tina4-nodejs 3.13.111 → 3.13.113

package/packages/orm/dist/index.js

@@ -21192,47 +21192,120 @@ function renderToolbarHtml(ctx) {
   const method = escapeHtml(ctx.method);
   const path8 = escapeHtml(ctx.path);
   const matchedPattern = escapeHtml(ctx.matchedPattern);
-  return `<div id="tina4-dev-toolbar" style="position:fixed;bottom:0;left:0;right:0;background:#333;color:#fff;font-family:monospace;font-size:12px;padding:6px 16px;z-index:99999;display:flex;align-items:center;gap:16px;">
-    <span id="tina4-ver-btn" style="color:#2e7d32;font-weight:bold;cursor:pointer;text-decoration:underline dotted;" onclick="tina4VersionModal()" title="Click to check for updates">Tina4 v${ctx.version}</span>
-    <div id="tina4-ver-modal" style="display:none;position:fixed;bottom:3rem;left:1rem;background:#1e1e2e;border:1px solid #2e7d32;border-radius:8px;padding:16px 20px;z-index:100000;min-width:320px;box-shadow:0 8px 32px rgba(0,0,0,0.5);font-family:monospace;font-size:13px;color:#cdd6f4;">
-      <div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:12px;">
-        <strong style="color:#89b4fa;">Version Info</strong>
-        <span onclick="document.getElementById('tina4-ver-modal').style.display='none'" style="cursor:pointer;color:#888;">&times;</span>
+  const reload = ctx.reload === false ? "0" : "1";
+  return `<link rel="stylesheet" href="/__dev/toolbar.css">
+<div id="tina4-dev-toolbar" data-reload="${reload}">
+    <span id="tina4-ver-btn" title="Click to check for updates">Tina4 v${ctx.version}</span>
+    <div id="tina4-ver-modal">
+      <div class="t4-modal-head">
+        <strong class="t4-modal-title">Version Info</strong>
+        <span id="tina4-ver-close" class="t4-x">&times;</span>
       </div>
-      <div id="tina4-ver-body" style="line-height:1.8;">
-        <div>Current: <strong style="color:#a6e3a1;">v${ctx.version}</strong></div>
-        <div id="tina4-ver-latest" style="color:#888;">Checking for updates...</div>
+      <div id="tina4-ver-body">
+        <div>Current: <strong class="t4-ok">v${ctx.version}</strong></div>
+        <div id="tina4-ver-latest" class="t4-dim">Checking for updates...</div>
       </div>
     </div>
-    <span style="color:#4caf50;">${method}</span>
+    <span class="t4-green">${method}</span>
     <span>${path8}</span>
-    <span style="color:#666;">&rarr; ${matchedPattern}</span>
-    <span style="color:#ffeb3b;">req:${ctx.requestId}</span>
-    <span style="color:#90caf9;">${ctx.routeCount} routes</span>
-    <span style="color:#888;">Node.js ${nodeVersion}</span>
-    <a href="#" onclick="window.__tina4ToggleOverlay(event)" style="color:#ef9a9a;margin-left:auto;text-decoration:none;cursor:pointer;">Dashboard &#8599;</a>
-    <span onclick="this.parentElement.style.display='none'" style="cursor:pointer;color:#888;margin-left:8px;">&#10005;</span>
+    <span class="t4-arrow">&rarr; ${matchedPattern}</span>
+    <span class="t4-yellow">req:${ctx.requestId}</span>
+    <span class="t4-blue">${ctx.routeCount} routes</span>
+    <span class="t4-dim">Node.js ${nodeVersion}</span>
+    <a href="#" id="tina4-dash-link" class="t4-dash">Dashboard &#8599;</a>
+    <span id="tina4-bar-close" class="t4-x t4-bar-close">&#10005;</span>
 </div>
-<script>
-// Overlay open/toggle helper + auto-restore. Persist the dev-admin
-// iframe's open/closed state across parent reloads so saving a file
-// doesn't lose the user's dev-admin context. Cross-framework parity
-// with PHP / Python / Ruby \u2014 same localStorage key.
-(function(){
+<script src="/__dev/toolbar.js"></script>`;
+}
+function toolbarCss() {
+  return `#tina4-dev-toolbar{position:fixed;bottom:0;left:0;right:0;background:#333;color:#fff;font-family:monospace;font-size:12px;padding:6px 16px;z-index:99999;display:flex;align-items:center;gap:16px}
+#tina4-dev-toolbar a{text-decoration:none}
+#tina4-ver-btn{color:#2e7d32;font-weight:bold;cursor:pointer;text-decoration:underline dotted}
+#tina4-ver-modal{display:none;position:fixed;bottom:3rem;left:1rem;background:#1e1e2e;border:1px solid #2e7d32;border-radius:8px;padding:16px 20px;z-index:100000;min-width:320px;box-shadow:0 8px 32px rgba(0,0,0,.5);font-family:monospace;font-size:13px;color:#cdd6f4}
+.t4-modal-head{display:flex;justify-content:space-between;align-items:center;margin-bottom:12px}
+.t4-modal-title{color:#89b4fa}
+#tina4-ver-body{line-height:1.8}
+.t4-x{cursor:pointer;color:#888}
+.t4-bar-close{margin-left:8px}
+.t4-green{color:#4caf50}
+.t4-dim{color:#888}
+.t4-arrow{color:#666}
+.t4-yellow{color:#ffeb3b}
+.t4-blue{color:#90caf9}
+.t4-ok{color:#a6e3a1}
+.t4-warn{color:#f9e2af}
+.t4-err{color:#f38ba8}
+.t4-purple{color:#cba6f7}
+.t4-link{color:#89b4fa}
+.t4-code{background:#313244;padding:2px 6px;border-radius:3px}
+.t4-note{margin-top:6px}
+.t4-dash{color:#ef9a9a;margin-left:auto;cursor:pointer}
+#tina4-dev-panel{position:fixed;top:3rem;left:0;right:0;bottom:2rem;z-index:99998;transition:all .2s}
+#tina4-dev-panel iframe{width:100%;height:100%;border:1px solid #2e7d32;border-radius:.5rem;box-shadow:0 8px 32px rgba(0,0,0,.5);background:#0f172a}`;
+}
+function toolbarJs() {
+  return `(function () {
+    var bar = document.getElementById('tina4-dev-toolbar');
+    if (!bar) { return; }
+
+    var modal = document.getElementById('tina4-ver-modal');
+    function upToDate(el, latest) {
+        el.className = 't4-ok';
+        el.innerHTML = 'Latest: <strong class="t4-ok">v' + latest + '</strong> &mdash; You are up to date!';
+    }
+    function checkVersion() {
+        if (modal.style.display === 'block') { modal.style.display = 'none'; return; }
+        modal.style.display = 'block';
+        var el = document.getElementById('tina4-ver-latest');
+        el.className = 't4-dim';
+        el.textContent = 'Checking for updates...';
+        fetch('/__dev/api/version-check').then(function (r) { return r.json(); }).then(function (d) {
+            var latest = d.latest, current = d.current;
+            if (latest === current) { upToDate(el, latest); return; }
+            var cP = current.split('.').map(Number), lP = latest.split('.').map(Number);
+            var isNewer = false, i, c, l;
+            for (i = 0; i < Math.max(cP.length, lP.length); i++) { c = cP[i] || 0; l = lP[i] || 0; if (l > c) { isNewer = true; break; } if (l < c) { break; } }
+            var isAhead = false;
+            if (!isNewer) { for (i = 0; i < Math.max(cP.length, lP.length); i++) { var c2 = cP[i] || 0, l2 = lP[i] || 0; if (c2 > l2) { isAhead = true; break; } if (c2 < l2) { break; } } }
+            if (isNewer) {
+                var breaking = (lP[0] !== cP[0] || lP[1] !== cP[1]);
+                el.className = '';
+                el.innerHTML = 'Latest: <strong class="t4-warn">v' + latest + '</strong>';
+                if (breaking) {
+                    el.innerHTML += '<div class="t4-err t4-note">&#9888; Major/minor version change &mdash; check the <a href="https://github.com/tina4stack/tina4-nodejs/releases" target="_blank" class="t4-link">changelog</a> for breaking changes before upgrading.</div>';
+                } else {
+                    el.innerHTML += '<div class="t4-warn t4-note">Patch update available. Run: <code class="t4-code">npm install tina4-nodejs@latest</code></div>';
+                }
+            } else if (isAhead) {
+                el.className = 't4-purple';
+                el.innerHTML = 'You are running <strong class="t4-purple">v' + current + '</strong> (ahead of npm <strong>v' + latest + '</strong> &mdash; not yet published).';
+            } else {
+                upToDate(el, latest);
+            }
+        }).catch(function () {
+            el.className = 't4-err';
+            el.textContent = 'Could not check for updates (offline?)';
+        });
+    }
+    var verBtn = document.getElementById('tina4-ver-btn');
+    if (verBtn) { verBtn.addEventListener('click', checkVersion); }
+    var verClose = document.getElementById('tina4-ver-close');
+    if (verClose) { verClose.addEventListener('click', function () { modal.style.display = 'none'; }); }
+    var barClose = document.getElementById('tina4-bar-close');
+    if (barClose) { barClose.addEventListener('click', function () { bar.style.display = 'none'; }); }
+
     var STATE_KEY = 'tina4_dev_overlay_open';
     function buildOverlay() {
         var c = document.createElement('div');
         c.id = 'tina4-dev-panel';
-        c.style.cssText = 'position:fixed;top:3rem;left:0;right:0;bottom:2rem;z-index:99998;transition:all 0.2s';
         var f = document.createElement('iframe');
         f.src = '/__dev';
-        f.style.cssText = 'width:100%;height:100%;border:1px solid #2e7d32;border-radius:0.5rem;box-shadow:0 8px 32px rgba(0,0,0,0.5);background:#0f172a';
         c.appendChild(f);
         document.body.appendChild(c);
         return c;
     }
-    window.__tina4ToggleOverlay = function(e) {
-        if (e) e.preventDefault();
+    function toggleOverlay(e) {
+        if (e) { e.preventDefault(); }
         var p = document.getElementById('tina4-dev-panel');
         if (p) {
             var hide = p.style.display !== 'none';
@@ -21242,137 +21315,61 @@ function renderToolbarHtml(ctx) {
         }
         buildOverlay();
         try { localStorage.setItem(STATE_KEY, '1'); } catch (_) {}
-    };
-    function restoreIfOpen() {
-        try {
-            if (location.pathname.indexOf('/__dev') === 0) return;
-            if (localStorage.getItem(STATE_KEY) === '1' && !document.getElementById('tina4-dev-panel')) {
-                buildOverlay();
-            }
-        } catch (_) {}
     }
-    if (document.readyState === 'loading') {
-        document.addEventListener('DOMContentLoaded', restoreIfOpen);
-    } else {
-        restoreIfOpen();
-    }
-})();
-</script>
-<script>
-function tina4VersionModal(){
-    var m=document.getElementById('tina4-ver-modal');
-    if(m.style.display==='block'){m.style.display='none';return;}
-    m.style.display='block';
-    var el=document.getElementById('tina4-ver-latest');
-    el.innerHTML='Checking for updates...';
-    el.style.color='#888';
-    fetch('/__dev/api/version-check')
-    .then(function(r){return r.json()})
-    .then(function(d){
-        var latest=d.latest;
-        var current=d.current;
-        if(latest===current){
-            el.innerHTML='Latest: <strong style="color:#a6e3a1;">v'+latest+'</strong> &mdash; You are up to date!';
-            el.style.color='#a6e3a1';
-        }else{
-            var cParts=current.split('.').map(Number);
-            var lParts=latest.split('.').map(Number);
-            var isNewer=false;
-            for(var i=0;i<Math.max(cParts.length,lParts.length);i++){
-                var c=cParts[i]||0,l=lParts[i]||0;
-                if(l>c){isNewer=true;break;}
-                if(l<c)break;
-            }
-            var isAhead=false;
-            if(!isNewer){for(var i=0;i<Math.max(cParts.length,lParts.length);i++){var c2=cParts[i]||0,l2=lParts[i]||0;if(c2>l2){isAhead=true;break;}if(c2<l2)break;}}
-            if(isNewer){
-                var breaking=(lParts[0]!==cParts[0]||lParts[1]!==cParts[1]);
-                el.innerHTML='Latest: <strong style="color:#f9e2af;">v'+latest+'</strong>';
-                if(breaking){
-                    el.innerHTML+='<div style="color:#f38ba8;margin-top:6px;">&#9888; Major/minor version change &mdash; check the <a href="https://github.com/tina4stack/tina4-nodejs/releases" target="_blank" style="color:#89b4fa;">changelog</a> for breaking changes before upgrading.</div>';
-                }else{
-                    el.innerHTML+='<div style="color:#f9e2af;margin-top:6px;">Patch update available. Run: <code style="background:#313244;padding:2px 6px;border-radius:3px;">npm install tina4-nodejs@latest</code></div>';
-                }
-            }else if(isAhead){
-                el.innerHTML='You are running <strong style="color:#cba6f7;">v'+current+'</strong> (ahead of npm <strong>v'+latest+'</strong> &mdash; not yet published).';
-                el.style.color='#cba6f7';
-            }else{
-                el.innerHTML='Latest: <strong style="color:#a6e3a1;">v'+latest+'</strong> &mdash; You are up to date!';
-                el.style.color='#a6e3a1';
-            }
-        }
-    })
-    .catch(function(){
-        el.innerHTML='Could not check for updates (offline?)';
-        el.style.color='#f38ba8';
-    });
-}
-</script>
-<script>
-(function(){
-    // WebSocket-primary dev reloader. The running server re-imports changed
-    // src/ routes in-process and pushes a {type,file,mtime} message over
-    // /__dev_reload \u2014 no respawn, instant refresh. The mtime poll below is a
-    // FALLBACK only, started when the socket is down and stopped on connect.
-    var _t4_css_exts=['.css','.scss'],_t4_debounce=null;
-    var _t4_interval=3000;
-    var _t4_ws=null,_t4_poll_timer=null,_t4_mtime=null;
-    function _t4_apply(d){
-        d=d||{};
-        var f=d.file||'',t=d.type||'';
-        var isCss=t==='css'||_t4_css_exts.some(function(e){return f.endsWith(e)});
-        if(isCss){
-            var links=document.querySelectorAll('link[rel="stylesheet"]');
-            links.forEach(function(l){
-                var href=l.getAttribute('href');
-                if(href){l.setAttribute('href',href.split('?')[0]+'?_t4='+(d.mtime||Date.now()))}
+    var dash = document.getElementById('tina4-dash-link');
+    if (dash) { dash.addEventListener('click', toggleOverlay); }
+    try {
+        if (location.pathname.indexOf('/__dev') !== 0
+            && localStorage.getItem(STATE_KEY) === '1'
+            && !document.getElementById('tina4-dev-panel')) {
+            buildOverlay();
+        }
+    } catch (_) {}
+
+    if (bar.getAttribute('data-reload') !== '1') { return; }
+    var cssExts = ['.css', '.scss'], debounce = null, interval = 3000;
+    var ws = null, pollTimer = null, mtime = null;
+    function apply(d) {
+        d = d || {};
+        var f = d.file || '', t = d.type || '';
+        var isCss = t === 'css' || cssExts.some(function (e) { return f.endsWith(e); });
+        if (isCss) {
+            document.querySelectorAll('link[rel="stylesheet"]').forEach(function (l) {
+                var href = l.getAttribute('href');
+                if (href) { l.setAttribute('href', href.split('?')[0] + '?_t4=' + (d.mtime || Date.now())); }
             });
-        }else{
+        } else {
             location.reload();
         }
     }
-    function _t4_poll(){
-        fetch('/__dev/api/mtime').then(function(r){return r.json()}).then(function(d){
-            // Sentinel: first poll only records the baseline. Use !== (not >) so
-            // the first change after load is not swallowed and a counter reset on
-            // server restart still triggers a reload.
-            if(_t4_mtime===null){_t4_mtime=d.mtime;return;}
-            if(d.mtime!==_t4_mtime){
-                _t4_mtime=d.mtime;
-                if(_t4_debounce)clearTimeout(_t4_debounce);
-                _t4_debounce=setTimeout(function(){_t4_apply(d);},500);
-            }
-        }).catch(function(){});
-    }
-    function _t4_startPoll(){
-        if(_t4_poll_timer)return;
-        _t4_mtime=null;
-        _t4_poll_timer=setInterval(_t4_poll,_t4_interval);
-    }
-    function _t4_stopPoll(){
-        if(_t4_poll_timer){clearInterval(_t4_poll_timer);_t4_poll_timer=null;}
-    }
-    function _t4_connect(){
-        var url=(location.protocol==='https:'?'wss':'ws')+'://'+location.host+'/__dev_reload';
-        try{_t4_ws=new WebSocket(url);}catch(_){_t4_startPoll();return;}
-        _t4_ws.addEventListener('open',function(){_t4_stopPoll();});
-        _t4_ws.addEventListener('message',function(ev){
-            var d=null;
-            try{d=typeof ev.data==='string'?JSON.parse(ev.data):null;}catch(_){}
-            if(!d)return;
-            if(d.type==='reload'||d.type==='change'||d.type==='css'){
-                if(_t4_debounce)clearTimeout(_t4_debounce);
-                _t4_debounce=setTimeout(function(){_t4_apply(d);},150);
+    function poll() {
+        fetch('/__dev/api/mtime').then(function (r) { return r.json(); }).then(function (d) {
+            if (mtime === null) { mtime = d.mtime; return; }
+            if (d.mtime !== mtime) { mtime = d.mtime; if (debounce) { clearTimeout(debounce); } debounce = setTimeout(function () { apply(d); }, 500); }
+        }).catch(function () {});
+    }
+    function startPoll() { if (pollTimer) { return; } mtime = null; pollTimer = setInterval(poll, interval); }
+    function stopPoll() { if (pollTimer) { clearInterval(pollTimer); pollTimer = null; } }
+    function connect() {
+        var url = (location.protocol === 'https:' ? 'wss' : 'ws') + '://' + location.host + '/__dev_reload';
+        try { ws = new WebSocket(url); } catch (_) { startPoll(); return; }
+        ws.addEventListener('open', function () { stopPoll(); });
+        ws.addEventListener('message', function (ev) {
+            var d = null;
+            try { d = typeof ev.data === 'string' ? JSON.parse(ev.data) : null; } catch (_) {}
+            if (!d) { return; }
+            if (d.type === 'reload' || d.type === 'change' || d.type === 'css') {
+                if (debounce) { clearTimeout(debounce); }
+                debounce = setTimeout(function () { apply(d); }, 150);
             }
         });
-        _t4_ws.addEventListener('close',function(){_t4_ws=null;_t4_startPoll();setTimeout(_t4_connect,2000);});
-        _t4_ws.addEventListener('error',function(){try{_t4_ws&&_t4_ws.close();}catch(_){}});
+        ws.addEventListener('close', function () { ws = null; startPoll(); setTimeout(connect, 2000); });
+        ws.addEventListener('error', function () { try { ws && ws.close(); } catch (_) {} });
     }
-    _t4_connect();
-})();
-</script>`;
+    connect();
+})();`;
 }
-var cpuCount, DEV_SAFE_METHODS, DEV_MCP_PREFIXES, DEV_SECRET_BASENAMES, DEV_SECRET_SUFFIXES, MessageLog, RequestInspector, ErrorTracker, DevMailboxStore, DevQueue, WsTracker, DevAdmin, handleDashboard, _reloadMtime, _reloadFile, handleMtime, handleReload, handleMessages, handleMessagesClear, handleRequests, handleRequestsClear, handleSystem, handleMessagesSearch, handleQueue, handleQueueTopics, handleQueueDeadLetters, handleQueueRetry, handleQueuePurge, handleQueueReplay, handleMailbox, handleMailboxRead, handleMailboxSeed, handleMailboxClear, handleTable, handleTables, handleSeed, handleQuery, handleBroken, handleBrokenResolve, handleBrokenClear, handleWebsockets, handleWebsocketsDisconnect, handleTool, handleChat, DEFAULT_MCP_URL, handleGroundingStatus, handleGroundingToken, handleMigrate, handleSeedRun, handleTest, handleThreads, handleThreadsSub, handleConnections, handleConnectionsTest, handleConnectionsSave, __devAdminFilename, __devAdminDirname, handleGalleryList, handleVersionCheck, handleThoughts, handleSuperviseStub, handleExecute, DEV_FILES_IGNORED, handleFiles, DEV_ADMIN_LANG_MAP, handleFileRead, handleFileSave, handleFileRaw, handleFileRename, handleFileDelete, handleDepsSearch, handleDepsInstall, handleGitStatus, handleMcpTools, handleMcpCall, handleMcpStreamable, handleMcpDelete, handleMcpGet405, handleMcpLegacyMessage, handleMcpSse, handleScaffoldList, handleScaffoldRun, handlePlanCurrent, handlePlanList, handlePlanCreate, handlePlanSwitch, handlePlanCompleteStep, handlePlanAddStep, handlePlanNote, handlePlanArchive, handlePlanRead, handlePlanFlesh, handleIndexRebuild, handleIndexSearch, handleIndexFile, handleIndexOverview, handleDocsSearch, handleDocsClass, handleDocsMethod, handleDocsIndex, handleDocsWellKnown, handleDevAdminJs;
+var cpuCount, DEV_SAFE_METHODS, DEV_MCP_PREFIXES, DEV_SECRET_BASENAMES, DEV_SECRET_SUFFIXES, MessageLog, RequestInspector, ErrorTracker, DevMailboxStore, DevQueue, WsTracker, DevAdmin, handleDashboard, _reloadMtime, _reloadFile, handleMtime, handleReload, handleMessages, handleMessagesClear, handleRequests, handleRequestsClear, handleSystem, handleMessagesSearch, handleQueue, handleQueueTopics, handleQueueDeadLetters, handleQueueRetry, handleQueuePurge, handleQueueReplay, handleMailbox, handleMailboxRead, handleMailboxSeed, handleMailboxClear, handleTable, handleTables, handleSeed, handleQuery, handleBroken, handleBrokenResolve, handleBrokenClear, handleWebsockets, handleWebsocketsDisconnect, handleTool, handleChat, DEFAULT_MCP_URL, handleGroundingStatus, handleGroundingToken, handleMigrate, handleSeedRun, handleTest, handleThreads, handleThreadsSub, handleConnections, handleConnectionsTest, handleConnectionsSave, __devAdminFilename, __devAdminDirname, handleGalleryList, handleVersionCheck, handleThoughts, handleSuperviseStub, handleExecute, DEV_FILES_IGNORED, handleFiles, DEV_ADMIN_LANG_MAP, handleFileRead, handleFileSave, handleFileRaw, handleFileRename, handleFileDelete, handleDepsSearch, handleDepsInstall, handleGitStatus, handleMcpTools, handleMcpCall, handleMcpStreamable, handleMcpDelete, handleMcpGet405, handleMcpLegacyMessage, handleMcpSse, handleScaffoldList, handleScaffoldRun, handlePlanCurrent, handlePlanList, handlePlanCreate, handlePlanSwitch, handlePlanCompleteStep, handlePlanAddStep, handlePlanNote, handlePlanArchive, handlePlanRead, handlePlanFlesh, handleIndexRebuild, handleIndexSearch, handleIndexFile, handleIndexOverview, handleDocsSearch, handleDocsClass, handleDocsMethod, handleDocsIndex, handleDocsWellKnown, handleDevAdminJs, handleToolbarCss, handleToolbarJs;
 var init_devAdmin = __esm({
   "../core/src/devAdmin.ts"() {
     "use strict";
@@ -21838,7 +21835,12 @@ var init_devAdmin = __esm({
           { method: "GET", pattern: "/__dev/api/docs/index", handler: handleDocsIndex },
           { method: "GET", pattern: "/__dev/api/docs/.well-known.json", handler: handleDocsWellKnown },
           // JS asset
-          { method: "GET", pattern: "/__dev/js/tina4-dev-admin.min.js", handler: handleDevAdminJs }
+          { method: "GET", pattern: "/__dev/js/tina4-dev-admin.min.js", handler: handleDevAdminJs },
+          // Dev-toolbar assets — served as external CSS/JS so the injected toolbar is
+          // CSP-clean (no inline style=, onclick=, or <script>) under a strict
+          // `default-src 'self'`. Parity with PHP's /__dev/toolbar.css + toolbar.js.
+          { method: "GET", pattern: "/__dev/toolbar.css", handler: handleToolbarCss },
+          { method: "GET", pattern: "/__dev/toolbar.js", handler: handleToolbarJs }
         ];
         for (const route of routes) {
           router.addRoute({
@@ -23274,6 +23276,14 @@ var init_devAdmin = __esm({
       res.raw.writeHead(404, { "Content-Type": "text/plain" });
       res.raw.end("tina4-dev-admin.min.js not found");
     };
+    handleToolbarCss = (_req, res) => {
+      res.raw.writeHead(200, { "Content-Type": "text/css; charset=utf-8", "Cache-Control": "no-cache" });
+      res.raw.end(toolbarCss());
+    };
+    handleToolbarJs = (_req, res) => {
+      res.raw.writeHead(200, { "Content-Type": "application/javascript; charset=utf-8", "Cache-Control": "no-cache" });
+      res.raw.end(toolbarJs());
+    };
   }
 });
 
@@ -25135,7 +25145,11 @@ function injectIntoHtml(ctx, devToolbar, html) {
     path: ctx.pathname,
     matchedPattern: ctx.matchedPattern.value || ctx.pathname,
     requestId: ctx.requestId,
-    routeCount: ctx.router.getRoutes().length
+    routeCount: ctx.router.getRoutes().length,
+    // Suppress the live reloader on the AI/stable port (data-reload="0"); the
+    // toolbar JS early-returns when data-reload !== "1". Mirrors PHP's
+    // suppressReload flag.
+    reload: !ctx.isAiPortRequest
   };
   return injectFeedbackWidget(ctx.req, injectDevToolbar(html, toolbarCtx));
 }
@@ -27597,11 +27611,100 @@ function buildMultipartBody(boundary, fieldName, filename, fileContent, contentT
   parts.push(Buffer.from(delimiter2 + "--" + crlf, "utf-8"));
   return Buffer.concat(parts);
 }
-var RETRY_STATUSES, DOWNLOAD_CHUNK_SIZE, MAX_REDIRECTS, STRIP_ON_CROSS_ORIGIN, MIME_BY_EXT, Api;
+async function* parseLineStream(chunks) {
+  const decoder = new TextDecoder("utf-8");
+  let buffer = "";
+  for await (const chunk of chunks) {
+    buffer += decoder.decode(chunk, { stream: true });
+    let idx;
+    while ((idx = buffer.indexOf("\n")) >= 0) {
+      let line = buffer.slice(0, idx);
+      buffer = buffer.slice(idx + 1);
+      if (line.endsWith("\r")) {
+        line = line.slice(0, -1);
+      }
+      yield line;
+    }
+  }
+  buffer += decoder.decode();
+  if (buffer.length > 0) {
+    if (buffer.endsWith("\r")) {
+      buffer = buffer.slice(0, -1);
+    }
+    yield buffer;
+  }
+}
+async function* parseSseStream(lines) {
+  let dataParts = [];
+  let event;
+  let id;
+  let retry;
+  let has = false;
+  const emit = () => {
+    if (!has) return null;
+    const ev = { data: dataParts.join("\n") };
+    if (event !== void 0) ev.event = event;
+    if (id !== void 0) ev.id = id;
+    if (retry !== void 0) ev.retry = retry;
+    return ev;
+  };
+  const reset2 = () => {
+    dataParts = [];
+    event = void 0;
+    id = void 0;
+    retry = void 0;
+    has = false;
+  };
+  for await (const line of lines) {
+    if (line === "") {
+      const ev = emit();
+      if (ev) yield ev;
+      reset2();
+      continue;
+    }
+    if (line.startsWith(":")) continue;
+    const colon = line.indexOf(":");
+    const field = colon < 0 ? line : line.slice(0, colon);
+    let value = colon < 0 ? "" : line.slice(colon + 1);
+    if (value.startsWith(" ")) value = value.slice(1);
+    switch (field) {
+      case "data":
+        dataParts.push(value);
+        has = true;
+        break;
+      case "event":
+        event = value;
+        has = true;
+        break;
+      case "id":
+        id = value;
+        has = true;
+        break;
+      case "retry": {
+        const parsed = Number(value);
+        if (Number.isFinite(parsed) && parsed >= 0) {
+          retry = parsed;
+          has = true;
+        }
+        break;
+      }
+    }
+  }
+  const trailing = emit();
+  if (trailing) yield trailing;
+}
+var ApiStreamError, RETRY_STATUSES, DOWNLOAD_CHUNK_SIZE, MAX_REDIRECTS, STRIP_ON_CROSS_ORIGIN, MIME_BY_EXT, Api;
 var init_api = __esm({
   "../core/src/api.ts"() {
     "use strict";
     init_version();
+    ApiStreamError = class extends Error {
+      constructor(message, status2 = null) {
+        super(message);
+        this.status = status2;
+        this.name = "ApiStreamError";
+      }
+    };
     RETRY_STATUSES = /* @__PURE__ */ new Set([429, 500, 502, 503, 504]);
     DOWNLOAD_CHUNK_SIZE = 64 * 1024;
     MAX_REDIRECTS = 10;
@@ -27920,7 +28023,130 @@ var init_api = __esm({
         }
         return { http_code: code, headers: respHeaders, error: null, path: destPath };
       }
+      /**
+       * Stream a response body as raw bytes. Yields the chunks the transport
+       * delivers, in order, never buffered whole. Ends cleanly on EOF and
+       * throws on a transport failure or a non-2xx status (body drained
+       * first). No JSON decoding, no line splitting, no framing —
+       * {@link streamLines} and {@link streamSse} build on this primitive.
+       *
+       * Closing the iterator before EOF (a `break` out of a `for await`)
+       * destroys the underlying socket, so a caller who takes only the
+       * first few chunks never leaks the connection.
+       *
+       * `opts.timeout` bounds the whole stream duration (default
+       * `TINA4_API_TIMEOUT` or the client `timeout`); `opts.connectTimeout`
+       * bounds just the connect + headers phase (default
+       * `TINA4_API_CONNECT_TIMEOUT` or 10s).
+       */
+      async *streamBytes(path8, opts = {}) {
+        const url = this.buildUrl(path8);
+        const method = (opts.method ?? "GET").toUpperCase();
+        const contentType = opts.contentType ?? "application/json";
+        const { headers, data } = this.buildRequest(method, contentType, opts.body, opts.headers);
+        const totalSec = this.streamSeconds(opts.timeout, "TINA4_API_TIMEOUT", this.timeout);
+        const connectSec = this.streamSeconds(opts.connectTimeout, "TINA4_API_CONNECT_TIMEOUT", 10);
+        const opened = await this.openStreamRequest(method, url, headers, data, connectSec);
+        const res = opened.res;
+        const status2 = res.statusCode ?? 0;
+        this.storeCookies(res.headers["set-cookie"]);
+        if (status2 < 200 || status2 >= 300) {
+          res.resume();
+          throw new ApiStreamError(`stream failed with HTTP ${status2}`, status2);
+        }
+        let totalTimer = null;
+        if (totalSec > 0) {
+          totalTimer = setTimeout(() => {
+            res.destroy(new ApiStreamError(`stream total timeout after ${totalSec}s`, null));
+          }, totalSec * 1e3);
+        }
+        try {
+          for await (const chunk of res) {
+            yield chunk;
+          }
+        } finally {
+          if (totalTimer) clearTimeout(totalTimer);
+          if (!res.destroyed) res.destroy();
+        }
+      }
+      /**
+       * Stream the response body as UTF-8 lines. Splits on LF or CRLF;
+       * buffers a multibyte codepoint that lands across a chunk boundary;
+       * yields a trailing line without a terminator on EOF. Built on
+       * {@link streamBytes} plus the shared {@link parseLineStream}.
+       */
+      async *streamLines(path8, opts = {}) {
+        yield* parseLineStream(this.streamBytes(path8, opts));
+      }
+      /**
+       * Stream the response as SSE (Server-Sent Events). Yields one
+       * {@link SseEvent} per event boundary (blank line) or on EOF for a
+       * trailing event. `data:[DONE]` is delivered as an ordinary event
+       * with `data === "[DONE]"` and the iterator ends on the next EOF.
+       * Built on {@link streamLines} plus the shared {@link parseSseStream}.
+       */
+      async *streamSse(path8, opts = {}) {
+        yield* parseSseStream(this.streamLines(path8, opts));
+      }
       // ── Internal helpers ──────────────────────────────────────────────
+      /**
+       * Resolve a stream duration from (in order): explicit `opts` field,
+       * the named env var, then the fallback. Zero disables. A non-numeric
+       * or negative env value warns via a fallback rather than throwing —
+       * a bad env var must not brick every streaming call.
+       */
+      streamSeconds(explicit, envName, fallback) {
+        if (explicit !== void 0) {
+          return Number.isFinite(explicit) && explicit >= 0 ? Number(explicit) : fallback;
+        }
+        const raw = process.env[envName];
+        if (raw === void 0) return fallback;
+        const n = Number(raw);
+        return Number.isFinite(n) && n >= 0 ? n : fallback;
+      }
+      /**
+       * Open a streaming HTTP request. Returns the raw
+       * {@link http.IncomingMessage} once headers arrive. Redirects are NOT
+       * followed on streams (a caller who needs a redirect should do a
+       * regular GET first). Connect phase is bounded by `connectSec`;
+       * body-phase timeout is applied by the caller (streamBytes) via
+       * `res.destroy()`.
+       */
+      openStreamRequest(method, url, headers, data, connectSec) {
+        return new Promise((resolve20, reject) => {
+          let parsed;
+          try {
+            parsed = new URL2(url);
+          } catch (err) {
+            reject(err instanceof Error ? err : new Error(String(err)));
+            return;
+          }
+          const isHttps = parsed.protocol === "https:";
+          const protocolModule = isHttps ? https : http;
+          const options = {
+            hostname: parsed.hostname,
+            port: parsed.port || (isHttps ? 443 : 80),
+            path: parsed.pathname + parsed.search,
+            method,
+            headers,
+            timeout: connectSec > 0 ? connectSec * 1e3 : void 0
+          };
+          if (isHttps && this.ignoreSsl) {
+            options.rejectUnauthorized = false;
+          }
+          const req2 = protocolModule.request(options, (res) => {
+            resolve20({ res });
+          });
+          req2.on("timeout", () => {
+            req2.destroy(new ApiStreamError(`stream connect timeout after ${connectSec}s`, null));
+          });
+          req2.on("error", (err) => {
+            reject(err);
+          });
+          if (data) req2.write(data);
+          req2.end();
+        });
+      }
       buildUrl(path8) {
         if (path8.startsWith("http://") || path8.startsWith("https://")) {
           return path8;
@@ -30583,10 +30809,11 @@ export default class User {
 // ../core/src/aiClient.ts
 import http2 from "node:http";
 import https2 from "node:https";
-var AiError, AiConfigError, AiTimeoutError, AiParseError, AiHTTPError, Ai;
+var AiError, AiConfigError, AiTimeoutError, AiParseError, AiHTTPError, Ai, AggregateState;
 var init_aiClient = __esm({
   "../core/src/aiClient.ts"() {
     "use strict";
+    init_api();
     AiError = class extends Error {
     };
     AiConfigError = class extends AiError {
@@ -30631,10 +30858,51 @@ var init_aiClient = __esm({
           throw new AiParseError("AI provider returned a malformed embedding response");
         }
       }
+      /**
+       * Validate role + content shape. Content may be a string OR a non-empty
+       * list of {type:'text'|'image', ...} parts (ADR-0060). Malformed parts
+       * fail fast with AiConfigError, never reaching the wire.
+       */
       static validateMessages(messages) {
-        if (!Array.isArray(messages) || messages.length === 0 || !messages.every((message) => message && ["system", "user", "assistant"].includes(message.role) && typeof message.content === "string")) {
+        if (!Array.isArray(messages) || messages.length === 0) {
           throw new AiConfigError("AI messages must contain supported roles and string content");
         }
+        for (const message of messages) {
+          if (!message || !["system", "user", "assistant"].includes(message.role)) {
+            throw new AiConfigError("AI messages must contain supported roles and string content");
+          }
+          this.validateContent(message.content);
+        }
+      }
+      static validateContent(content) {
+        if (typeof content === "string") return;
+        if (!Array.isArray(content) || content.length === 0) {
+          throw new AiConfigError("AI message content must be a string or a non-empty list of parts");
+        }
+        for (const part of content) {
+          if (!part || typeof part !== "object" || Array.isArray(part)) {
+            throw new AiConfigError("AI content part must be an object with type and text/source");
+          }
+          const record = part;
+          const partType = record.type;
+          if (partType === "text") {
+            if (typeof record.text !== "string") {
+              throw new AiConfigError("AI text content part requires a string 'text' field");
+            }
+          } else if (partType === "image") {
+            if (typeof record.source !== "string" || record.source.length === 0) {
+              throw new AiConfigError("AI image content part requires a non-empty string 'source' field");
+            }
+            if (!record.source.startsWith("data:") && !record.source.startsWith("https://")) {
+              throw new AiConfigError("AI image source must be a data: URI or an https:// URL");
+            }
+            if (record.source.startsWith("data:") && !/^data:[^;,\s]+;base64,[A-Za-z0-9+/=]+$/.test(record.source)) {
+              throw new AiConfigError("AI image data URI must be data:<media_type>;base64,<payload>");
+            }
+          } else {
+            throw new AiConfigError(`AI content part has unknown type '${String(partType)}'`);
+          }
+        }
       }
       static number(name, fallback, minimum) {
         const value = process.env[name] === void 0 ? fallback : Number(process.env[name]);
@@ -30682,18 +30950,57 @@ var init_aiClient = __esm({
         }
         return headers;
       }
+      /**
+       * Build the provider-specific request body from a Tina4-shaped message
+       * list. Multimodal parts are translated per provider (ADR-0060):
+       *   - OpenAI/local: {type:'image_url', image_url:{url}}
+       *   - Anthropic:    {type:'image', source:{type:'base64'|'url', ...}}
+       * String content is preserved verbatim in the OpenAI/local shape and
+       * likewise for Anthropic (both accept a bare string).
+       */
       static chatBody(config, messages, options) {
-        const body = { model: config.model, messages, stream: options.stream ?? false };
+        const translate = (list) => list.map((message) => ({ role: message.role, content: this.translateContent(message.content, config.provider) }));
+        const body = { model: config.model, messages: translate(messages), stream: options.stream ?? false };
         if (options.temperature !== void 0) body.temperature = options.temperature;
         if (options.maxTokens !== void 0) body.max_tokens = options.maxTokens;
         if (config.provider === "anthropic") {
-          const system = messages.filter((message) => message.role === "system").map((message) => message.content);
-          body.messages = messages.filter((message) => message.role !== "system");
+          const systemParts = messages.filter((message) => message.role === "system").map((message) => typeof message.content === "string" ? message.content : this.contentToPlainText(message.content));
+          body.messages = translate(messages.filter((message) => message.role !== "system"));
           body.max_tokens = options.maxTokens ?? 1024;
-          if (system.length) body.system = system.join("\n\n");
+          if (systemParts.length) body.system = systemParts.join("\n\n");
         }
         return body;
       }
+      /**
+       * Translate one message content value into the provider's on-wire shape.
+       * A plain string is passed through (both providers accept a string
+       * content). A parts array becomes provider-native content blocks.
+       */
+      static translateContent(content, provider) {
+        if (typeof content === "string") return content;
+        if (provider === "anthropic") {
+          return content.map((part) => {
+            if (part.type === "text") return { type: "text", text: part.text };
+            if (part.source.startsWith("data:")) {
+              const parsed = this.parseDataUri(part.source);
+              return { type: "image", source: { type: "base64", media_type: parsed.mediaType, data: parsed.data } };
+            }
+            return { type: "image", source: { type: "url", url: part.source } };
+          });
+        }
+        return content.map((part) => {
+          if (part.type === "text") return { type: "text", text: part.text };
+          return { type: "image_url", image_url: { url: part.source } };
+        });
+      }
+      static parseDataUri(source) {
+        const match = /^data:([^;,\s]+);base64,([A-Za-z0-9+/=]+)$/.exec(source);
+        if (!match) throw new AiConfigError("AI image data URI must be data:<media_type>;base64,<payload>");
+        return { mediaType: match[1], data: match[2] };
+      }
+      static contentToPlainText(parts) {
+        return parts.filter((part) => part.type === "text").map((part) => part.text).join("\n\n");
+      }
       static open(config, deadline, headers, body) {
         const remainingMs = deadline - performance.now();
         if (remainingMs <= 0) return Promise.reject(new AiTimeoutError("AI total request timeout expired"));
@@ -30793,35 +31100,12 @@ var init_aiClient = __esm({
       static async chatResponse(config, headers, body) {
         return this.normalizeChat(config.provider, await this.requestJson(config, headers, body));
       }
-      static streamDelta(provider, data) {
-        if (data === "[DONE]") return { completed: true };
-        let event;
-        try {
-          event = JSON.parse(data);
-        } catch {
-          throw new AiParseError("AI provider returned malformed stream data");
-        }
-        const text = provider === "anthropic" ? event.type === "content_block_delta" ? event.delta?.text : void 0 : event.choices?.[0]?.delta?.content;
-        if (text !== void 0 && text !== null && typeof text !== "string") throw new AiParseError("AI provider returned malformed stream data");
-        return { completed: false, text };
-      }
-      static async *streamData(response) {
-        let buffer = "";
-        for await (const chunk of response) {
-          buffer += Buffer.from(chunk).toString("utf8");
-          let newline;
-          while ((newline = buffer.indexOf("\n")) >= 0) {
-            const line = buffer.slice(0, newline).trim();
-            buffer = buffer.slice(newline + 1);
-            if (line.startsWith("data:")) yield line.slice(5).trim();
-          }
-        }
-      }
-      static streamError(error) {
-        if (error instanceof AiError) return error;
-        if (error instanceof Error && error.name === "AbortError") return new AiTimeoutError("AI total request timeout expired");
-        return new AiHTTPError(`AI transport failed (${error instanceof Error ? error.name : "Error"})`);
-      }
+      /**
+       * Stream the response through the shared {@link parseSseStream} framer
+       * (ADR-0060 rule 5). Translates each SSE data payload into 0..N
+       * {@link AiEvent}s: text_delta per chunk, tool_call aggregated per
+       * index / block, exactly one done (or error) at the end.
+       */
       static async *streamRequest(config, headers, body) {
         const deadline = performance.now() + config.totalTimeout * 1e3;
         let yielded = false;
@@ -30840,27 +31124,239 @@ var init_aiClient = __esm({
               }
               throw new AiHTTPError(`AI provider returned HTTP ${status2}`, status2);
             }
-            let completed = false;
-            for await (const data of this.streamData(opened.response)) {
-              const delta = this.streamDelta(config.provider, data);
-              if (delta.completed) {
-                completed = true;
-                break;
+            const response = opened.response;
+            const chunks = this.responseChunks(response);
+            const events = parseSseStream(parseLineStream(chunks));
+            const aggregator = new AggregateState(config.provider);
+            let done = false;
+            try {
+              for await (const sseEvent of events) {
+                for (const emitted of aggregator.consume(sseEvent)) {
+                  yielded = true;
+                  yield emitted;
+                  if (emitted.type === "done" || emitted.type === "error") {
+                    done = true;
+                    break;
+                  }
+                }
+                if (done) break;
+              }
+            } catch (error) {
+              if (yielded) {
+                yielded = true;
+                yield { type: "error", message: error instanceof AiParseError ? "AI provider returned malformed stream data" : `AI transport failed (${error instanceof Error ? error.name : "Error"})` };
+                opened.cleanup();
+                opened = null;
+                return;
               }
-              if (delta.text === void 0) continue;
-              yielded = true;
-              yield delta.text;
+              throw error;
             }
             opened.cleanup();
             opened = null;
-            if (completed) return;
-            throw new AiParseError("AI provider stream ended before [DONE]");
+            if (done) return;
+            if (yielded) {
+              yield { type: "error", message: "AI provider stream ended before completion" };
+              return;
+            }
+            throw new AiParseError("AI provider stream ended before completion");
           } catch (error) {
             opened?.cleanup();
             const failure = this.streamError(error);
-            if (failure instanceof AiParseError || failure instanceof AiHTTPError && failure.status !== null || yielded || attempt >= config.maxRetries) throw failure;
+            if (yielded) {
+              yield { type: "error", message: failure.message };
+              return;
+            }
+            if (failure instanceof AiParseError || failure instanceof AiHTTPError && failure.status !== null || attempt >= config.maxRetries) throw failure;
+          }
+        }
+      }
+      static async *responseChunks(response) {
+        for await (const chunk of response) {
+          yield chunk;
+        }
+      }
+      static streamError(error) {
+        if (error instanceof AiError) return error;
+        if (error instanceof Error && error.name === "AbortError") return new AiTimeoutError("AI total request timeout expired");
+        return new AiHTTPError(`AI transport failed (${error instanceof Error ? error.name : "Error"})`);
+      }
+    };
+    AggregateState = class {
+      constructor(provider) {
+        this.provider = provider;
+      }
+      toolBuffers = /* @__PURE__ */ new Map();
+      lastFinishReason = null;
+      lastUsage = null;
+      doneEmitted = false;
+      *consume(event) {
+        const data = event.data;
+        if (data === "[DONE]") {
+          if (this.doneEmitted) return;
+          yield* this.flushRemainingToolCalls();
+          this.doneEmitted = true;
+          yield {
+            type: "done",
+            finishReason: this.lastFinishReason ?? "stop",
+            ...this.lastUsage ? { usage: this.lastUsage } : {}
+          };
+          return;
+        }
+        let payload;
+        try {
+          payload = JSON.parse(data);
+        } catch {
+          throw new AiParseError("AI provider returned malformed stream data");
+        }
+        if (this.provider === "anthropic") {
+          yield* this.consumeAnthropic(payload);
+        } else {
+          yield* this.consumeOpenAi(payload);
+        }
+      }
+      *consumeOpenAi(payload) {
+        const choices = payload.choices;
+        if (!Array.isArray(choices) || choices.length === 0) return;
+        const choice = choices[0];
+        const delta = choice.delta ?? {};
+        const content = delta.content;
+        if (typeof content === "string" && content.length > 0) {
+          yield { type: "text_delta", text: content };
+        }
+        const toolCalls = delta.tool_calls;
+        if (Array.isArray(toolCalls)) {
+          for (const call of toolCalls) {
+            const index = typeof call.index === "number" ? String(call.index) : String(this.toolBuffers.size);
+            const idFromCall = typeof call.id === "string" ? call.id : "";
+            const fn = call.function ?? {};
+            const nameFromCall = typeof fn.name === "string" ? fn.name : "";
+            const argsFragment = typeof fn.arguments === "string" ? fn.arguments : "";
+            const existing = this.toolBuffers.get(index) ?? { id: "", name: "", args: "" };
+            if (idFromCall) existing.id = idFromCall;
+            if (nameFromCall) existing.name = nameFromCall;
+            existing.args += argsFragment;
+            this.toolBuffers.set(index, existing);
+            if (existing.name && existing.args) {
+              try {
+                const parsed = JSON.parse(existing.args);
+                if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+                  this.toolBuffers.delete(index);
+                  yield { type: "tool_call", id: existing.id || `call_${index}`, name: existing.name, args: parsed };
+                }
+              } catch {
+              }
+            }
+          }
+        }
+        if (typeof choice.finish_reason === "string" && choice.finish_reason.length > 0) {
+          this.lastFinishReason = choice.finish_reason;
+        }
+        const usage = payload.usage;
+        if (usage && typeof usage === "object") {
+          const promptTokens = Number(usage.prompt_tokens ?? 0);
+          const completionTokens = Number(usage.completion_tokens ?? 0);
+          const totalTokens = Number(usage.total_tokens ?? promptTokens + completionTokens);
+          if (Number.isFinite(promptTokens) && Number.isFinite(completionTokens)) {
+            this.lastUsage = { promptTokens, completionTokens, totalTokens };
+          }
+        }
+      }
+      *consumeAnthropic(payload) {
+        const type2 = payload.type;
+        if (type2 === "content_block_start") {
+          const block = payload.content_block ?? {};
+          if (block.type === "tool_use") {
+            const index = String(payload.index ?? this.toolBuffers.size);
+            const id = typeof block.id === "string" ? block.id : `call_${index}`;
+            const name = typeof block.name === "string" ? block.name : "";
+            this.toolBuffers.set(index, { id, name, args: "" });
+          }
+          return;
+        }
+        if (type2 === "content_block_delta") {
+          const index = String(payload.index ?? 0);
+          const delta = payload.delta ?? {};
+          if (delta.type === "text_delta" && typeof delta.text === "string" && delta.text.length > 0) {
+            yield { type: "text_delta", text: delta.text };
+            return;
+          }
+          if (delta.type === "input_json_delta" && typeof delta.partial_json === "string") {
+            const existing = this.toolBuffers.get(index);
+            if (existing) existing.args += delta.partial_json;
+          }
+          return;
+        }
+        if (type2 === "content_block_stop") {
+          const index = String(payload.index ?? 0);
+          const existing = this.toolBuffers.get(index);
+          if (existing && existing.name) {
+            this.toolBuffers.delete(index);
+            try {
+              const parsed = existing.args ? JSON.parse(existing.args) : {};
+              if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+                yield { type: "tool_call", id: existing.id, name: existing.name, args: parsed };
+                return;
+              }
+              throw new Error();
+            } catch {
+              throw new AiParseError("AI provider returned malformed tool-call JSON");
+            }
+          }
+          return;
+        }
+        if (type2 === "message_delta") {
+          const delta = payload.delta ?? {};
+          if (typeof delta.stop_reason === "string" && delta.stop_reason.length > 0) {
+            this.lastFinishReason = delta.stop_reason;
+          }
+          const usage = payload.usage ?? {};
+          if (usage.output_tokens !== void 0 || usage.input_tokens !== void 0) {
+            const promptTokens = Number(usage.input_tokens ?? this.lastUsage?.promptTokens ?? 0);
+            const completionTokens = Number(usage.output_tokens ?? this.lastUsage?.completionTokens ?? 0);
+            this.lastUsage = { promptTokens, completionTokens, totalTokens: promptTokens + completionTokens };
+          }
+          return;
+        }
+        if (type2 === "message_stop") {
+          if (this.doneEmitted) return;
+          this.doneEmitted = true;
+          yield {
+            type: "done",
+            finishReason: this.lastFinishReason ?? "end_turn",
+            ...this.lastUsage ? { usage: this.lastUsage } : {}
+          };
+          return;
+        }
+        if (type2 === "message_start") {
+          const message = payload.message ?? {};
+          const usage = message.usage ?? {};
+          if (usage.input_tokens !== void 0 || usage.output_tokens !== void 0) {
+            const promptTokens = Number(usage.input_tokens ?? 0);
+            const completionTokens = Number(usage.output_tokens ?? 0);
+            this.lastUsage = { promptTokens, completionTokens, totalTokens: promptTokens + completionTokens };
+          }
+          return;
+        }
+        if (type2 === "error") {
+          const err = payload.error ?? {};
+          throw new AiParseError(typeof err.message === "string" ? err.message : "AI provider signalled a stream error");
+        }
+      }
+      *flushRemainingToolCalls() {
+        for (const [index, buffered] of this.toolBuffers) {
+          if (buffered.name && buffered.args) {
+            try {
+              const parsed = JSON.parse(buffered.args);
+              if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+                yield { type: "tool_call", id: buffered.id || `call_${index}`, name: buffered.name, args: parsed };
+                continue;
+              }
+            } catch {
+            }
+            throw new AiParseError("AI provider returned malformed tool-call JSON");
           }
         }
+        this.toolBuffers.clear();
       }
     };
   }
@@ -32576,6 +33072,7 @@ __export(src_exports2, {
   AiParseError: () => AiParseError,
   AiTimeoutError: () => AiTimeoutError,
   Api: () => Api,
+  ApiStreamError: () => ApiStreamError,
   Auth: () => Auth,
   CANONICAL_SESSION_BACKENDS: () => CANONICAL_SESSION_BACKENDS,
   CLOSE_GOING_AWAY: () => CLOSE_GOING_AWAY,
@@ -32805,7 +33302,9 @@ __export(src_exports2, {
   originAllowed: () => originAllowed,
   parseAmqpUrl: () => parseAmqpUrl,
   parseFrame: () => parseFrame,
+  parseLineStream: () => parseLineStream,
   parseMultipart: () => parseMultipart,
+  parseSseStream: () => parseSseStream,
   parseUpgradeHeaders: () => parseUpgradeHeaders,
   patch: () => patch,
   pidfilePath: () => pidfilePath,