,n=t.id)}return n}function X(){let e=[];try{for(let t of N())e.includes(t.providerId)||e.push(t.providerId)}catch{}try{let t=W();e.includes(t)||e.push(t)}catch{}return e}function bt(e){let t=e.indexOf(`:`);if(t<=0||t===e.length-1)return null;let n=e.slice(0,t),r=e.slice(t+1),i=X().includes(n);if(i)return{providerId:n,modelId:r,configured:i};let a=!1;try{a=w().includes(n)}catch{}return a?{providerId:n,modelId:r,configured:!1}:null}function Z(e,t,n=!0){let r=[e],i=n?Y(e.toLowerCase(),[t]):null;i!==null&&i!==e&&r.push(i);let a=[];try{a=O(t)}catch{}for(let n of r)if(!(a.length>0&&!a.some(e=>e.id===n)))try{if(q(n,t).id===n)return{modelId:n,providerId:t}}catch(r){A.debug(`selectModelFromProvider: candidate did not resolve`,{input:e,candidate:n,providerId:t,error:r instanceof Error?r.message:String(r)})}return null}function xt(e){return e.map(e=>`${e.providerId}:${e.modelId}`).join(`, `)}function Q(e){if(!e)return{ok:!1,error:`unknown model: (empty)`};let t=bt(e);if(t)return Tt(e,t);let n=null;try{n=W()}catch{}if(n!==null){let t=Z(e,n);if(t)return wt(t)}return Et(e,n)}function $(){try{return W()}catch{return null}}function St(e){let t=$();return t===null||he(ve(),t,e.providerId,e.modelId)}function Ct(e){let t=$()??`<none>`;return{ok:!1,error:`model not allowed: ${`${e.providerId}:${e.modelId}`} is blocked by ${m} while "${t}" is selected — ${ye(t,e.providerId,e.modelId)}`}}function wt(e){return St(e)?{ok:!0,selection:e}:Ct(e)}function Tt(e,t){if(!t.configured){let n=X();return{ok:!1,error:`unknown model: ${e} (provider "${t.providerId}" is not configured${n.length>0?`; configured: ${n.join(`, `)}`:``})`}}let n=Z(t.modelId,t.providerId);return n?wt(n):{ok:!1,error:`unknown model: ${e} (provider "${t.providerId}" does not offer "${t.modelId}")`}}function Et(e,t){let n=X().filter(e=>e!==t);for(let t of[`exact`,`shorthand`]){let r=[];for(let i of n){let n=t===`exact`?e:Y(e.toLowerCase(),[i]);if(n===null)continue;let a=Z(n,i,!1);a&&r.push(a)}let i=r.filter(St);if(i.length===0&&r.length>0)return Ct(r[0]);if(i.length===1)return{ok:!0,selection:i[0]};if(i.length>1)return{ok:!1,error:`ambiguous model: ${e} matches ${xt(i)} — qualify it as provider:model`}}return{ok:!1,error:`unknown model: ${e}`}}function Dt(e){let t=Q(e);return t.ok?t.selection.modelId:null}function Ot(e,t){let n=e.match(/\d+/g)?.map(Number)??[],r=t.match(/\d+/g)?.map(Number)??[],i=Math.max(n.length,r.length);for(let e=0;e<i;e++){let t=(n[e]??0)-(r[e]??0);if(t!==0)return t}return 0}export{p as C,ue as S,Qe as _,V as a,pe as b,$e as c,U as d,W as f,Q as g,q as h,at as i,k as l,J as m,Xe as n,et as o,vt as p,N as r,H as s,be as t,O as u,m as v,_e as x,h as y};

package/dist/ui/assets/adobe-C2NABnF7.js

@@ -1,2 +0,0 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/oauth-service-B-vKfxAF.js","assets/preload-helper-Czpn1I53.js","assets/proxied-fetch-Cplb-Tee.js","assets/rolldown-runtime-Dd_uD5pT.js","assets/base64-ELzoYfwP.js","assets/proxy-error-BSFYY7jj.js","assets/api-endpoint-DuEQRZ4g.js","assets/runtime-env-Dlaokqg1.js","assets/panel-rpc-D3EPRnmw.js","assets/permissions-surface-registry-CilCRwhh.js"])))=>i.map(i=>d[i]);
-import{a as e,o as t}from"./core-4boN-CgI.js";import{a as n}from"./diagnostics-Cag7MsZI.js";import{t as r}from"./preload-helper-Czpn1I53.js";import{a as i}from"./compat-BAGLwgqY.js";import{a,r as o,s,t as c}from"./legacy-api-aliases-BjgG1CsY.js";import{$ as l,A as u,K as d,f,x as p}from"./account-store-B857f9Kw.js";import{t as m}from"./providers-jygoVQBo.js";import{t as h}from"./panel-rpc-D3EPRnmw.js";import{i as g,n as _,r as ee}from"./claude-model-version-DZmbk9E2.js";import"./main-CxkrqswY.js";import{n as v,t as te}from"./silent-renew-backoff-BJestVXs.js";import{i as ne}from"./provider-budget-LCzMPlKv.js";import{getOAuthPageOrigin as re}from"./oauth-service-B-vKfxAF.js";import{n as y}from"./pi-transcript-context-miZCMig3.js";import{n as b}from"./temperature-support-DhoZT6gU.js";import{t as x}from"./llm-session-id-bZQs6gBN.js";var ie={proxyEndpoint:`https://adobe-llm-proxy.paolo-moz.workers.dev`,redirectUri:`https://www.sliccy.ai/auth/callback`,extensionRedirectUri:`https://akjjllgokmbgpbdbmafpiefnhidlmbgf.chromiumapp.org/adobe`};function ae(e,t){return _(e,t)}function oe(e,t,n){return e!==`xhigh`||!t?e:g(t,n)?`xhigh`:ee(t,n)?`max`:`high`}function se(e,t){let n=e?t?.thinkingLevelMap?.[e]:void 0;return oe((()=>{if(typeof n==`string`)return n;switch(e){case`minimal`:case`low`:return`low`;case`medium`:return`medium`;case`xhigh`:return`xhigh`;default:return`high`}})(),t?.id,t?.name)}function ce(e,t){return async(n,r)=>{let i=t?await t(n,r)??n:n,a=i.thinking;return a&&a.type===`enabled`&&(i.thinking={type:`adaptive`,...a.display===void 0?{}:{display:a.display}},i.output_config={...i.output_config??{},effort:e}),i}}function le(e,t){if(!ae(e.id,e.name))return t;let n=t,r=oe(n.effort??se(n.reasoning,e),e.id,e.name);return{...t,onPayload:ce(r,n.onPayload)}}function ue(e,t){let n={id:e.id,name:e.name??e.id},r=t?.api??e.api,i=t?.context_window??e.context_window,a=t?.max_tokens??e.max_tokens,o=t?.reasoning??e.reasoning,s=t?.input??e.input;r&&(n.api=r),i!==void 0&&(n.context_window=i),a!==void 0&&(n.max_tokens=a),o!==void 0&&(n.reasoning=o),s&&(n.input=s);let c=t?.cost??e.cost;return c&&(n.cost=c),/haiku/i.test(e.id)&&(n.compat={supportsEagerToolInputStreaming:!1}),/sonnet-5\b/i.test(e.id)&&!n.thinkingLevelMap&&(n.thinkingLevelMap={xhigh:`xhigh`}),n}var de=8e3;async function fe(e,t,n,r={}){let i=typeof AbortController==`function`?new AbortController:null,a=i?setTimeout(()=>i.abort(),r.timeoutMs??de):null;try{let a=await n(`${e.replace(/\/$/,``)}/v1/usage`,{headers:{...r.headers,Authorization:`Bearer ${t}`},...i?{signal:i.signal}:{}});if(a.status===404||a.status===501)return null;if(!a.ok)throw Error(`Adobe /v1/usage returned ${a.status}`);return ne(await a.json())}finally{a&&clearTimeout(a)}}var pe=6e4,me=3e5,he=18e5,ge=class{resolve;providerId;now;#e=null;#t=null;#n=null;#r=null;constructor(e,t,n=Date.now){this.resolve=e,this.providerId=t,this.now=n}#i(e){return e===`ok`?pe:e===`unsupported`?he:me}isStale(){let e=this.#e;return!e||this.#t!==this.providerId()||this.now()-e.at>=this.#i(e.outcome)}snapshot(){return this.#t===this.providerId()?this.#e?.window??null:null}async refresh(e={}){if(!e.force&&!this.isStale())return this.snapshot();let t=this.providerId();return this.#n!==null&&this.#r===t?this.#n:(this.#n=this.resolve().then(e=>{let n=e?{...e,at:this.now()}:null;return this.#a(t,n?`ok`:`unsupported`,n),n}).catch(()=>{let e=this.snapshot();return this.#a(t,`failed`,e),e}).finally(()=>{this.#r===t&&(this.#n=null,this.#r=null)}),this.#r=t,this.#n)}#a(e,t,n){e===this.providerId()&&(this.#t=e,this.#e={outcome:t,window:n,at:this.now()})}clear(){this.#e=null,this.#t=null}};async function _e(){let e=u();if(!e)return null;let t=m(e);if(!t?.getBudgetUsage)return null;let n=await t.getBudgetUsage();return n?{...n,providerId:e}:null}function ve(){try{return u()}catch{return``}}var ye=new ge(_e,ve);function S(){ye.clear()}var C=Object.assign({"/packages/webapp/providers/adobe-config.json":ie})[`/packages/webapp/providers/adobe-config.json`]??{clientId:``,proxyEndpoint:``,scopes:`openid,profile,email`};function w(){let e=p(`adobe`);if(e)return e.replace(/\/$/,``);if(C.proxyEndpoint)return C.proxyEndpoint.replace(/\/$/,``);throw Error(`Adobe proxy endpoint not configured — set it in Settings or adobe-config.json`)}var T=new Map,E=new Map,D=`slicc-adobe-models`;function O(e){try{localStorage.setItem(D,JSON.stringify(e))}catch{}}async function k(e){try{let t=await fetch(`${e}/v1/config`,{headers:{[K]:`6.232.2`}});return t.ok?await t.json():(console.warn(`[adobe] Proxy /v1/config returned ${t.status}`),null)}catch(e){return console.warn(`[adobe] Failed to fetch proxy config:`,e instanceof Error?e.message:String(e)),null}}async function A(e){let t=T.get(e);if(t)return t;let n=await k(e);return n||=(await new Promise(e=>setTimeout(e,600)),await k(e)),n?(T.set(e,n),n):{}}function j(e){let t=e.clientId||C.clientId;if(!t)throw Error(`Could not determine IMS client ID — proxy /v1/config did not return one and adobe-config.json is empty`);return t}function M(e){return e.scopes||C.scopes}function N(e){return e.imsEnvironment||C.imsEnvironment||`prod`}var P={prod:`https://ims-na1.adobelogin.com`,stg1:`https://ims-na1-stg1.adobelogin.com`};function F(e){return P[e??C.imsEnvironment??`prod`]??P.prod}var be=1e4,xe=5e3;async function I(){let e;try{e=w()}catch{return{}}return T.get(e)||new Promise(t=>{let n=setTimeout(()=>t({}),xe),r=e=>{clearTimeout(n),t(e)};A(e).then(r,()=>r({}))})}function L(e){try{let t=e.split(`.`)[1];if(!t)return;let n=t.replace(/-/g,`+`).replace(/_/g,`/`),r=atob(n+`=`.repeat((4-n.length%4)%4)),i=JSON.parse(r);return typeof i.client_id==`string`?i.client_id:void 0}catch{return}}var R=typeof chrome<`u`&&!!chrome?.runtime?.id;function z(){return f().find(e=>e.providerId===`adobe`)}var Se=[`/ims/profile/v1`,`/ims/userinfo/v2`];async function Ce(e,t){try{let n=await fetch(e,{headers:{Authorization:`Bearer ${t}`}});if(!n.ok){console.warn(`[adobe] Profile fetch ${e} returned ${n.status}`);return}let r=await n.json(),i=r.displayName||r.name||r.email;return i?{name:i,avatar:r.picture||r.avatar_url}:void 0}catch(t){console.warn(`[adobe] Profile fetch ${e} failed:`,t instanceof Error?t.message:String(t));return}}async function we(e,t){for(let n of Se){let r=await Ce(`${F(t)}${n}`,e);if(r)return r}return console.warn(`[adobe] No IMS profile endpoint named the user; account will have no display name`),{}}async function Te(){let e=z(),t=e?.accessToken;if(!t)return{status:`unknown`,detail:`no stored token`};let n=await I(),r=L(t)||n.clientId||C.clientId||``;if(!r)return{status:`unknown`,detail:`no IMS client ID available`};let i=F(N(n));try{let n=await fetch(`${i}/ims/validate_token/v1`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({client_id:r,token:t,type:`access_token`}),signal:AbortSignal.timeout(be)});if(!n.ok)return{status:`unknown`,detail:`HTTP ${n.status}${n.statusText?` ${n.statusText}`:``}`};let a=await n.json();return a.valid===!0?{status:`accepted`,userName:e?.userName}:a.valid===!1?{status:`rejected`,detail:`IMS reported the token invalid (${typeof a.reason==`string`?a.reason:`no reason given`})`}:{status:`unknown`,detail:"IMS answered 200 without a boolean `valid` verdict"}}catch(e){return{status:`unknown`,detail:e instanceof Error?e.message:String(e)}}}function B(e){let t=e.indexOf(`#`);if(t<0)return null;let n=new URLSearchParams(e.slice(t+1)),r=n.get(`access_token`);return r?{accessToken:r,expiresIn:parseInt(n.get(`expires_in`)??`86400`,10),scope:n.get(`scope`)??void 0}:null}var V={id:`adobe`,name:`Adobe`,description:`Claude via Adobe — login with your Adobe ID`,requiresApiKey:!1,requiresBaseUrl:!C.proxyEndpoint,baseUrlPlaceholder:`https://your-proxy.example.com`,baseUrlDescription:`Anthropic-compatible proxy endpoint`,isOAuth:!0,defaultModelId:`sonnet`,oauthTokenDomains:[`ims-na1.adobelogin.com`,`ims-na1-stg1.adobelogin.com`,`*.adobelogin.com`,`*.adobe.io`,`firefall.adobe.io`,`admin.hlx.page`,`admin.hlx.live`,`admin.aem.page`,`admin.aem.live`,`api.aem.live`],getBudgetUsage:De,getModelIds:()=>{let e=e=>ue(e,E.get(e.id));for(let t of Q.values())if(t.length){let n=t.map(t=>e({id:t.id,name:t.name??t.id,reasoning:t.reasoning,input:t.input,cost:t.cost}));return O(n),n}for(let t of T.values())if(t.models?.length)return t.models.map(t=>e(t));try{let e=localStorage.getItem(D);if(e){let t=JSON.parse(e);if(t.length)return t}}catch{}return[{id:`claude-sonnet-4-6`,name:`Claude Sonnet 4.6`}]},onOAuthLogin:async(e,t,n)=>{let r=w(),i=await A(r),a=j(i),o=M(i),s=N(i),c=R?null:await re(),l=R?null:v({pageHref:c.href,pageOrigin:c.origin,configuredRedirectUri:C.redirectUri},()=>crypto.randomUUID()),u=R?C.extensionRedirectUri??`https://${chrome.runtime.id}.chromiumapp.org/`:l.redirectUri,f=l?.oauthState,p=l?.expectedNonce??null,m=new URLSearchParams({client_id:a,scope:o,response_type:`token`,redirect_uri:u});f&&m.set(`state`,f),n?.forceReauth&&m.set(`prompt`,`login`);let h=await e(`${F(s)}/ims/authorize/v2?${m}`);if(!h)return;if(p&&h)try{if(new URL(h).searchParams.get(`nonce`)!==p){console.error(`[adobe] OAuth nonce mismatch — possible CSRF`);return}}catch(e){console.warn(`[adobe] Nonce check skipped (URL parse failed):`,e instanceof Error?e.message:String(e))}let g=B(h);if(!g){console.error(`[adobe] Could not extract token from redirect URL`);return}let _=await we(g.accessToken,s);await d({providerId:`adobe`,accessToken:g.accessToken,tokenExpiresAt:Date.now()+g.expiresIn*1e3,userName:_.name,userAvatar:_.avatar,scopes:g.scope,baseUrl:C.proxyEndpoint?void 0:r}),S(),await $().catch(e=>console.warn(`[adobe] Failed to fetch models after login:`,e instanceof Error?e.message:String(e))),t()},onOAuthLogout:async()=>{let e=z();if(e?.accessToken)try{let t=await I(),n=L(e.accessToken)||t.clientId||C.clientId,r=N(t);if(n){let t=await fetch(`${F(r)}/ims/revoke`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({token:e.accessToken,token_type_hint:`access_token`,client_id:n})});t.ok||console.warn(`[adobe] Token revocation returned ${t.status}, token may still be valid server-side`)}}catch(e){console.warn(`[adobe] Failed to revoke token:`,e instanceof Error?e.message:String(e))}await d({providerId:`adobe`,accessToken:``}),S()},onSilentRenew:async()=>z()?.accessToken?G():null,onValidateToken:Te,refreshModels:async e=>{await $(e);let t=V.getModelIds?.();t?.length&&O(t)}},H=null,Ee=te();async function U(){let e=z();if(!e?.accessToken)throw Error(`Not logged in to Adobe — please log in first`);if((e.tokenExpiresAt??0)-Date.now()>6e4)return e.accessToken;console.log(`[adobe] Token expired or expiring soon, attempting silent renewal...`);let t=await Ee.run(()=>G());if(t)return t;let n=z();if((n?.tokenExpiresAt??0)-Date.now()>0&&n?.accessToken)return n.accessToken;throw Error(`Adobe session expired — please log in again`)}async function De(){let e;try{e=w()}catch{return null}let t=z();if(!t?.accessToken||W())throw Error(`Adobe budget: not signed in`);return fe(e,t.accessToken,fetch,{headers:{"X-Session-Id":x(Ne)}})}function W(){let e=z();return!e?.tokenExpiresAt||Date.now()>e.tokenExpiresAt-6e4}async function G(){if(typeof window>`u`){let e=h();if(!e)return null;try{let{accessToken:t}=await e.call(`silent-renew`,{providerId:`adobe`},{timeoutMs:13e4});return t}catch(e){return console.warn(`[adobe] worker→page silent-renew bridge failed:`,e instanceof Error?e.message:String(e)),null}}return H===null&&(H=je().finally(()=>{H=null})),H}function Oe(e,t){let n=j(t),r=M(t),i=N(t),a=R?null:v({pageHref:window.location.href,pageOrigin:window.location.origin,configuredRedirectUri:C.redirectUri},()=>crypto.randomUUID()),o=R?C.extensionRedirectUri??`https://${chrome.runtime.id}.chromiumapp.org/`:a.redirectUri,s=a?.oauthState,c=a?.expectedNonce??null,l=new URLSearchParams({client_id:n,scope:r,response_type:`token`,redirect_uri:o,prompt:`none`});return s&&l.set(`state`,s),{authorizeUrl:`${F(i)}/ims/authorize/v2?${l}`,expectedNonce:c,proxyEndpoint:e}}function ke(e,t){if(!t)return!0;try{if(new URL(e).searchParams.get(`nonce`)!==t)return console.error(`[adobe] OAuth nonce mismatch — possible CSRF`),!1}catch(e){console.warn(`[adobe] Nonce check skipped (URL parse failed):`,e instanceof Error?e.message:String(e))}return!0}async function Ae(e,t){let n=z();await d({providerId:`adobe`,accessToken:e.accessToken,tokenExpiresAt:Date.now()+e.expiresIn*1e3,userName:n?.userName,userAvatar:n?.userAvatar,scopes:e.scope,baseUrl:C.proxyEndpoint?void 0:t})}async function je(){try{let e=w(),{authorizeUrl:t,expectedNonce:n}=Oe(e,await A(e)),{createOAuthLauncher:i}=await r(async()=>{let{createOAuthLauncher:e}=await import(`./oauth-service-B-vKfxAF.js`);return{createOAuthLauncher:e}},__vite__mapDeps([0,1,2,3,4,5,6,7,8,9])),a=await i()(t,{interactive:!1});if(!a||!ke(a,n))return null;let o=B(a);return o?(await Ae(o,e),console.log(`[adobe] Token renewed silently`),await $().catch(e=>console.warn(`[adobe] Failed to refresh models after silent renewal:`,e instanceof Error?e.message:String(e))),o.accessToken):null}catch(e){return console.warn(`[adobe] Silent renewal error:`,e instanceof Error?e.message:String(e)),null}}var K=`X-Slicc-Version`;function q(e){let t={},n=K.toLowerCase();if(e.headers)for(let[r,i]of Object.entries(e.headers))r.toLowerCase()!==n&&(t[r]=i);return t[K]=`6.232.2`,{...e,headers:t}}var Me=`adobe-provider-fallback`,Ne=`adobe-usage-probe`,J=new Set;function Y(e,t){if(e.headers){for(let[t,n]of Object.entries(e.headers))if(t.toLowerCase()===`x-session-id`&&n!=null)return e}return J.has(t)||(J.add(t),console.warn(`[adobe] Missing X-Session-Id from ${t} — using daily fallback. Attach an X-Session-Id header at the call site (see scoop-context.ts streamWithSessionId or docs/pitfalls.md).`)),{...e,headers:{...e.headers??{},"X-Session-Id":x(Me)}}}function Pe(){J.clear()}function Fe(e,t){return{type:`error`,reason:`error`,error:{role:`assistant`,content:[],api:`adobe-anthropic`,provider:`adobe`,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:`error`,errorMessage:t instanceof Error?t.message:String(t),timestamp:Date.now()}}}function X(e){console.error(`[adobe] Stream error:`,e instanceof Error?e.message:String(e))}var Ie=(e,t,r={})=>{let i=n();return Le(i,e,t,r).catch(X),i};async function Le(e,t,n,r){try{let i=await U();if(String(t.api).includes(`openai`)){let a={...t,baseUrl:`${w()}/v1`,api:`openai-completions`,compat:{...t.compat,supportsStore:!1,supportsDeveloperRole:!1}},s=o(a,y(n),q(Y({...r,apiKey:i},`streamAdobe[openai]`)));for await(let t of s)e.push(t)}else{let a={...t,baseUrl:w(),api:`anthropic-messages`},o=c(a,y(n),q(Y(le(t,b(t.id,t.name,{...r,apiKey:i})),`streamAdobe[anthropic]`)));for await(let t of o)e.push(t)}e.end()}catch(n){X(n),e.push(Fe(t,n)),e.end()}}var Z=(e,t,r)=>{let i=n();return Re(i,e,t,r).catch(X),i};async function Re(e,t,n,r){try{let i=await U();if(String(t.api).includes(`openai`)){let a={...t,baseUrl:`${w()}/v1`,api:`openai-completions`,compat:{...t.compat,supportsStore:!1,supportsDeveloperRole:!1}},o=s(a,y(n),q(Y({...r,apiKey:i},`streamSimpleAdobe[openai]`)));for await(let t of o)e.push(t)}else{let o={...t,baseUrl:w(),api:`anthropic-messages`},s=a(o,y(n),q(Y(le(t,b(t.id,t.name,{...r,apiKey:i})),`streamSimpleAdobe[anthropic]`)));for await(let t of s)e.push(t)}e.end()}catch(n){X(n),e.push(Fe(t,n)),e.end()}}function ze(e){let t={id:e.id,name:e.name};return e.api!==void 0&&(t.api=e.api),e.context_window!==void 0&&(t.context_window=e.context_window),e.max_tokens!==void 0&&(t.max_tokens=e.max_tokens),e.reasoning!==void 0&&(t.reasoning=e.reasoning),e.input!==void 0&&(t.input=e.input),t}function Be(){let n=new Map;for(let r of t())try{let t=e(r);for(let e of t)n.set(e.id,e)}catch{}return n}function Ve(e,t,n){let r=`adobe-${e.api===`openai`?`openai`:`anthropic`}`,i=n.get(e.id);if(i)return{...i,provider:`adobe`,api:r};let a=l(e.id,n);return{id:e.id,name:e.name??e.id,provider:`adobe`,api:r,baseUrl:t,contextWindow:2e5,maxTokens:16384,input:[`text`,`image`],cost:a,inputCost:a.input,outputCost:a.output,cacheReadCost:a.cacheRead,cacheWriteCost:a.cacheWrite,reasoning:!0}}function He(e,t){for(let t of e)E.set(t.id,ze(t));let n=Be();return e.map(e=>Ve(e,t,n))}async function Ue(e){try{let t=e??await U(),n=w(),r=await fetch(`${n}/v1/models`,{headers:{Authorization:`Bearer ${t}`,[K]:`6.232.2`}});if(!r.ok)console.warn(`[adobe] Proxy /v1/models returned ${r.status}, falling back to Anthropic models`);else{let e=await r.json();if(e.data?.length)return He(e.data,n)}}catch(e){console.warn(`[adobe] Failed to fetch proxy models:`,e instanceof Error?e.message:String(e))}return null}var Q=new Map;function We(){return e(`anthropic`).map(e=>({...e,provider:`adobe`,api:`adobe-anthropic`}))}async function $(e){let t=w(),n=Q.get(t);if(n)return n;let r=await Ue(e);return r?(Q.set(t,r),r):We()}function Ge(){i({api:`adobe-anthropic`,stream:Ie,streamSimple:Z}),i({api:`adobe-openai`,stream:Ie,streamSimple:Z})}export{Pe as __resetAdobeSessionIdWarningCacheForTests,V as config,B as extractTokenFromUrl,$ as getAdobeModels,U as getValidAccessToken,W as isTokenExpired,Ge as register};

package/dist/ui/assets/adobe-hInWK-RG.js

@@ -1 +0,0 @@
-import{S as e,_ as t,r as n,s as r}from"./account-store-C8W_QB2_.js";import{r as i}from"./panel-rpc-DW7W4w6_.js";import{a}from"./diagnostics-Cag7MsZI.js";import{a as o}from"./compat-nGhSz-U1.js";import{a as s,o as c}from"./core-ButDwsf2.js";import{a as l,r as u,s as d,t as f}from"./legacy-api-aliases--xyLjPgC.js";import{a as p,i as m,r as h}from"./claude-model-version-ceOteQ2f.js";import{r as g}from"./provider-budget-DbHWq3j6.js";import{n as _}from"./llm-session-id-BZyXP_j2.js";import{n as v}from"./pi-transcript-context-4pjVPiVC.js";import{m as y}from"./kernel-worker-M218S0e9.js";import{n as b,t as ee}from"./silent-renew-backoff-Dmz3DJHb.js";import{getOAuthPageOrigin as te}from"./oauth-service-Bx_Dy3GC.js";import{n as x}from"./temperature-support-0nztUM0u.js";import"./provider-settings-5llrPtIb.js";var ne={proxyEndpoint:`https://adobe-llm-proxy.paolo-moz.workers.dev`,redirectUri:`https://www.sliccy.ai/auth/callback`,extensionRedirectUri:`https://akjjllgokmbgpbdbmafpiefnhidlmbgf.chromiumapp.org/adobe`};function re(e,t){return h(e,t)}function S(e,t,n){return e!==`xhigh`||!t?e:p(t,n)?`xhigh`:m(t,n)?`max`:`high`}function ie(e,t){let n=e?t?.thinkingLevelMap?.[e]:void 0;return S((()=>{if(typeof n==`string`)return n;switch(e){case`minimal`:case`low`:return`low`;case`medium`:return`medium`;case`xhigh`:return`xhigh`;default:return`high`}})(),t?.id,t?.name)}function ae(e,t){return async(n,r)=>{let i=t?await t(n,r)??n:n,a=i.thinking;return a&&a.type===`enabled`&&(i.thinking={type:`adaptive`,...a.display===void 0?{}:{display:a.display}},i.output_config={...i.output_config??{},effort:e}),i}}function C(e,t){if(!re(e.id,e.name))return t;let n=t,r=S(n.effort??ie(n.reasoning,e),e.id,e.name);return{...t,onPayload:ae(r,n.onPayload)}}function oe(e,t){let n={id:e.id,name:e.name??e.id},r=t?.api??e.api,i=t?.context_window??e.context_window,a=t?.max_tokens??e.max_tokens,o=t?.reasoning??e.reasoning,s=t?.input??e.input;r&&(n.api=r),i!==void 0&&(n.context_window=i),a!==void 0&&(n.max_tokens=a),o!==void 0&&(n.reasoning=o),s&&(n.input=s);let c=t?.cost??e.cost;return c&&(n.cost=c),/haiku/i.test(e.id)&&(n.compat={supportsEagerToolInputStreaming:!1}),/sonnet-5\b/i.test(e.id)&&!n.thinkingLevelMap&&(n.thinkingLevelMap={xhigh:`xhigh`}),n}async function se(e,t,n,r={}){let i=typeof AbortController==`function`?new AbortController:null,a=i?setTimeout(()=>i.abort(),r.timeoutMs??8e3):null;try{let a=await n(`${e.replace(/\/$/,``)}/v1/usage`,{headers:{...r.headers,Authorization:`Bearer ${t}`},...i?{signal:i.signal}:{}});if(a.status===404||a.status===501)return null;if(!a.ok)throw Error(`Adobe /v1/usage returned ${a.status}`);return g(await a.json())}finally{a&&clearTimeout(a)}}const w=Object.assign({"/packages/webapp/providers/adobe-config.json":ne})[`/packages/webapp/providers/adobe-config.json`]??{clientId:``,proxyEndpoint:``,scopes:`openid,profile,email`};function T(){let e=r(`adobe`);if(e)return e.replace(/\/$/,``);if(w.proxyEndpoint)return w.proxyEndpoint.replace(/\/$/,``);throw Error(`Adobe proxy endpoint not configured — set it in Settings or adobe-config.json`)}const E=new Map,ce=new Map,le=`slicc-adobe-models`;function ue(e){try{localStorage.setItem(le,JSON.stringify(e))}catch{}}async function D(e){try{let t=await fetch(`${e}/v1/config`,{headers:{[W]:`6.232.2`}});return t.ok?await t.json():(console.warn(`[adobe] Proxy /v1/config returned ${t.status}`),null)}catch(e){return console.warn(`[adobe] Failed to fetch proxy config:`,e instanceof Error?e.message:String(e)),null}}async function O(e){let t=E.get(e);if(t)return t;let n=await D(e);return n||=(await new Promise(e=>setTimeout(e,600)),await D(e)),n?(E.set(e,n),n):{}}function k(e){let t=e.clientId||w.clientId;if(!t)throw Error(`Could not determine IMS client ID — proxy /v1/config did not return one and adobe-config.json is empty`);return t}function A(e){return e.scopes||w.scopes}function j(e){return e.imsEnvironment||w.imsEnvironment||`prod`}const M={prod:`https://ims-na1.adobelogin.com`,stg1:`https://ims-na1-stg1.adobelogin.com`};function N(e){return M[e??w.imsEnvironment??`prod`]??M.prod}async function P(){let e;try{e=T()}catch{return{}}return E.get(e)||new Promise(t=>{let n=setTimeout(()=>t({}),5e3),r=e=>{clearTimeout(n),t(e)};O(e).then(r,()=>r({}))})}function F(e){try{let t=e.split(`.`)[1];if(!t)return;let n=t.replace(/-/g,`+`).replace(/_/g,`/`),r=atob(n+`=`.repeat((4-n.length%4)%4)),i=JSON.parse(r);return typeof i.client_id==`string`?i.client_id:void 0}catch{return}}const I=typeof chrome<`u`&&!!chrome?.runtime?.id;function L(){return n().find(e=>e.providerId===`adobe`)}const de=[`/ims/profile/v1`,`/ims/userinfo/v2`];async function fe(e,t){try{let n=await fetch(e,{headers:{Authorization:`Bearer ${t}`}});if(!n.ok){console.warn(`[adobe] Profile fetch ${e} returned ${n.status}`);return}let r=await n.json(),i=r.displayName||r.name||r.email;return i?{name:i,avatar:r.picture||r.avatar_url}:void 0}catch(t){console.warn(`[adobe] Profile fetch ${e} failed:`,t instanceof Error?t.message:String(t));return}}async function pe(e,t){for(let n of de){let r=await fe(`${N(t)}${n}`,e);if(r)return r}return console.warn(`[adobe] No IMS profile endpoint named the user; account will have no display name`),{}}async function me(){let e=L(),t=e?.accessToken;if(!t)return{status:`unknown`,detail:`no stored token`};let n=await P(),r=F(t)||n.clientId||w.clientId||``;if(!r)return{status:`unknown`,detail:`no IMS client ID available`};let i=N(j(n));try{let n=await fetch(`${i}/ims/validate_token/v1`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({client_id:r,token:t,type:`access_token`}),signal:AbortSignal.timeout(1e4)});if(!n.ok)return{status:`unknown`,detail:`HTTP ${n.status}${n.statusText?` ${n.statusText}`:``}`};let a=await n.json();return a.valid===!0?{status:`accepted`,userName:e?.userName}:a.valid===!1?{status:`rejected`,detail:`IMS reported the token invalid (${typeof a.reason==`string`?a.reason:`no reason given`})`}:{status:`unknown`,detail:"IMS answered 200 without a boolean `valid` verdict"}}catch(e){return{status:`unknown`,detail:e instanceof Error?e.message:String(e)}}}function R(e){let t=e.indexOf(`#`);if(t<0)return null;let n=new URLSearchParams(e.slice(t+1)),r=n.get(`access_token`);return r?{accessToken:r,expiresIn:parseInt(n.get(`expires_in`)??`86400`,10),scope:n.get(`scope`)??void 0}:null}const z={id:`adobe`,name:`Adobe`,description:`Claude via Adobe — login with your Adobe ID`,requiresApiKey:!1,requiresBaseUrl:!w.proxyEndpoint,baseUrlPlaceholder:`https://your-proxy.example.com`,baseUrlDescription:`Anthropic-compatible proxy endpoint`,isOAuth:!0,defaultModelId:`sonnet`,oauthTokenDomains:[`ims-na1.adobelogin.com`,`ims-na1-stg1.adobelogin.com`,`*.adobelogin.com`,`*.adobe.io`,`firefall.adobe.io`,`admin.hlx.page`,`admin.hlx.live`,`admin.aem.page`,`admin.aem.live`,`api.aem.live`],getBudgetUsage:ge,getModelIds:()=>{let e=e=>oe(e,ce.get(e.id));for(let t of Q.values())if(t.length){let n=t.map(t=>e({id:t.id,name:t.name??t.id,reasoning:t.reasoning,input:t.input,cost:t.cost}));return ue(n),n}for(let t of E.values())if(t.models?.length)return t.models.map(t=>e(t));try{let e=localStorage.getItem(le);if(e){let t=JSON.parse(e);if(t.length)return t}}catch{}return[{id:`claude-sonnet-4-6`,name:`Claude Sonnet 4.6`}]},onOAuthLogin:async(e,n,r)=>{let i=T(),a=await O(i),o=k(a),s=A(a),c=j(a),l=I?null:await te(),u=I?null:b({pageHref:l.href,pageOrigin:l.origin,configuredRedirectUri:w.redirectUri},()=>crypto.randomUUID()),d=I?w.extensionRedirectUri??`https://${chrome.runtime.id}.chromiumapp.org/`:u.redirectUri,f=u?.oauthState,p=u?.expectedNonce??null,m=new URLSearchParams({client_id:o,scope:s,response_type:`token`,redirect_uri:d});f&&m.set(`state`,f),r?.forceReauth&&m.set(`prompt`,`login`);let h=await e(`${N(c)}/ims/authorize/v2?${m}`);if(!h)return;if(p&&h)try{if(new URL(h).searchParams.get(`nonce`)!==p){console.error(`[adobe] OAuth nonce mismatch — possible CSRF`);return}}catch(e){console.warn(`[adobe] Nonce check skipped (URL parse failed):`,e instanceof Error?e.message:String(e))}let g=R(h);if(!g){console.error(`[adobe] Could not extract token from redirect URL`);return}let _=await pe(g.accessToken,c);await t({providerId:`adobe`,accessToken:g.accessToken,tokenExpiresAt:Date.now()+g.expiresIn*1e3,userName:_.name,userAvatar:_.avatar,scopes:g.scope,baseUrl:w.proxyEndpoint?void 0:i}),y(),await $().catch(e=>console.warn(`[adobe] Failed to fetch models after login:`,e instanceof Error?e.message:String(e))),n()},onOAuthLogout:async()=>{let e=L();if(e?.accessToken)try{let t=await P(),n=F(e.accessToken)||t.clientId||w.clientId,r=j(t);if(n){let t=await fetch(`${N(r)}/ims/revoke`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({token:e.accessToken,token_type_hint:`access_token`,client_id:n})});t.ok||console.warn(`[adobe] Token revocation returned ${t.status}, token may still be valid server-side`)}}catch(e){console.warn(`[adobe] Failed to revoke token:`,e instanceof Error?e.message:String(e))}await t({providerId:`adobe`,accessToken:``}),y()},onSilentRenew:async()=>L()?.accessToken?U():null,onValidateToken:me,refreshModels:async e=>{await $(e);let t=z.getModelIds?.();t?.length&&ue(t)}};let B=null;const he=ee();async function V(){let e=L();if(!e?.accessToken)throw Error(`Not logged in to Adobe — please log in first`);if((e.tokenExpiresAt??0)-Date.now()>6e4)return e.accessToken;console.log(`[adobe] Token expired or expiring soon, attempting silent renewal...`);let t=await he.run(()=>U());if(t)return t;let n=L();if((n?.tokenExpiresAt??0)-Date.now()>0&&n?.accessToken)return n.accessToken;throw Error(`Adobe session expired — please log in again`)}async function ge(){let e;try{e=T()}catch{return null}let t=L();if(!t?.accessToken||H())throw Error(`Adobe budget: not signed in`);return se(e,t.accessToken,fetch,{headers:{"X-Session-Id":_(xe)}})}function H(){let e=L();return!e?.tokenExpiresAt||Date.now()>e.tokenExpiresAt-6e4}async function U(){if(typeof window>`u`){let e=i();if(!e)return null;try{let{accessToken:t}=await e.call(`silent-renew`,{providerId:`adobe`},{timeoutMs:13e4});return t}catch(e){return console.warn(`[adobe] worker→page silent-renew bridge failed:`,e instanceof Error?e.message:String(e)),null}}return B===null&&(B=be().finally(()=>{B=null})),B}function _e(e,t){let n=k(t),r=A(t),i=j(t),a=I?null:b({pageHref:window.location.href,pageOrigin:window.location.origin,configuredRedirectUri:w.redirectUri},()=>crypto.randomUUID()),o=I?w.extensionRedirectUri??`https://${chrome.runtime.id}.chromiumapp.org/`:a.redirectUri,s=a?.oauthState,c=a?.expectedNonce??null,l=new URLSearchParams({client_id:n,scope:r,response_type:`token`,redirect_uri:o,prompt:`none`});return s&&l.set(`state`,s),{authorizeUrl:`${N(i)}/ims/authorize/v2?${l}`,expectedNonce:c,proxyEndpoint:e}}function ve(e,t){if(!t)return!0;try{if(new URL(e).searchParams.get(`nonce`)!==t)return console.error(`[adobe] OAuth nonce mismatch — possible CSRF`),!1}catch(e){console.warn(`[adobe] Nonce check skipped (URL parse failed):`,e instanceof Error?e.message:String(e))}return!0}async function ye(e,n){let r=L();await t({providerId:`adobe`,accessToken:e.accessToken,tokenExpiresAt:Date.now()+e.expiresIn*1e3,userName:r?.userName,userAvatar:r?.userAvatar,scopes:e.scope,baseUrl:w.proxyEndpoint?void 0:n})}async function be(){try{let e=T(),{authorizeUrl:t,expectedNonce:n}=_e(e,await O(e)),{createOAuthLauncher:r}=await import(`./oauth-service-Bx_Dy3GC.js`),i=await r()(t,{interactive:!1});if(!i||!ve(i,n))return null;let a=R(i);return a?(await ye(a,e),console.log(`[adobe] Token renewed silently`),await $().catch(e=>console.warn(`[adobe] Failed to refresh models after silent renewal:`,e instanceof Error?e.message:String(e))),a.accessToken):null}catch(e){return console.warn(`[adobe] Silent renewal error:`,e instanceof Error?e.message:String(e)),null}}const W=`X-Slicc-Version`;function G(e){let t={};if(e.headers)for(let[n,r]of Object.entries(e.headers))n.toLowerCase()!==`x-slicc-version`&&(t[n]=r);return t[W]=`6.232.2`,{...e,headers:t}}const xe=`adobe-usage-probe`,K=new Set;function q(e,t){if(e.headers){for(let[t,n]of Object.entries(e.headers))if(t.toLowerCase()===`x-session-id`&&n!=null)return e}return K.has(t)||(K.add(t),console.warn(`[adobe] Missing X-Session-Id from ${t} — using daily fallback. Attach an X-Session-Id header at the call site (see scoop-context.ts streamWithSessionId or docs/pitfalls.md).`)),{...e,headers:{...e.headers??{},"X-Session-Id":_(`adobe-provider-fallback`)}}}function Se(){K.clear()}function J(e,t){return{type:`error`,reason:`error`,error:{role:`assistant`,content:[],api:`adobe-anthropic`,provider:`adobe`,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:`error`,errorMessage:t instanceof Error?t.message:String(t),timestamp:Date.now()}}}function Y(e){console.error(`[adobe] Stream error:`,e instanceof Error?e.message:String(e))}const X=(e,t,n={})=>{let r=a();return Ce(r,e,t,n).catch(Y),r};async function Ce(e,t,n,r){try{let i=await V();if(String(t.api).includes(`openai`)){let a={...t,baseUrl:`${T()}/v1`,api:`openai-completions`,compat:{...t.compat,supportsStore:!1,supportsDeveloperRole:!1}},o=u(a,v(n),G(q({...r,apiKey:i},`streamAdobe[openai]`)));for await(let t of o)e.push(t)}else{let a={...t,baseUrl:T(),api:`anthropic-messages`},o=f(a,v(n),G(q(C(t,x(t.id,t.name,{...r,apiKey:i})),`streamAdobe[anthropic]`)));for await(let t of o)e.push(t)}e.end()}catch(n){Y(n),e.push(J(t,n)),e.end()}}const Z=(e,t,n)=>{let r=a();return we(r,e,t,n).catch(Y),r};async function we(e,t,n,r){try{let i=await V();if(String(t.api).includes(`openai`)){let a={...t,baseUrl:`${T()}/v1`,api:`openai-completions`,compat:{...t.compat,supportsStore:!1,supportsDeveloperRole:!1}},o=d(a,v(n),G(q({...r,apiKey:i},`streamSimpleAdobe[openai]`)));for await(let t of o)e.push(t)}else{let a={...t,baseUrl:T(),api:`anthropic-messages`},o=l(a,v(n),G(q(C(t,x(t.id,t.name,{...r,apiKey:i})),`streamSimpleAdobe[anthropic]`)));for await(let t of o)e.push(t)}e.end()}catch(n){Y(n),e.push(J(t,n)),e.end()}}function Te(e){let t={id:e.id,name:e.name};return e.api!==void 0&&(t.api=e.api),e.context_window!==void 0&&(t.context_window=e.context_window),e.max_tokens!==void 0&&(t.max_tokens=e.max_tokens),e.reasoning!==void 0&&(t.reasoning=e.reasoning),e.input!==void 0&&(t.input=e.input),t}function Ee(){let e=new Map;for(let t of c())try{let n=s(t);for(let t of n)e.set(t.id,t)}catch{}return e}function De(t,n,r){let i=`adobe-${t.api===`openai`?`openai`:`anthropic`}`,a=r.get(t.id);if(a)return{...a,provider:`adobe`,api:i};let o=e(t.id,r);return{id:t.id,name:t.name??t.id,provider:`adobe`,api:i,baseUrl:n,contextWindow:2e5,maxTokens:16384,input:[`text`,`image`],cost:o,inputCost:o.input,outputCost:o.output,cacheReadCost:o.cacheRead,cacheWriteCost:o.cacheWrite,reasoning:!0}}function Oe(e,t){for(let t of e)ce.set(t.id,Te(t));let n=Ee();return e.map(e=>De(e,t,n))}async function ke(e){try{let t=e??await V(),n=T(),r=await fetch(`${n}/v1/models`,{headers:{Authorization:`Bearer ${t}`,[W]:`6.232.2`}});if(!r.ok)console.warn(`[adobe] Proxy /v1/models returned ${r.status}, falling back to Anthropic models`);else{let e=await r.json();if(e.data?.length)return Oe(e.data,n)}}catch(e){console.warn(`[adobe] Failed to fetch proxy models:`,e instanceof Error?e.message:String(e))}return null}const Q=new Map;function Ae(){return s(`anthropic`).map(e=>({...e,provider:`adobe`,api:`adobe-anthropic`}))}async function $(e){let t=T(),n=Q.get(t);if(n)return n;let r=await ke(e);return r?(Q.set(t,r),r):Ae()}function je(){o({api:`adobe-anthropic`,stream:X,streamSimple:Z}),o({api:`adobe-openai`,stream:X,streamSimple:Z})}export{Se as __resetAdobeSessionIdWarningCacheForTests,z as config,R as extractTokenFromUrl,$ as getAdobeModels,V as getValidAccessToken,H as isTokenExpired,je as register};

package/dist/ui/assets/approval-timeout-CeQbGMnv.js

@@ -1 +0,0 @@
-import{t as e}from"./logger-LESFN7Hj.js";import{n as t}from"./types-Dj5TU-Qg.js";const n=e(`sudo:timeout`),r={"user-timeout":`no response from the user within 5 minutes. This is a TIMEOUT, not a denial — the user was not there to answer. Do not retry this action; report that the approval request went unanswered and wait for the user before trying again.`,"cone-timeout":`no response from the cone agent within 5 minutes. This is a TIMEOUT, not a denial — no human was ever prompted, the cone simply never resolved the request. Do not retry this action; report that the escalation went unanswered and continue with work that does not need it.`,unavailable:`no approval prompt could be shown to anyone — the approval surface failed before a human or approver saw the request. This is NOT a denial; nobody refused. Do not retry this action in a loop; report that the approval could not be requested.`};function i(e){return r[e]}function a(e=`user-timeout`){return{decision:`deny`,reason:e}}function o(e,t){let n=t.decision===`deny`?t.reason:void 0,r=n?n===`unavailable`?`${e}: approval could not be requested — ${i(n)}`:`${e}: approval request timed out — ${i(n)}`:`${e}: approval denied`,a=t.note?.trim();return a?`${r} — approver's reason: ${a}`:r}function s(e,r={}){let i=r.timeoutMs??3e5;if(!Number.isFinite(i)||i<=0)return e;let o=r.setTimer??((e,t)=>setTimeout(e,t)),s=r.clearTimer??(e=>clearTimeout(e));return{requestApproval(r,c){return new Promise(l=>{let u=new AbortController,d=()=>u.abort();c?.signal?.addEventListener(`abort`,d,{once:!0});let f=!1,p=e=>{f=!0,c?.signal?.removeEventListener(`abort`,d),l(e)},m=o(()=>{f||(n.warn(`sudo approval timed out — failing closed`,{kind:r.kind,detail:r.detail,timeoutMs:i}),u.abort(),p(a(`user-timeout`)))},i),h=e=>{if(f){n.warn(`sudo decision arrived after timeout — discarded`,{kind:r.kind,detail:r.detail,decision:e.decision});return}s(m),p(e)};e.requestApproval(r,{signal:u.signal}).then(h,e=>{n.warn(`sudo broker threw — denying`,{error:e instanceof Error?e.message:String(e)}),h(t())})})}}}export{a as n,s as r,o as t};