@aspectlylabs/mikka 0.0.0-stage → 0.0.3

package/http-link.js

@@ -0,0 +1,4502 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJS = (cb, mod) => function __require() {
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key2 of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key2) && key2 !== except)
+        __defProp(to, key2, { get: () => from[key2], enumerable: !(desc = __getOwnPropDesc(from, key2)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/constants.js
+var require_constants = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/constants.js"(exports, module) {
+    "use strict";
+    var SEMVER_SPEC_VERSION = "2.0.0";
+    var MAX_LENGTH = 256;
+    var MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER || /* istanbul ignore next */
+    9007199254740991;
+    var MAX_SAFE_COMPONENT_LENGTH = 16;
+    var MAX_SAFE_BUILD_LENGTH = MAX_LENGTH - 6;
+    var RELEASE_TYPES = [
+      "major",
+      "premajor",
+      "minor",
+      "preminor",
+      "patch",
+      "prepatch",
+      "prerelease"
+    ];
+    module.exports = {
+      MAX_LENGTH,
+      MAX_SAFE_COMPONENT_LENGTH,
+      MAX_SAFE_BUILD_LENGTH,
+      MAX_SAFE_INTEGER,
+      RELEASE_TYPES,
+      SEMVER_SPEC_VERSION,
+      FLAG_INCLUDE_PRERELEASE: 1,
+      FLAG_LOOSE: 2
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/debug.js
+var require_debug = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/debug.js"(exports, module) {
+    "use strict";
+    var debug = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () => {
+    };
+    module.exports = debug;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/re.js
+var require_re = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/re.js"(exports, module) {
+    "use strict";
+    var {
+      MAX_SAFE_COMPONENT_LENGTH,
+      MAX_SAFE_BUILD_LENGTH,
+      MAX_LENGTH
+    } = require_constants();
+    var debug = require_debug();
+    exports = module.exports = {};
+    var re = exports.re = [];
+    var safeRe = exports.safeRe = [];
+    var src = exports.src = [];
+    var safeSrc = exports.safeSrc = [];
+    var t = exports.t = {};
+    var R = 0;
+    var LETTERDASHNUMBER = "[a-zA-Z0-9-]";
+    var safeRegexReplacements = [
+      ["\\s", 1],
+      ["\\d", MAX_LENGTH],
+      [LETTERDASHNUMBER, MAX_SAFE_BUILD_LENGTH]
+    ];
+    var makeSafeRegex = (value) => {
+      for (const [token, max] of safeRegexReplacements) {
+        value = value.split(`${token}*`).join(`${token}{0,${max}}`).split(`${token}+`).join(`${token}{1,${max}}`);
+      }
+      return value;
+    };
+    var createToken = (name, value, isGlobal) => {
+      const safe = makeSafeRegex(value);
+      const index = R++;
+      debug(name, index, value);
+      t[name] = index;
+      src[index] = value;
+      safeSrc[index] = safe;
+      re[index] = new RegExp(value, isGlobal ? "g" : void 0);
+      safeRe[index] = new RegExp(safe, isGlobal ? "g" : void 0);
+    };
+    createToken("NUMERICIDENTIFIER", "0|[1-9]\\d*");
+    createToken("NUMERICIDENTIFIERLOOSE", "\\d+");
+    createToken("NONNUMERICIDENTIFIER", `\\d*[a-zA-Z-]${LETTERDASHNUMBER}*`);
+    createToken("MAINVERSION", `(${src[t.NUMERICIDENTIFIER]})\\.(${src[t.NUMERICIDENTIFIER]})\\.(${src[t.NUMERICIDENTIFIER]})`);
+    createToken("MAINVERSIONLOOSE", `(${src[t.NUMERICIDENTIFIERLOOSE]})\\.(${src[t.NUMERICIDENTIFIERLOOSE]})\\.(${src[t.NUMERICIDENTIFIERLOOSE]})`);
+    createToken("PRERELEASEIDENTIFIER", `(?:${src[t.NONNUMERICIDENTIFIER]}|${src[t.NUMERICIDENTIFIER]})`);
+    createToken("PRERELEASEIDENTIFIERLOOSE", `(?:${src[t.NONNUMERICIDENTIFIER]}|${src[t.NUMERICIDENTIFIERLOOSE]})`);
+    createToken("PRERELEASE", `(?:-(${src[t.PRERELEASEIDENTIFIER]}(?:\\.${src[t.PRERELEASEIDENTIFIER]})*))`);
+    createToken("PRERELEASELOOSE", `(?:-?(${src[t.PRERELEASEIDENTIFIERLOOSE]}(?:\\.${src[t.PRERELEASEIDENTIFIERLOOSE]})*))`);
+    createToken("BUILDIDENTIFIER", `${LETTERDASHNUMBER}+`);
+    createToken("BUILD", `(?:\\+(${src[t.BUILDIDENTIFIER]}(?:\\.${src[t.BUILDIDENTIFIER]})*))`);
+    createToken("FULLPLAIN", `v?${src[t.MAINVERSION]}${src[t.PRERELEASE]}?${src[t.BUILD]}?`);
+    createToken("FULL", `^${src[t.FULLPLAIN]}$`);
+    createToken("LOOSEPLAIN", `[v=\\s]*${src[t.MAINVERSIONLOOSE]}${src[t.PRERELEASELOOSE]}?${src[t.BUILD]}?`);
+    createToken("LOOSE", `^${src[t.LOOSEPLAIN]}$`);
+    createToken("GTLT", "((?:<|>)?=?)");
+    createToken("XRANGEIDENTIFIERLOOSE", `${src[t.NUMERICIDENTIFIERLOOSE]}|x|X|\\*`);
+    createToken("XRANGEIDENTIFIER", `${src[t.NUMERICIDENTIFIER]}|x|X|\\*`);
+    createToken("XRANGEPLAIN", `[v=\\s]*(${src[t.XRANGEIDENTIFIER]})(?:\\.(${src[t.XRANGEIDENTIFIER]})(?:\\.(${src[t.XRANGEIDENTIFIER]})(?:${src[t.PRERELEASE]})?${src[t.BUILD]}?)?)?`);
+    createToken("XRANGEPLAINLOOSE", `[v=\\s]*(${src[t.XRANGEIDENTIFIERLOOSE]})(?:\\.(${src[t.XRANGEIDENTIFIERLOOSE]})(?:\\.(${src[t.XRANGEIDENTIFIERLOOSE]})(?:${src[t.PRERELEASELOOSE]})?${src[t.BUILD]}?)?)?`);
+    createToken("XRANGE", `^${src[t.GTLT]}\\s*${src[t.XRANGEPLAIN]}$`);
+    createToken("XRANGELOOSE", `^${src[t.GTLT]}\\s*${src[t.XRANGEPLAINLOOSE]}$`);
+    createToken("COERCEPLAIN", `${"(^|[^\\d])(\\d{1,"}${MAX_SAFE_COMPONENT_LENGTH}})(?:\\.(\\d{1,${MAX_SAFE_COMPONENT_LENGTH}}))?(?:\\.(\\d{1,${MAX_SAFE_COMPONENT_LENGTH}}))?`);
+    createToken("COERCE", `${src[t.COERCEPLAIN]}(?:$|[^\\d])`);
+    createToken("COERCEFULL", src[t.COERCEPLAIN] + `(?:${src[t.PRERELEASE]})?(?:${src[t.BUILD]})?(?:$|[^\\d])`);
+    createToken("COERCERTL", src[t.COERCE], true);
+    createToken("COERCERTLFULL", src[t.COERCEFULL], true);
+    createToken("LONETILDE", "(?:~>?)");
+    createToken("TILDETRIM", `(\\s*)${src[t.LONETILDE]}\\s+`, true);
+    exports.tildeTrimReplace = "$1~";
+    createToken("TILDE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAIN]}$`);
+    createToken("TILDELOOSE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAINLOOSE]}$`);
+    createToken("LONECARET", "(?:\\^)");
+    createToken("CARETTRIM", `(\\s*)${src[t.LONECARET]}\\s+`, true);
+    exports.caretTrimReplace = "$1^";
+    createToken("CARET", `^${src[t.LONECARET]}${src[t.XRANGEPLAIN]}$`);
+    createToken("CARETLOOSE", `^${src[t.LONECARET]}${src[t.XRANGEPLAINLOOSE]}$`);
+    createToken("COMPARATORLOOSE", `^${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]})$|^$`);
+    createToken("COMPARATOR", `^${src[t.GTLT]}\\s*(${src[t.FULLPLAIN]})$|^$`);
+    createToken("COMPARATORTRIM", `(\\s*)${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]}|${src[t.XRANGEPLAIN]})`, true);
+    exports.comparatorTrimReplace = "$1$2$3";
+    createToken("HYPHENRANGE", `^\\s*(${src[t.XRANGEPLAIN]})\\s+-\\s+(${src[t.XRANGEPLAIN]})\\s*$`);
+    createToken("HYPHENRANGELOOSE", `^\\s*(${src[t.XRANGEPLAINLOOSE]})\\s+-\\s+(${src[t.XRANGEPLAINLOOSE]})\\s*$`);
+    createToken("STAR", "(<|>)?=?\\s*\\*");
+    createToken("GTE0", "^\\s*>=\\s*0\\.0\\.0\\s*$");
+    createToken("GTE0PRE", "^\\s*>=\\s*0\\.0\\.0-0\\s*$");
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/parse-options.js
+var require_parse_options = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/parse-options.js"(exports, module) {
+    "use strict";
+    var looseOption = Object.freeze({ loose: true });
+    var emptyOpts = Object.freeze({});
+    var parseOptions = (options) => {
+      if (!options) {
+        return emptyOpts;
+      }
+      if (typeof options !== "object") {
+        return looseOption;
+      }
+      return options;
+    };
+    module.exports = parseOptions;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/identifiers.js
+var require_identifiers = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/identifiers.js"(exports, module) {
+    "use strict";
+    var numeric = /^[0-9]+$/;
+    var compareIdentifiers = (a, b) => {
+      if (typeof a === "number" && typeof b === "number") {
+        return a === b ? 0 : a < b ? -1 : 1;
+      }
+      const anum = numeric.test(a);
+      const bnum = numeric.test(b);
+      if (anum && bnum) {
+        a = +a;
+        b = +b;
+      }
+      return a === b ? 0 : anum && !bnum ? -1 : bnum && !anum ? 1 : a < b ? -1 : 1;
+    };
+    var rcompareIdentifiers = (a, b) => compareIdentifiers(b, a);
+    module.exports = {
+      compareIdentifiers,
+      rcompareIdentifiers
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/semver.js
+var require_semver = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/semver.js"(exports, module) {
+    "use strict";
+    var debug = require_debug();
+    var { MAX_LENGTH, MAX_SAFE_INTEGER } = require_constants();
+    var { safeRe: re, t } = require_re();
+    var parseOptions = require_parse_options();
+    var { compareIdentifiers } = require_identifiers();
+    var isPrereleaseIdentifier = (prerelease, identifier) => {
+      const identifiers = identifier.split(".");
+      if (identifiers.length > prerelease.length) {
+        return false;
+      }
+      for (let i = 0; i < identifiers.length; i++) {
+        if (compareIdentifiers(prerelease[i], identifiers[i]) !== 0) {
+          return false;
+        }
+      }
+      return true;
+    };
+    var SemVer = class _SemVer {
+      constructor(version, options) {
+        options = parseOptions(options);
+        if (version instanceof _SemVer) {
+          if (version.loose === !!options.loose && version.includePrerelease === !!options.includePrerelease) {
+            return version;
+          } else {
+            version = version.version;
+          }
+        } else if (typeof version !== "string") {
+          throw new TypeError(`Invalid version. Must be a string. Got type "${typeof version}".`);
+        }
+        if (version.length > MAX_LENGTH) {
+          throw new TypeError(
+            `version is longer than ${MAX_LENGTH} characters`
+          );
+        }
+        debug("SemVer", version, options);
+        this.options = options;
+        this.loose = !!options.loose;
+        this.includePrerelease = !!options.includePrerelease;
+        const m = version.trim().match(options.loose ? re[t.LOOSE] : re[t.FULL]);
+        if (!m) {
+          throw new TypeError(`Invalid Version: ${version}`);
+        }
+        this.raw = version;
+        this.major = +m[1];
+        this.minor = +m[2];
+        this.patch = +m[3];
+        if (this.major > MAX_SAFE_INTEGER || this.major < 0) {
+          throw new TypeError("Invalid major version");
+        }
+        if (this.minor > MAX_SAFE_INTEGER || this.minor < 0) {
+          throw new TypeError("Invalid minor version");
+        }
+        if (this.patch > MAX_SAFE_INTEGER || this.patch < 0) {
+          throw new TypeError("Invalid patch version");
+        }
+        if (!m[4]) {
+          this.prerelease = [];
+        } else {
+          this.prerelease = m[4].split(".").map((id3) => {
+            if (/^[0-9]+$/.test(id3)) {
+              const num = +id3;
+              if (num >= 0 && num < MAX_SAFE_INTEGER) {
+                return num;
+              }
+            }
+            return id3;
+          });
+        }
+        this.build = m[5] ? m[5].split(".") : [];
+        this.format();
+      }
+      format() {
+        this.version = `${this.major}.${this.minor}.${this.patch}`;
+        if (this.prerelease.length) {
+          this.version += `-${this.prerelease.join(".")}`;
+        }
+        return this.version;
+      }
+      toString() {
+        return this.version;
+      }
+      compare(other) {
+        debug("SemVer.compare", this.version, this.options, other);
+        if (!(other instanceof _SemVer)) {
+          if (typeof other === "string" && other === this.version) {
+            return 0;
+          }
+          other = new _SemVer(other, this.options);
+        }
+        if (other.version === this.version) {
+          return 0;
+        }
+        return this.compareMain(other) || this.comparePre(other);
+      }
+      compareMain(other) {
+        if (!(other instanceof _SemVer)) {
+          other = new _SemVer(other, this.options);
+        }
+        if (this.major < other.major) {
+          return -1;
+        }
+        if (this.major > other.major) {
+          return 1;
+        }
+        if (this.minor < other.minor) {
+          return -1;
+        }
+        if (this.minor > other.minor) {
+          return 1;
+        }
+        if (this.patch < other.patch) {
+          return -1;
+        }
+        if (this.patch > other.patch) {
+          return 1;
+        }
+        return 0;
+      }
+      comparePre(other) {
+        if (!(other instanceof _SemVer)) {
+          other = new _SemVer(other, this.options);
+        }
+        if (this.prerelease.length && !other.prerelease.length) {
+          return -1;
+        } else if (!this.prerelease.length && other.prerelease.length) {
+          return 1;
+        } else if (!this.prerelease.length && !other.prerelease.length) {
+          return 0;
+        }
+        let i = 0;
+        do {
+          const a = this.prerelease[i];
+          const b = other.prerelease[i];
+          debug("prerelease compare", i, a, b);
+          if (a === void 0 && b === void 0) {
+            return 0;
+          } else if (b === void 0) {
+            return 1;
+          } else if (a === void 0) {
+            return -1;
+          } else if (a === b) {
+            continue;
+          } else {
+            return compareIdentifiers(a, b);
+          }
+        } while (++i);
+      }
+      compareBuild(other) {
+        if (!(other instanceof _SemVer)) {
+          other = new _SemVer(other, this.options);
+        }
+        let i = 0;
+        do {
+          const a = this.build[i];
+          const b = other.build[i];
+          debug("build compare", i, a, b);
+          if (a === void 0 && b === void 0) {
+            return 0;
+          } else if (b === void 0) {
+            return 1;
+          } else if (a === void 0) {
+            return -1;
+          } else if (a === b) {
+            continue;
+          } else {
+            return compareIdentifiers(a, b);
+          }
+        } while (++i);
+      }
+      // preminor will bump the version up to the next minor release, and immediately
+      // down to pre-release. premajor and prepatch work the same way.
+      inc(release, identifier, identifierBase) {
+        if (release.startsWith("pre")) {
+          if (!identifier && identifierBase === false) {
+            throw new Error("invalid increment argument: identifier is empty");
+          }
+          if (identifier) {
+            const match = `-${identifier}`.match(this.options.loose ? re[t.PRERELEASELOOSE] : re[t.PRERELEASE]);
+            if (!match || match[1] !== identifier) {
+              throw new Error(`invalid identifier: ${identifier}`);
+            }
+          }
+        }
+        switch (release) {
+          case "premajor":
+            this.prerelease.length = 0;
+            this.patch = 0;
+            this.minor = 0;
+            this.major++;
+            this.inc("pre", identifier, identifierBase);
+            break;
+          case "preminor":
+            this.prerelease.length = 0;
+            this.patch = 0;
+            this.minor++;
+            this.inc("pre", identifier, identifierBase);
+            break;
+          case "prepatch":
+            this.prerelease.length = 0;
+            this.inc("patch", identifier, identifierBase);
+            this.inc("pre", identifier, identifierBase);
+            break;
+          // If the input is a non-prerelease version, this acts the same as
+          // prepatch.
+          case "prerelease":
+            if (this.prerelease.length === 0) {
+              this.inc("patch", identifier, identifierBase);
+            }
+            this.inc("pre", identifier, identifierBase);
+            break;
+          case "release":
+            if (this.prerelease.length === 0) {
+              throw new Error(`version ${this.raw} is not a prerelease`);
+            }
+            this.prerelease.length = 0;
+            break;
+          case "major":
+            if (this.minor !== 0 || this.patch !== 0 || this.prerelease.length === 0) {
+              this.major++;
+            }
+            this.minor = 0;
+            this.patch = 0;
+            this.prerelease = [];
+            break;
+          case "minor":
+            if (this.patch !== 0 || this.prerelease.length === 0) {
+              this.minor++;
+            }
+            this.patch = 0;
+            this.prerelease = [];
+            break;
+          case "patch":
+            if (this.prerelease.length === 0) {
+              this.patch++;
+            }
+            this.prerelease = [];
+            break;
+          // This probably shouldn't be used publicly.
+          // 1.0.0 'pre' would become 1.0.0-0 which is the wrong direction.
+          case "pre": {
+            const base = Number(identifierBase) ? 1 : 0;
+            if (this.prerelease.length === 0) {
+              this.prerelease = [base];
+            } else {
+              let i = this.prerelease.length;
+              while (--i >= 0) {
+                if (typeof this.prerelease[i] === "number") {
+                  this.prerelease[i]++;
+                  i = -2;
+                }
+              }
+              if (i === -1) {
+                if (identifier === this.prerelease.join(".") && identifierBase === false) {
+                  throw new Error("invalid increment argument: identifier already exists");
+                }
+                this.prerelease.push(base);
+              }
+            }
+            if (identifier) {
+              let prerelease = [identifier, base];
+              if (identifierBase === false) {
+                prerelease = [identifier];
+              }
+              if (isPrereleaseIdentifier(this.prerelease, identifier)) {
+                const prereleaseBase = this.prerelease[identifier.split(".").length];
+                if (isNaN(prereleaseBase)) {
+                  this.prerelease = prerelease;
+                }
+              } else {
+                this.prerelease = prerelease;
+              }
+            }
+            break;
+          }
+          default:
+            throw new Error(`invalid increment argument: ${release}`);
+        }
+        this.raw = this.format();
+        if (this.build.length) {
+          this.raw += `+${this.build.join(".")}`;
+        }
+        return this;
+      }
+    };
+    module.exports = SemVer;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/parse.js
+var require_parse = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/parse.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var parse = (version, options, throwErrors = false) => {
+      if (version instanceof SemVer) {
+        return version;
+      }
+      try {
+        return new SemVer(version, options);
+      } catch (er) {
+        if (!throwErrors) {
+          return null;
+        }
+        throw er;
+      }
+    };
+    module.exports = parse;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/valid.js
+var require_valid = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/valid.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var valid2 = (version, options) => {
+      const v2 = parse(version, options);
+      return v2 ? v2.version : null;
+    };
+    module.exports = valid2;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/clean.js
+var require_clean = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/clean.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var clean = (version, options) => {
+      const s = parse(version.trim().replace(/^[=v]+/, ""), options);
+      return s ? s.version : null;
+    };
+    module.exports = clean;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/inc.js
+var require_inc = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/inc.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var inc = (version, release, options, identifier, identifierBase) => {
+      if (typeof options === "string") {
+        identifierBase = identifier;
+        identifier = options;
+        options = void 0;
+      }
+      try {
+        return new SemVer(
+          version instanceof SemVer ? version.version : version,
+          options
+        ).inc(release, identifier, identifierBase).version;
+      } catch (er) {
+        return null;
+      }
+    };
+    module.exports = inc;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/diff.js
+var require_diff = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/diff.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var diff = (version1, version2) => {
+      const v1 = parse(version1, null, true);
+      const v2 = parse(version2, null, true);
+      const comparison = v1.compare(v2);
+      if (comparison === 0) {
+        return null;
+      }
+      const v1Higher = comparison > 0;
+      const highVersion = v1Higher ? v1 : v2;
+      const lowVersion = v1Higher ? v2 : v1;
+      const highHasPre = !!highVersion.prerelease.length;
+      const lowHasPre = !!lowVersion.prerelease.length;
+      if (lowHasPre && !highHasPre) {
+        if (!lowVersion.patch && !lowVersion.minor) {
+          return "major";
+        }
+        if (lowVersion.compareMain(highVersion) === 0) {
+          if (lowVersion.minor && !lowVersion.patch) {
+            return "minor";
+          }
+          return "patch";
+        }
+      }
+      const prefix = highHasPre ? "pre" : "";
+      if (v1.major !== v2.major) {
+        return prefix + "major";
+      }
+      if (v1.minor !== v2.minor) {
+        return prefix + "minor";
+      }
+      if (v1.patch !== v2.patch) {
+        return prefix + "patch";
+      }
+      return "prerelease";
+    };
+    module.exports = diff;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/major.js
+var require_major = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/major.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var major = (a, loose) => new SemVer(a, loose).major;
+    module.exports = major;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/minor.js
+var require_minor = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/minor.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var minor = (a, loose) => new SemVer(a, loose).minor;
+    module.exports = minor;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/patch.js
+var require_patch = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/patch.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var patch = (a, loose) => new SemVer(a, loose).patch;
+    module.exports = patch;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/prerelease.js
+var require_prerelease = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/prerelease.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var prerelease = (version, options) => {
+      const parsed = parse(version, options);
+      return parsed && parsed.prerelease.length ? parsed.prerelease : null;
+    };
+    module.exports = prerelease;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare.js
+var require_compare = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var compare = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
+    module.exports = compare;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rcompare.js
+var require_rcompare = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rcompare.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var rcompare = (a, b, loose) => compare(b, a, loose);
+    module.exports = rcompare;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-loose.js
+var require_compare_loose = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-loose.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var compareLoose = (a, b) => compare(a, b, true);
+    module.exports = compareLoose;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-build.js
+var require_compare_build = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-build.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var compareBuild = (a, b, loose) => {
+      const versionA = new SemVer(a, loose);
+      const versionB = new SemVer(b, loose);
+      return versionA.compare(versionB) || versionA.compareBuild(versionB);
+    };
+    module.exports = compareBuild;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/sort.js
+var require_sort = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/sort.js"(exports, module) {
+    "use strict";
+    var compareBuild = require_compare_build();
+    var sort = (list, loose) => list.sort((a, b) => compareBuild(a, b, loose));
+    module.exports = sort;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rsort.js
+var require_rsort = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rsort.js"(exports, module) {
+    "use strict";
+    var compareBuild = require_compare_build();
+    var rsort = (list, loose) => list.sort((a, b) => compareBuild(b, a, loose));
+    module.exports = rsort;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gt.js
+var require_gt = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gt.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var gt = (a, b, loose) => compare(a, b, loose) > 0;
+    module.exports = gt;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lt.js
+var require_lt = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lt.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var lt = (a, b, loose) => compare(a, b, loose) < 0;
+    module.exports = lt;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/eq.js
+var require_eq = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/eq.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var eq = (a, b, loose) => compare(a, b, loose) === 0;
+    module.exports = eq;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/neq.js
+var require_neq = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/neq.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var neq = (a, b, loose) => compare(a, b, loose) !== 0;
+    module.exports = neq;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gte.js
+var require_gte = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gte.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var gte2 = (a, b, loose) => compare(a, b, loose) >= 0;
+    module.exports = gte2;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lte.js
+var require_lte = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lte.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var lte = (a, b, loose) => compare(a, b, loose) <= 0;
+    module.exports = lte;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/cmp.js
+var require_cmp = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/cmp.js"(exports, module) {
+    "use strict";
+    var eq = require_eq();
+    var neq = require_neq();
+    var gt = require_gt();
+    var gte2 = require_gte();
+    var lt = require_lt();
+    var lte = require_lte();
+    var cmp = (a, op, b, loose) => {
+      switch (op) {
+        case "===":
+          if (typeof a === "object") {
+            a = a.version;
+          }
+          if (typeof b === "object") {
+            b = b.version;
+          }
+          return a === b;
+        case "!==":
+          if (typeof a === "object") {
+            a = a.version;
+          }
+          if (typeof b === "object") {
+            b = b.version;
+          }
+          return a !== b;
+        case "":
+        case "=":
+        case "==":
+          return eq(a, b, loose);
+        case "!=":
+          return neq(a, b, loose);
+        case ">":
+          return gt(a, b, loose);
+        case ">=":
+          return gte2(a, b, loose);
+        case "<":
+          return lt(a, b, loose);
+        case "<=":
+          return lte(a, b, loose);
+        default:
+          throw new TypeError(`Invalid operator: ${op}`);
+      }
+    };
+    module.exports = cmp;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/coerce.js
+var require_coerce = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/coerce.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var parse = require_parse();
+    var { safeRe: re, t } = require_re();
+    var coerce2 = (version, options) => {
+      if (version instanceof SemVer) {
+        return version;
+      }
+      if (typeof version === "number") {
+        version = String(version);
+      }
+      if (typeof version !== "string") {
+        return null;
+      }
+      options = options || {};
+      let match = null;
+      if (!options.rtl) {
+        match = version.match(options.includePrerelease ? re[t.COERCEFULL] : re[t.COERCE]);
+      } else {
+        const coerceRtlRegex = options.includePrerelease ? re[t.COERCERTLFULL] : re[t.COERCERTL];
+        let next;
+        while ((next = coerceRtlRegex.exec(version)) && (!match || match.index + match[0].length !== version.length)) {
+          if (!match || next.index + next[0].length !== match.index + match[0].length) {
+            match = next;
+          }
+          coerceRtlRegex.lastIndex = next.index + next[1].length + next[2].length;
+        }
+        coerceRtlRegex.lastIndex = -1;
+      }
+      if (match === null) {
+        return null;
+      }
+      const major = match[2];
+      const minor = match[3] || "0";
+      const patch = match[4] || "0";
+      const prerelease = options.includePrerelease && match[5] ? `-${match[5]}` : "";
+      const build = options.includePrerelease && match[6] ? `+${match[6]}` : "";
+      return parse(`${major}.${minor}.${patch}${prerelease}${build}`, options);
+    };
+    module.exports = coerce2;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/truncate.js
+var require_truncate = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/truncate.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var constants = require_constants();
+    var SemVer = require_semver();
+    var truncate = (version, truncation, options) => {
+      if (!constants.RELEASE_TYPES.includes(truncation)) {
+        return null;
+      }
+      const clonedVersion = cloneInputVersion(version, options);
+      return clonedVersion && doTruncation(clonedVersion, truncation);
+    };
+    var cloneInputVersion = (version, options) => {
+      const versionStringToParse = version instanceof SemVer ? version.version : version;
+      return parse(versionStringToParse, options);
+    };
+    var doTruncation = (version, truncation) => {
+      if (isPrerelease(truncation)) {
+        return version.version;
+      }
+      version.prerelease = [];
+      switch (truncation) {
+        case "major":
+          version.minor = 0;
+          version.patch = 0;
+          break;
+        case "minor":
+          version.patch = 0;
+          break;
+      }
+      return version.format();
+    };
+    var isPrerelease = (type) => {
+      return type.startsWith("pre");
+    };
+    module.exports = truncate;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/lrucache.js
+var require_lrucache = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/lrucache.js"(exports, module) {
+    "use strict";
+    var LRUCache = class {
+      constructor() {
+        this.max = 1e3;
+        this.map = /* @__PURE__ */ new Map();
+      }
+      get(key2) {
+        const value = this.map.get(key2);
+        if (value === void 0) {
+          return void 0;
+        } else {
+          this.map.delete(key2);
+          this.map.set(key2, value);
+          return value;
+        }
+      }
+      delete(key2) {
+        return this.map.delete(key2);
+      }
+      set(key2, value) {
+        const deleted = this.delete(key2);
+        if (!deleted && value !== void 0) {
+          if (this.map.size >= this.max) {
+            const firstKey = this.map.keys().next().value;
+            this.delete(firstKey);
+          }
+          this.map.set(key2, value);
+        }
+        return this;
+      }
+    };
+    module.exports = LRUCache;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/range.js
+var require_range = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/range.js"(exports, module) {
+    "use strict";
+    var SPACE_CHARACTERS = /\s+/g;
+    var Range = class _Range {
+      constructor(range, options) {
+        options = parseOptions(options);
+        if (range instanceof _Range) {
+          if (range.loose === !!options.loose && range.includePrerelease === !!options.includePrerelease) {
+            return range;
+          } else {
+            return new _Range(range.raw, options);
+          }
+        }
+        if (range instanceof Comparator) {
+          this.raw = range.value;
+          this.set = [[range]];
+          this.formatted = void 0;
+          return this;
+        }
+        this.options = options;
+        this.loose = !!options.loose;
+        this.includePrerelease = !!options.includePrerelease;
+        this.raw = range.trim().replace(SPACE_CHARACTERS, " ");
+        this.set = this.raw.split("||").map((r) => this.parseRange(r.trim())).filter((c) => c.length);
+        if (!this.set.length) {
+          throw new TypeError(`Invalid SemVer Range: ${this.raw}`);
+        }
+        if (this.set.length > 1) {
+          const first = this.set[0];
+          this.set = this.set.filter((c) => !isNullSet(c[0]));
+          if (this.set.length === 0) {
+            this.set = [first];
+          } else if (this.set.length > 1) {
+            for (const c of this.set) {
+              if (c.length === 1 && isAny(c[0])) {
+                this.set = [c];
+                break;
+              }
+            }
+          }
+        }
+        this.formatted = void 0;
+      }
+      get range() {
+        if (this.formatted === void 0) {
+          this.formatted = "";
+          for (let i = 0; i < this.set.length; i++) {
+            if (i > 0) {
+              this.formatted += "||";
+            }
+            const comps = this.set[i];
+            for (let k = 0; k < comps.length; k++) {
+              if (k > 0) {
+                this.formatted += " ";
+              }
+              this.formatted += comps[k].toString().trim();
+            }
+          }
+        }
+        return this.formatted;
+      }
+      format() {
+        return this.range;
+      }
+      toString() {
+        return this.range;
+      }
+      parseRange(range) {
+        range = range.replace(BUILDSTRIPRE, "");
+        const memoOpts = (this.options.includePrerelease && FLAG_INCLUDE_PRERELEASE) | (this.options.loose && FLAG_LOOSE);
+        const memoKey = memoOpts + ":" + range;
+        const cached = cache.get(memoKey);
+        if (cached) {
+          return cached;
+        }
+        const loose = this.options.loose;
+        const hr = loose ? re[t.HYPHENRANGELOOSE] : re[t.HYPHENRANGE];
+        range = range.replace(hr, hyphenReplace(this.options.includePrerelease));
+        debug("hyphen replace", range);
+        range = range.replace(re[t.COMPARATORTRIM], comparatorTrimReplace);
+        debug("comparator trim", range);
+        range = range.replace(re[t.TILDETRIM], tildeTrimReplace);
+        debug("tilde trim", range);
+        range = range.replace(re[t.CARETTRIM], caretTrimReplace);
+        debug("caret trim", range);
+        let rangeList = range.split(" ").map((comp) => parseComparator(comp, this.options)).join(" ").split(/\s+/).map((comp) => replaceGTE0(comp, this.options));
+        if (loose) {
+          rangeList = rangeList.filter((comp) => {
+            debug("loose invalid filter", comp, this.options);
+            return !!comp.match(re[t.COMPARATORLOOSE]);
+          });
+        }
+        debug("range list", rangeList);
+        const rangeMap = /* @__PURE__ */ new Map();
+        const comparators = rangeList.map((comp) => new Comparator(comp, this.options));
+        for (const comp of comparators) {
+          if (isNullSet(comp)) {
+            return [comp];
+          }
+          rangeMap.set(comp.value, comp);
+        }
+        if (rangeMap.size > 1 && rangeMap.has("")) {
+          rangeMap.delete("");
+        }
+        const result = [...rangeMap.values()];
+        cache.set(memoKey, result);
+        return result;
+      }
+      intersects(range, options) {
+        if (!(range instanceof _Range)) {
+          throw new TypeError("a Range is required");
+        }
+        return this.set.some((thisComparators) => {
+          return isSatisfiable(thisComparators, options) && range.set.some((rangeComparators) => {
+            return isSatisfiable(rangeComparators, options) && thisComparators.every((thisComparator) => {
+              return rangeComparators.every((rangeComparator) => {
+                return thisComparator.intersects(rangeComparator, options);
+              });
+            });
+          });
+        });
+      }
+      // if ANY of the sets match ALL of its comparators, then pass
+      test(version) {
+        if (!version) {
+          return false;
+        }
+        if (typeof version === "string") {
+          try {
+            version = new SemVer(version, this.options);
+          } catch (er) {
+            return false;
+          }
+        }
+        for (let i = 0; i < this.set.length; i++) {
+          if (testSet(this.set[i], version, this.options)) {
+            return true;
+          }
+        }
+        return false;
+      }
+    };
+    module.exports = Range;
+    var LRU = require_lrucache();
+    var cache = new LRU();
+    var parseOptions = require_parse_options();
+    var Comparator = require_comparator();
+    var debug = require_debug();
+    var SemVer = require_semver();
+    var {
+      safeRe: re,
+      src,
+      t,
+      comparatorTrimReplace,
+      tildeTrimReplace,
+      caretTrimReplace
+    } = require_re();
+    var { FLAG_INCLUDE_PRERELEASE, FLAG_LOOSE } = require_constants();
+    var BUILDSTRIPRE = new RegExp(src[t.BUILD], "g");
+    var isNullSet = (c) => c.value === "<0.0.0-0";
+    var isAny = (c) => c.value === "";
+    var isSatisfiable = (comparators, options) => {
+      let result = true;
+      const remainingComparators = comparators.slice();
+      let testComparator = remainingComparators.pop();
+      while (result && remainingComparators.length) {
+        result = remainingComparators.every((otherComparator) => {
+          return testComparator.intersects(otherComparator, options);
+        });
+        testComparator = remainingComparators.pop();
+      }
+      return result;
+    };
+    var parseComparator = (comp, options) => {
+      comp = comp.replace(re[t.BUILD], "");
+      debug("comp", comp, options);
+      comp = replaceCarets(comp, options);
+      debug("caret", comp);
+      comp = replaceTildes(comp, options);
+      debug("tildes", comp);
+      comp = replaceXRanges(comp, options);
+      debug("xrange", comp);
+      comp = replaceStars(comp, options);
+      debug("stars", comp);
+      return comp;
+    };
+    var isX = (id3) => !id3 || id3.toLowerCase() === "x" || id3 === "*";
+    var invalidXRangeOrder = (M, m, p) => isX(M) && !isX(m) || isX(m) && p && !isX(p);
+    var replaceTildes = (comp, options) => {
+      return comp.trim().split(/\s+/).map((c) => replaceTilde(c, options)).join(" ");
+    };
+    var replaceTilde = (comp, options) => {
+      const r = options.loose ? re[t.TILDELOOSE] : re[t.TILDE];
+      const z26 = options.includePrerelease ? "-0" : "";
+      return comp.replace(r, (_, M, m, p, pr) => {
+        debug("tilde", comp, _, M, m, p, pr);
+        let ret;
+        if (isX(M)) {
+          ret = "";
+        } else if (isX(m)) {
+          ret = `>=${M}.0.0${z26} <${+M + 1}.0.0-0`;
+        } else if (isX(p)) {
+          ret = `>=${M}.${m}.0${z26} <${M}.${+m + 1}.0-0`;
+        } else if (pr) {
+          debug("replaceTilde pr", pr);
+          ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
+        } else {
+          ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
+        }
+        debug("tilde return", ret);
+        return ret;
+      });
+    };
+    var replaceCarets = (comp, options) => {
+      return comp.trim().split(/\s+/).map((c) => replaceCaret(c, options)).join(" ");
+    };
+    var replaceCaret = (comp, options) => {
+      debug("caret", comp, options);
+      const r = options.loose ? re[t.CARETLOOSE] : re[t.CARET];
+      const z26 = options.includePrerelease ? "-0" : "";
+      return comp.replace(r, (_, M, m, p, pr) => {
+        debug("caret", comp, _, M, m, p, pr);
+        let ret;
+        if (isX(M)) {
+          ret = "";
+        } else if (isX(m)) {
+          ret = `>=${M}.0.0${z26} <${+M + 1}.0.0-0`;
+        } else if (isX(p)) {
+          if (M === "0") {
+            ret = `>=${M}.${m}.0${z26} <${M}.${+m + 1}.0-0`;
+          } else {
+            ret = `>=${M}.${m}.0${z26} <${+M + 1}.0.0-0`;
+          }
+        } else if (pr) {
+          debug("replaceCaret pr", pr);
+          if (M === "0") {
+            if (m === "0") {
+              ret = `>=${M}.${m}.${p}-${pr} <${M}.${m}.${+p + 1}-0`;
+            } else {
+              ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
+            }
+          } else {
+            ret = `>=${M}.${m}.${p}-${pr} <${+M + 1}.0.0-0`;
+          }
+        } else {
+          debug("no pr");
+          if (M === "0") {
+            if (m === "0") {
+              ret = `>=${M}.${m}.${p} <${M}.${m}.${+p + 1}-0`;
+            } else {
+              ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
+            }
+          } else {
+            ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
+          }
+        }
+        debug("caret return", ret);
+        return ret;
+      });
+    };
+    var replaceXRanges = (comp, options) => {
+      debug("replaceXRanges", comp, options);
+      return comp.split(/\s+/).map((c) => replaceXRange(c, options)).join(" ");
+    };
+    var replaceXRange = (comp, options) => {
+      comp = comp.trim();
+      const r = options.loose ? re[t.XRANGELOOSE] : re[t.XRANGE];
+      return comp.replace(r, (ret, gtlt, M, m, p, pr) => {
+        debug("xRange", comp, ret, gtlt, M, m, p, pr);
+        if (invalidXRangeOrder(M, m, p)) {
+          return comp;
+        }
+        const xM = isX(M);
+        const xm = xM || isX(m);
+        const xp = xm || isX(p);
+        const anyX = xp;
+        if (gtlt === "=" && anyX) {
+          gtlt = "";
+        }
+        pr = options.includePrerelease ? "-0" : "";
+        if (xM) {
+          if (gtlt === ">" || gtlt === "<") {
+            ret = "<0.0.0-0";
+          } else {
+            ret = "*";
+          }
+        } else if (gtlt && anyX) {
+          if (xm) {
+            m = 0;
+          }
+          p = 0;
+          if (gtlt === ">") {
+            gtlt = ">=";
+            if (xm) {
+              M = +M + 1;
+              m = 0;
+              p = 0;
+            } else {
+              m = +m + 1;
+              p = 0;
+            }
+          } else if (gtlt === "<=") {
+            gtlt = "<";
+            if (xm) {
+              M = +M + 1;
+            } else {
+              m = +m + 1;
+            }
+          }
+          if (gtlt === "<") {
+            pr = "-0";
+          }
+          ret = `${gtlt + M}.${m}.${p}${pr}`;
+        } else if (xm) {
+          ret = `>=${M}.0.0${pr} <${+M + 1}.0.0-0`;
+        } else if (xp) {
+          ret = `>=${M}.${m}.0${pr} <${M}.${+m + 1}.0-0`;
+        }
+        debug("xRange return", ret);
+        return ret;
+      });
+    };
+    var replaceStars = (comp, options) => {
+      debug("replaceStars", comp, options);
+      return comp.trim().replace(re[t.STAR], "");
+    };
+    var replaceGTE0 = (comp, options) => {
+      debug("replaceGTE0", comp, options);
+      return comp.trim().replace(re[options.includePrerelease ? t.GTE0PRE : t.GTE0], "");
+    };
+    var hyphenReplace = (incPr) => ($0, from, fM, fm, fp, fpr, fb, to, tM, tm, tp, tpr) => {
+      if (isX(fM)) {
+        from = "";
+      } else if (isX(fm)) {
+        from = `>=${fM}.0.0${incPr ? "-0" : ""}`;
+      } else if (isX(fp)) {
+        from = `>=${fM}.${fm}.0${incPr ? "-0" : ""}`;
+      } else if (fpr) {
+        from = `>=${from}`;
+      } else {
+        from = `>=${from}${incPr ? "-0" : ""}`;
+      }
+      if (isX(tM)) {
+        to = "";
+      } else if (isX(tm)) {
+        to = `<${+tM + 1}.0.0-0`;
+      } else if (isX(tp)) {
+        to = `<${tM}.${+tm + 1}.0-0`;
+      } else if (tpr) {
+        to = `<=${tM}.${tm}.${tp}-${tpr}`;
+      } else if (incPr) {
+        to = `<${tM}.${tm}.${+tp + 1}-0`;
+      } else {
+        to = `<=${to}`;
+      }
+      return `${from} ${to}`.trim();
+    };
+    var testSet = (set, version, options) => {
+      for (let i = 0; i < set.length; i++) {
+        if (!set[i].test(version)) {
+          return false;
+        }
+      }
+      if (version.prerelease.length && !options.includePrerelease) {
+        for (let i = 0; i < set.length; i++) {
+          debug(set[i].semver);
+          if (set[i].semver === Comparator.ANY) {
+            continue;
+          }
+          if (set[i].semver.prerelease.length > 0) {
+            const allowed = set[i].semver;
+            if (allowed.major === version.major && allowed.minor === version.minor && allowed.patch === version.patch) {
+              return true;
+            }
+          }
+        }
+        return false;
+      }
+      return true;
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/comparator.js
+var require_comparator = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/comparator.js"(exports, module) {
+    "use strict";
+    var ANY = /* @__PURE__ */ Symbol("SemVer ANY");
+    var Comparator = class _Comparator {
+      static get ANY() {
+        return ANY;
+      }
+      constructor(comp, options) {
+        options = parseOptions(options);
+        if (comp instanceof _Comparator) {
+          if (comp.loose === !!options.loose) {
+            return comp;
+          } else {
+            comp = comp.value;
+          }
+        }
+        comp = comp.trim().split(/\s+/).join(" ");
+        debug("comparator", comp, options);
+        this.options = options;
+        this.loose = !!options.loose;
+        this.parse(comp);
+        if (this.semver === ANY) {
+          this.value = "";
+        } else {
+          this.value = this.operator + this.semver.version;
+        }
+        debug("comp", this);
+      }
+      parse(comp) {
+        const r = this.options.loose ? re[t.COMPARATORLOOSE] : re[t.COMPARATOR];
+        const m = comp.match(r);
+        if (!m) {
+          throw new TypeError(`Invalid comparator: ${comp}`);
+        }
+        this.operator = m[1] !== void 0 ? m[1] : "";
+        if (this.operator === "=") {
+          this.operator = "";
+        }
+        if (!m[2]) {
+          this.semver = ANY;
+        } else {
+          this.semver = new SemVer(m[2], this.options.loose);
+        }
+      }
+      toString() {
+        return this.value;
+      }
+      test(version) {
+        debug("Comparator.test", version, this.options.loose);
+        if (this.semver === ANY || version === ANY) {
+          return true;
+        }
+        if (typeof version === "string") {
+          try {
+            version = new SemVer(version, this.options);
+          } catch (er) {
+            return false;
+          }
+        }
+        return cmp(version, this.operator, this.semver, this.options);
+      }
+      intersects(comp, options) {
+        if (!(comp instanceof _Comparator)) {
+          throw new TypeError("a Comparator is required");
+        }
+        if (this.operator === "") {
+          if (this.value === "") {
+            return true;
+          }
+          return new Range(comp.value, options).test(this.value);
+        } else if (comp.operator === "") {
+          if (comp.value === "") {
+            return true;
+          }
+          return new Range(this.value, options).test(comp.semver);
+        }
+        options = parseOptions(options);
+        if (options.includePrerelease && (this.value === "<0.0.0-0" || comp.value === "<0.0.0-0")) {
+          return false;
+        }
+        if (!options.includePrerelease && (this.value.startsWith("<0.0.0") || comp.value.startsWith("<0.0.0"))) {
+          return false;
+        }
+        if (this.operator.startsWith(">") && comp.operator.startsWith(">")) {
+          return true;
+        }
+        if (this.operator.startsWith("<") && comp.operator.startsWith("<")) {
+          return true;
+        }
+        if (this.semver.version === comp.semver.version && this.operator.includes("=") && comp.operator.includes("=")) {
+          return true;
+        }
+        if (cmp(this.semver, "<", comp.semver, options) && this.operator.startsWith(">") && comp.operator.startsWith("<")) {
+          return true;
+        }
+        if (cmp(this.semver, ">", comp.semver, options) && this.operator.startsWith("<") && comp.operator.startsWith(">")) {
+          return true;
+        }
+        return false;
+      }
+    };
+    module.exports = Comparator;
+    var parseOptions = require_parse_options();
+    var { safeRe: re, t } = require_re();
+    var cmp = require_cmp();
+    var debug = require_debug();
+    var SemVer = require_semver();
+    var Range = require_range();
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/satisfies.js
+var require_satisfies = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/satisfies.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var satisfies = (version, range, options) => {
+      try {
+        range = new Range(range, options);
+      } catch (er) {
+        return false;
+      }
+      return range.test(version);
+    };
+    module.exports = satisfies;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/to-comparators.js
+var require_to_comparators = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/to-comparators.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var toComparators = (range, options) => new Range(range, options).set.map((comp) => comp.map((c) => c.value).join(" ").trim().split(" "));
+    module.exports = toComparators;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/max-satisfying.js
+var require_max_satisfying = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/max-satisfying.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var Range = require_range();
+    var maxSatisfying = (versions, range, options) => {
+      let max = null;
+      let maxSV = null;
+      let rangeObj = null;
+      try {
+        rangeObj = new Range(range, options);
+      } catch (er) {
+        return null;
+      }
+      versions.forEach((v2) => {
+        if (rangeObj.test(v2)) {
+          if (!max || maxSV.compare(v2) === -1) {
+            max = v2;
+            maxSV = new SemVer(max, options);
+          }
+        }
+      });
+      return max;
+    };
+    module.exports = maxSatisfying;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-satisfying.js
+var require_min_satisfying = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-satisfying.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var Range = require_range();
+    var minSatisfying = (versions, range, options) => {
+      let min = null;
+      let minSV = null;
+      let rangeObj = null;
+      try {
+        rangeObj = new Range(range, options);
+      } catch (er) {
+        return null;
+      }
+      versions.forEach((v2) => {
+        if (rangeObj.test(v2)) {
+          if (!min || minSV.compare(v2) === 1) {
+            min = v2;
+            minSV = new SemVer(min, options);
+          }
+        }
+      });
+      return min;
+    };
+    module.exports = minSatisfying;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-version.js
+var require_min_version = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-version.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var Range = require_range();
+    var gt = require_gt();
+    var minVersion = (range, loose) => {
+      range = new Range(range, loose);
+      let minver = new SemVer("0.0.0");
+      if (range.test(minver)) {
+        return minver;
+      }
+      minver = new SemVer("0.0.0-0");
+      if (range.test(minver)) {
+        return minver;
+      }
+      minver = null;
+      for (let i = 0; i < range.set.length; ++i) {
+        const comparators = range.set[i];
+        let setMin = null;
+        comparators.forEach((comparator) => {
+          const compver = new SemVer(comparator.semver.version);
+          switch (comparator.operator) {
+            case ">":
+              if (compver.prerelease.length === 0) {
+                compver.patch++;
+              } else {
+                compver.prerelease.push(0);
+              }
+              compver.raw = compver.format();
+            /* fallthrough */
+            case "":
+            case ">=":
+              if (!setMin || gt(compver, setMin)) {
+                setMin = compver;
+              }
+              break;
+            case "<":
+            case "<=":
+              break;
+            /* istanbul ignore next */
+            default:
+              throw new Error(`Unexpected operation: ${comparator.operator}`);
+          }
+        });
+        if (setMin && (!minver || gt(minver, setMin))) {
+          minver = setMin;
+        }
+      }
+      if (minver && range.test(minver)) {
+        return minver;
+      }
+      return null;
+    };
+    module.exports = minVersion;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/valid.js
+var require_valid2 = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/valid.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var validRange = (range, options) => {
+      try {
+        return new Range(range, options).range || "*";
+      } catch (er) {
+        return null;
+      }
+    };
+    module.exports = validRange;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/outside.js
+var require_outside = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/outside.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var Comparator = require_comparator();
+    var { ANY } = Comparator;
+    var Range = require_range();
+    var satisfies = require_satisfies();
+    var gt = require_gt();
+    var lt = require_lt();
+    var lte = require_lte();
+    var gte2 = require_gte();
+    var outside = (version, range, hilo, options) => {
+      version = new SemVer(version, options);
+      range = new Range(range, options);
+      let gtfn, ltefn, ltfn, comp, ecomp;
+      switch (hilo) {
+        case ">":
+          gtfn = gt;
+          ltefn = lte;
+          ltfn = lt;
+          comp = ">";
+          ecomp = ">=";
+          break;
+        case "<":
+          gtfn = lt;
+          ltefn = gte2;
+          ltfn = gt;
+          comp = "<";
+          ecomp = "<=";
+          break;
+        default:
+          throw new TypeError('Must provide a hilo val of "<" or ">"');
+      }
+      if (satisfies(version, range, options)) {
+        return false;
+      }
+      for (let i = 0; i < range.set.length; ++i) {
+        const comparators = range.set[i];
+        let high = null;
+        let low = null;
+        comparators.forEach((comparator) => {
+          if (comparator.semver === ANY) {
+            comparator = new Comparator(">=0.0.0");
+          }
+          high = high || comparator;
+          low = low || comparator;
+          if (gtfn(comparator.semver, high.semver, options)) {
+            high = comparator;
+          } else if (ltfn(comparator.semver, low.semver, options)) {
+            low = comparator;
+          }
+        });
+        if (high.operator === comp || high.operator === ecomp) {
+          return false;
+        }
+        if ((!low.operator || low.operator === comp) && ltefn(version, low.semver)) {
+          return false;
+        } else if (low.operator === ecomp && ltfn(version, low.semver)) {
+          return false;
+        }
+      }
+      return true;
+    };
+    module.exports = outside;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/gtr.js
+var require_gtr = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/gtr.js"(exports, module) {
+    "use strict";
+    var outside = require_outside();
+    var gtr = (version, range, options) => outside(version, range, ">", options);
+    module.exports = gtr;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/ltr.js
+var require_ltr = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/ltr.js"(exports, module) {
+    "use strict";
+    var outside = require_outside();
+    var ltr = (version, range, options) => outside(version, range, "<", options);
+    module.exports = ltr;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/intersects.js
+var require_intersects = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/intersects.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var intersects = (r1, r2, options) => {
+      r1 = new Range(r1, options);
+      r2 = new Range(r2, options);
+      return r1.intersects(r2, options);
+    };
+    module.exports = intersects;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/simplify.js
+var require_simplify = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/simplify.js"(exports, module) {
+    "use strict";
+    var satisfies = require_satisfies();
+    var compare = require_compare();
+    module.exports = (versions, range, options) => {
+      const set = [];
+      let first = null;
+      let prev = null;
+      const v2 = versions.sort((a, b) => compare(a, b, options));
+      for (const version of v2) {
+        const included = satisfies(version, range, options);
+        if (included) {
+          prev = version;
+          if (!first) {
+            first = version;
+          }
+        } else {
+          if (prev) {
+            set.push([first, prev]);
+          }
+          prev = null;
+          first = null;
+        }
+      }
+      if (first) {
+        set.push([first, null]);
+      }
+      const ranges = [];
+      for (const [min, max] of set) {
+        if (min === max) {
+          ranges.push(min);
+        } else if (!max && min === v2[0]) {
+          ranges.push("*");
+        } else if (!max) {
+          ranges.push(`>=${min}`);
+        } else if (min === v2[0]) {
+          ranges.push(`<=${max}`);
+        } else {
+          ranges.push(`${min} - ${max}`);
+        }
+      }
+      const simplified = ranges.join(" || ");
+      const original = typeof range.raw === "string" ? range.raw : String(range);
+      return simplified.length < original.length ? simplified : range;
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/subset.js
+var require_subset = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/subset.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var Comparator = require_comparator();
+    var { ANY } = Comparator;
+    var satisfies = require_satisfies();
+    var compare = require_compare();
+    var subset = (sub, dom, options = {}) => {
+      if (sub === dom) {
+        return true;
+      }
+      sub = new Range(sub, options);
+      dom = new Range(dom, options);
+      let sawNonNull = false;
+      OUTER: for (const simpleSub of sub.set) {
+        for (const simpleDom of dom.set) {
+          const isSub = simpleSubset(simpleSub, simpleDom, options);
+          sawNonNull = sawNonNull || isSub !== null;
+          if (isSub) {
+            continue OUTER;
+          }
+        }
+        if (sawNonNull) {
+          return false;
+        }
+      }
+      return true;
+    };
+    var minimumVersionWithPreRelease = [new Comparator(">=0.0.0-0")];
+    var minimumVersion = [new Comparator(">=0.0.0")];
+    var simpleSubset = (sub, dom, options) => {
+      if (sub === dom) {
+        return true;
+      }
+      if (sub.length === 1 && sub[0].semver === ANY) {
+        if (dom.length === 1 && dom[0].semver === ANY) {
+          return true;
+        } else if (options.includePrerelease) {
+          sub = minimumVersionWithPreRelease;
+        } else {
+          sub = minimumVersion;
+        }
+      }
+      if (dom.length === 1 && dom[0].semver === ANY) {
+        if (options.includePrerelease) {
+          return true;
+        } else {
+          dom = minimumVersion;
+        }
+      }
+      const eqSet = /* @__PURE__ */ new Set();
+      let gt, lt;
+      for (const c of sub) {
+        if (c.operator === ">" || c.operator === ">=") {
+          gt = higherGT(gt, c, options);
+        } else if (c.operator === "<" || c.operator === "<=") {
+          lt = lowerLT(lt, c, options);
+        } else {
+          eqSet.add(c.semver);
+        }
+      }
+      if (eqSet.size > 1) {
+        return null;
+      }
+      let gtltComp;
+      if (gt && lt) {
+        gtltComp = compare(gt.semver, lt.semver, options);
+        if (gtltComp > 0) {
+          return null;
+        } else if (gtltComp === 0 && (gt.operator !== ">=" || lt.operator !== "<=")) {
+          return null;
+        }
+      }
+      for (const eq of eqSet) {
+        if (gt && !satisfies(eq, String(gt), options)) {
+          return null;
+        }
+        if (lt && !satisfies(eq, String(lt), options)) {
+          return null;
+        }
+        for (const c of dom) {
+          if (!satisfies(eq, String(c), options)) {
+            return false;
+          }
+        }
+        return true;
+      }
+      let higher, lower;
+      let hasDomLT, hasDomGT;
+      let needDomLTPre = lt && !options.includePrerelease && lt.semver.prerelease.length ? lt.semver : false;
+      let needDomGTPre = gt && !options.includePrerelease && gt.semver.prerelease.length ? gt.semver : false;
+      if (needDomLTPre && needDomLTPre.prerelease.length === 1 && lt.operator === "<" && needDomLTPre.prerelease[0] === 0) {
+        needDomLTPre = false;
+      }
+      for (const c of dom) {
+        hasDomGT = hasDomGT || c.operator === ">" || c.operator === ">=";
+        hasDomLT = hasDomLT || c.operator === "<" || c.operator === "<=";
+        if (gt) {
+          if (needDomGTPre) {
+            if (c.semver.prerelease && c.semver.prerelease.length && c.semver.major === needDomGTPre.major && c.semver.minor === needDomGTPre.minor && c.semver.patch === needDomGTPre.patch) {
+              needDomGTPre = false;
+            }
+          }
+          if (c.operator === ">" || c.operator === ">=") {
+            higher = higherGT(gt, c, options);
+            if (higher === c && higher !== gt) {
+              return false;
+            }
+          } else if (gt.operator === ">=" && !c.test(gt.semver)) {
+            return false;
+          }
+        }
+        if (lt) {
+          if (needDomLTPre) {
+            if (c.semver.prerelease && c.semver.prerelease.length && c.semver.major === needDomLTPre.major && c.semver.minor === needDomLTPre.minor && c.semver.patch === needDomLTPre.patch) {
+              needDomLTPre = false;
+            }
+          }
+          if (c.operator === "<" || c.operator === "<=") {
+            lower = lowerLT(lt, c, options);
+            if (lower === c && lower !== lt) {
+              return false;
+            }
+          } else if (lt.operator === "<=" && !c.test(lt.semver)) {
+            return false;
+          }
+        }
+        if (!c.operator && (lt || gt) && gtltComp !== 0) {
+          return false;
+        }
+      }
+      if (gt && hasDomLT && !lt && gtltComp !== 0) {
+        return false;
+      }
+      if (lt && hasDomGT && !gt && gtltComp !== 0) {
+        return false;
+      }
+      if (needDomGTPre || needDomLTPre) {
+        return false;
+      }
+      return true;
+    };
+    var higherGT = (a, b, options) => {
+      if (!a) {
+        return b;
+      }
+      const comp = compare(a.semver, b.semver, options);
+      return comp > 0 ? a : comp < 0 ? b : b.operator === ">" && a.operator === ">=" ? b : a;
+    };
+    var lowerLT = (a, b, options) => {
+      if (!a) {
+        return b;
+      }
+      const comp = compare(a.semver, b.semver, options);
+      return comp < 0 ? a : comp > 0 ? b : b.operator === "<" && a.operator === "<=" ? b : a;
+    };
+    module.exports = subset;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/index.js
+var require_semver2 = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/index.js"(exports, module) {
+    "use strict";
+    var internalRe = require_re();
+    var constants = require_constants();
+    var SemVer = require_semver();
+    var identifiers = require_identifiers();
+    var parse = require_parse();
+    var valid2 = require_valid();
+    var clean = require_clean();
+    var inc = require_inc();
+    var diff = require_diff();
+    var major = require_major();
+    var minor = require_minor();
+    var patch = require_patch();
+    var prerelease = require_prerelease();
+    var compare = require_compare();
+    var rcompare = require_rcompare();
+    var compareLoose = require_compare_loose();
+    var compareBuild = require_compare_build();
+    var sort = require_sort();
+    var rsort = require_rsort();
+    var gt = require_gt();
+    var lt = require_lt();
+    var eq = require_eq();
+    var neq = require_neq();
+    var gte2 = require_gte();
+    var lte = require_lte();
+    var cmp = require_cmp();
+    var coerce2 = require_coerce();
+    var truncate = require_truncate();
+    var Comparator = require_comparator();
+    var Range = require_range();
+    var satisfies = require_satisfies();
+    var toComparators = require_to_comparators();
+    var maxSatisfying = require_max_satisfying();
+    var minSatisfying = require_min_satisfying();
+    var minVersion = require_min_version();
+    var validRange = require_valid2();
+    var outside = require_outside();
+    var gtr = require_gtr();
+    var ltr = require_ltr();
+    var intersects = require_intersects();
+    var simplifyRange = require_simplify();
+    var subset = require_subset();
+    module.exports = {
+      parse,
+      valid: valid2,
+      clean,
+      inc,
+      diff,
+      major,
+      minor,
+      patch,
+      prerelease,
+      compare,
+      rcompare,
+      compareLoose,
+      compareBuild,
+      sort,
+      rsort,
+      gt,
+      lt,
+      eq,
+      neq,
+      gte: gte2,
+      lte,
+      cmp,
+      coerce: coerce2,
+      truncate,
+      Comparator,
+      Range,
+      satisfies,
+      toComparators,
+      maxSatisfying,
+      minSatisfying,
+      minVersion,
+      validRange,
+      outside,
+      gtr,
+      ltr,
+      intersects,
+      simplifyRange,
+      subset,
+      SemVer,
+      re: internalRe.re,
+      src: internalRe.src,
+      tokens: internalRe.t,
+      SEMVER_SPEC_VERSION: constants.SEMVER_SPEC_VERSION,
+      RELEASE_TYPES: constants.RELEASE_TYPES,
+      compareIdentifiers: identifiers.compareIdentifiers,
+      rcompareIdentifiers: identifiers.rcompareIdentifiers
+    };
+  }
+});
+
+// ../protocol/src/coordinator.ts
+import { z } from "zod";
+var coordinatorRuntimeSchema = z.discriminatedUnion("harness", [
+  z.object({ harness: z.literal("ai_sdk") }).strict(),
+  z.object({ harness: z.enum(["claude_code", "codex"]), deviceId: z.uuid(), model: z.string().trim().min(1).max(120).optional() }).strict()
+]);
+var coordinatorToolSpecSchema = z.object({
+  name: z.string().regex(/^[A-Za-z][A-Za-z0-9_]{0,63}$/),
+  description: z.string().max(2e4),
+  inputSchema: z.record(z.string(), z.unknown())
+});
+var nativeCoordinatorJobSchema = z.object({
+  id: z.uuid(),
+  harness: z.enum(["claude_code", "codex"]),
+  model: z.string().optional(),
+  instructions: z.string().min(1).max(2e5),
+  context: z.string().min(1).max(5e5),
+  tools: z.array(coordinatorToolSpecSchema).max(100),
+  expiresAt: z.iso.datetime()
+});
+var nativeCoordinatorClaimSchema = z.object({ job: nativeCoordinatorJobSchema.nullable() });
+var nativeCoordinatorCommandSchema = z.discriminatedUnion("type", [
+  z.object({ type: z.literal("tool"), callId: z.string().min(1).max(200), name: z.string().min(1).max(64), input: z.record(z.string(), z.unknown()) }).strict(),
+  z.object({ type: z.literal("complete"), text: z.string().min(1).max(2e5).refine((value) => value.trim().length > 0) }).strict(),
+  z.object({ type: z.literal("failed") }).strict()
+]);
+var nativeCoordinatorToolResultSchema = z.discriminatedUnion("status", [
+  z.object({ status: z.literal("pending") }),
+  z.object({ status: z.literal("done"), output: z.unknown() })
+]);
+
+// src/server-link-http.ts
+import { z as z25 } from "zod";
+
+// src/agents/tool-approval.ts
+import { randomUUID } from "node:crypto";
+async function abortable(work, signal) {
+  if (signal.aborted) throw new Error("cancelled");
+  let cancel;
+  const cancelled = new Promise((_, reject) => {
+    cancel = () => reject(new Error("cancelled"));
+    signal.addEventListener("abort", cancel, { once: true });
+  });
+  try {
+    return await Promise.race([work, cancelled]);
+  } finally {
+    signal.removeEventListener("abort", cancel);
+  }
+}
+var ToolApprovalGate = class {
+  constructor(runId, host) {
+    this.runId = runId;
+    this.host = host;
+  }
+  runId;
+  host;
+  epoch = randomUUID();
+  seen = /* @__PURE__ */ new Set();
+  networkApprovals = /* @__PURE__ */ new Map();
+  stop = new AbortController();
+  revoke() {
+    this.stop.abort();
+  }
+  get revoked() {
+    return this.stop.signal.aborted;
+  }
+  onRevoke(callback) {
+    if (this.revoked) {
+      callback();
+      return () => {
+      };
+    }
+    this.stop.signal.addEventListener("abort", callback, { once: true });
+    return () => this.stop.signal.removeEventListener("abort", callback);
+  }
+  async checkLive() {
+    if (this.revoked) return false;
+    try {
+      return await abortable(Promise.resolve(this.host.isLive(this.runId)), this.stop.signal) && !this.revoked;
+    } catch {
+      return false;
+    }
+  }
+  /** A ceiling limits destinations; it is not itself user consent. Cloud allow
+   * needs no prompt. Explicit ask obtains one exact-destination grant and shares
+   * it across this run's sockets, while every connection rechecks live policy. */
+  async preapprovedNetwork(request, signal) {
+    if (request.runId !== this.runId || request.method !== "sandbox/network" || this.revoked || signal?.aborted) return false;
+    const destination = request.input;
+    if (!destination || typeof destination.host !== "string" || !Number.isInteger(destination.port) || Number(destination.port) < 1 || Number(destination.port) > 65535) return false;
+    const key2 = JSON.stringify([request.harness, destination.host, destination.port]);
+    const lifetime = signal ? AbortSignal.any([signal, this.stop.signal]) : this.stop.signal;
+    try {
+      if (!await abortable(Promise.resolve(this.host.isLive(this.runId)), lifetime)) return false;
+      const decision = await abortable(Promise.resolve(this.host.permission(request)), lifetime);
+      if (decision !== "allow" && decision !== "ask") {
+        this.networkApprovals.delete(key2);
+        return false;
+      }
+      if (decision === "ask") {
+        let granted = this.networkApprovals.get(key2);
+        if (!granted) {
+          if (this.networkApprovals.size >= 1024 || lifetime.aborted) return false;
+          granted = this.request({ ...request, requestId: `network:${randomUUID()}` }, lifetime);
+          this.networkApprovals.set(key2, granted);
+        }
+        if (await abortable(granted, lifetime) !== "allow" || this.networkApprovals.get(key2) !== granted) return false;
+      }
+      return await abortable(Promise.resolve(this.host.isLive(this.runId)), lifetime) && !lifetime.aborted && !this.revoked;
+    } catch {
+      return false;
+    }
+  }
+  async request(request, signal) {
+    if (request.runId !== this.runId || !request.requestId || request.requestId.length > 219 || this.seen.has(request.requestId) || this.seen.size >= 1024 || this.stop.signal.aborted || signal?.aborted) return "deny";
+    let snapshot;
+    try {
+      const serialized = JSON.stringify(request);
+      if (serialized.length > 2e4) return "deny";
+      snapshot = JSON.parse(serialized);
+      snapshot.requestId = `${this.epoch}/${snapshot.requestId}`;
+    } catch {
+      return "deny";
+    }
+    this.seen.add(request.requestId);
+    const controller = new AbortController();
+    const abort = () => controller.abort();
+    this.stop.signal.addEventListener("abort", abort, { once: true });
+    signal?.addEventListener("abort", abort, { once: true });
+    try {
+      if (this.stop.signal.aborted || signal?.aborted || !await abortable(Promise.resolve(this.host.isLive(this.runId)), controller.signal)) return "deny";
+      const permission = await abortable(Promise.resolve(this.host.permission(snapshot)), controller.signal);
+      if (!await abortable(Promise.resolve(this.host.isLive(this.runId)), controller.signal) || controller.signal.aborted) return "deny";
+      if (permission === "deny") return "deny";
+      if (permission === "allow") return "allow";
+      if (permission !== "ask") return "deny";
+      const decision = await abortable(this.host.ask(snapshot, controller.signal), controller.signal);
+      if (!await abortable(Promise.resolve(this.host.isLive(this.runId)), controller.signal) || controller.signal.aborted) return "deny";
+      return decision === "allow" ? "allow" : "deny";
+    } catch {
+      return "deny";
+    } finally {
+      this.stop.signal.removeEventListener("abort", abort);
+      signal?.removeEventListener("abort", abort);
+    }
+  }
+};
+
+// ../protocol/src/agent-policy.ts
+import { z as z2 } from "zod";
+var PERMISSION_DECISIONS = ["allow", "ask", "deny"];
+var CONFIGURABLE_PERMISSIONS = {
+  install_dependency: ["allow", "ask", "deny"],
+  // Everything outside the worktree is read-only in the sandbox (ADR 0009,
+  // Stage 1 isolation), so writing there cannot be allowed wholesale.
+  write_outside_repo: ["ask", "deny"],
+  git_push: ["allow", "ask", "deny"],
+  network: ["allow", "ask", "deny"],
+  computer_use: ["allow", "ask", "deny"]
+};
+var CONFIGURABLE_ACTIONS = Object.keys(
+  CONFIGURABLE_PERMISSIONS
+);
+var FIXED_PERMISSIONS = {
+  read_in_worktree: "allow",
+  write_in_worktree: "allow",
+  run_project_script: "allow",
+  // Allowed once the user approved the repo's recipe; asked before that.
+  run_setup_recipe: "allow"
+};
+var PERMISSION_DEFAULTS = {
+  ...FIXED_PERMISSIONS,
+  install_dependency: "allow",
+  write_outside_repo: "ask",
+  git_push: "ask",
+  network: "ask",
+  computer_use: "ask"
+};
+var NETWORK_DOMAIN_RE = /^(\*\.)?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*(:[0-9]{1,5})?$/;
+var MAX_NETWORK_DOMAINS = 200;
+var MAX_GUIDANCE_LENGTH = 1e4;
+var MAX_MODEL_NAME_LENGTH = 120;
+var networkDomainSchema = z2.string().trim().toLowerCase().min(1).max(253).regex(NETWORK_DOMAIN_RE);
+function normalizeDomains(domains) {
+  return [...new Set(domains.map((d) => d.trim().toLowerCase()))].filter(
+    Boolean
+  );
+}
+var networkAllowSchema = z2.array(networkDomainSchema).max(MAX_NETWORK_DOMAINS).transform(normalizeDomains);
+var storedPermissionsSchema = z2.strictObject({
+  install_dependency: z2.enum(CONFIGURABLE_PERMISSIONS.install_dependency),
+  write_outside_repo: z2.enum(CONFIGURABLE_PERMISSIONS.write_outside_repo),
+  git_push: z2.enum(CONFIGURABLE_PERMISSIONS.git_push),
+  network: z2.enum(CONFIGURABLE_PERMISSIONS.network),
+  computer_use: z2.enum(CONFIGURABLE_PERMISSIONS.computer_use)
+}).partial();
+var guidanceSchema = z2.string().max(MAX_GUIDANCE_LENGTH);
+var runPolicySchema = z2.object({
+  permissions: z2.object({
+    install_dependency: z2.enum(PERMISSION_DECISIONS),
+    write_outside_repo: z2.enum(PERMISSION_DECISIONS),
+    git_push: z2.enum(PERMISSION_DECISIONS),
+    network: z2.enum(PERMISSION_DECISIONS),
+    // Older servers omit this field; the daemon treats that as ask, never allow.
+    computer_use: z2.enum(PERMISSION_DECISIONS).optional()
+  }),
+  /** The workspace layer of the domain allow-list (ADR 0009). */
+  networkAllow: z2.array(z2.string().min(1).max(253)).max(MAX_NETWORK_DOMAINS),
+  /** Host-derived worker/workspace ceiling; even network=allow cannot widen it. */
+  networkCeiling: z2.array(networkDomainSchema).max(MAX_NETWORK_DOMAINS).optional(),
+  /**
+   * The run only reads: the worktree is not writable and nothing is pushed
+   * (ADR 0046). Absent from an older server means a normal, writable run.
+   */
+  readOnly: z2.boolean().optional()
+});
+var MODEL_HARNESSES = ["claude_code", "codex", "cursor"];
+var modelHarnessSchema = z2.enum(MODEL_HARNESSES);
+var modelNameSchema = z2.string().trim().min(1).max(MAX_MODEL_NAME_LENGTH);
+var modelByHarnessSchema = z2.strictObject({
+  claude_code: modelNameSchema,
+  codex: modelNameSchema,
+  cursor: modelNameSchema
+}).partial();
+var APPROVAL_MODES = ["ask", "read_only"];
+var approvalModeSchema = z2.enum(APPROVAL_MODES);
+
+// src/permissions.ts
+import { lstatSync, readlinkSync, realpathSync } from "node:fs";
+import {
+  basename,
+  dirname,
+  isAbsolute,
+  join,
+  relative,
+  resolve
+} from "node:path";
+function rawCliShellAvailable(policy) {
+  return !policy.readOnly && policy.permissions.install_dependency === "allow";
+}
+function realTarget(path) {
+  const missing = [];
+  let current = path;
+  for (let hops = 0; ; ) {
+    try {
+      return join(realpathSync(current), ...[...missing].reverse());
+    } catch {
+      if (lstatSync(current, { throwIfNoEntry: false })?.isSymbolicLink()) {
+        if (++hops > 40) return path;
+        current = resolve(dirname(current), readlinkSync(current));
+        continue;
+      }
+      const parent = dirname(current);
+      if (parent === current) return path;
+      missing.push(basename(current));
+      current = parent;
+    }
+  }
+}
+function inside(parent, child) {
+  const rel = relative(parent, child);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
+function classifyWrite(worktree, target) {
+  const root = resolve(worktree);
+  const lexical = resolve(root, target);
+  const ok2 = inside(root, lexical) && inside(realTarget(root), realTarget(lexical));
+  return ok2 ? "write_in_worktree" : "write_outside_repo";
+}
+
+// src/agents/tool-approval-policy.ts
+function toolApprovalDecision(request, policy, worktree) {
+  if (request.method === "sandbox/network" && policy) {
+    const value = request.input;
+    if (!value || typeof value.host !== "string" || /[*/:]/.test(value.host) || !networkDomainSchema.safeParse(value.host).success || !Number.isInteger(value.port) || Number(value.port) < 1 || Number(value.port) > 65535) return "deny";
+    return policy.permissions.network;
+  }
+  if (request.method.startsWith("cli/") && policy && worktree) {
+    const tool = request.method.slice(4);
+    if (["get_desktop_state", "click", "type_text", "press_key", "scroll", "capture_screenshot", "start_screen_recording", "stop_screen_recording"].some((name) => tool === `mcp__mikka_computer__${name}`)) {
+      return policy.readOnly || !policy.permissions.computer_use || policy.permissions.computer_use === "deny" ? "deny" : "allow";
+    }
+    if (["submit", "ask_human", "report_blocked", "submit_capture"].some((name) => tool === `mcp__mikka__${name}`)) return "allow";
+    if (tool === "Bash" || tool === "PowerShell") return rawCliShellAvailable(policy) ? "allow" : "unavailable";
+    const input = request.input;
+    if (["Write", "Edit", "MultiEdit", "NotebookEdit"].includes(tool)) {
+      if (policy.readOnly) return "deny";
+      const path = tool === "NotebookEdit" ? input?.notebook_path : input?.file_path;
+      if (typeof path !== "string") return "unavailable";
+      return classifyWrite(worktree, path) === "write_in_worktree" ? "allow" : "unavailable";
+    }
+  }
+  return "unavailable";
+}
+
+// ../protocol/src/skill.ts
+import { z as z4 } from "zod";
+
+// ../protocol/src/skill-artifact.ts
+import { z as z3 } from "zod";
+var SKILL_ARTIFACT_HEADER = "x-mikka-skill-artifacts";
+var skillArtifactRefSchema = z3.object({
+  schemaVersion: z3.literal(1),
+  registryId: z3.literal("mikka-builtin"),
+  skillId: z3.uuid(),
+  versionId: z3.uuid(),
+  format: z3.literal("single-skill-md-v1"),
+  sha256: z3.string().regex(/^[a-f0-9]{64}$/)
+}).strict();
+var skillAssignmentReceiptSchema = z3.object({
+  id: z3.uuid(),
+  runId: z3.uuid(),
+  issueId: z3.uuid(),
+  agentId: z3.uuid(),
+  repoId: z3.uuid(),
+  deviceId: z3.uuid(),
+  leaseExpiresAt: z3.iso.datetime(),
+  assignedAt: z3.iso.datetime(),
+  artifact: skillArtifactRefSchema
+}).strict();
+var skillReceiptRevalidationSchema = z3.object({
+  skillReceipt: skillAssignmentReceiptSchema,
+  leaseExpiresAt: z3.iso.datetime()
+}).strict();
+
+// ../protocol/src/skill.ts
+var MAX_SKILLS_PER_RUN = 20;
+var MAX_SKILL_NAME_LENGTH = 80;
+var MAX_SKILL_DESCRIPTION_LENGTH = 500;
+var MAX_SKILL_INSTRUCTIONS_LENGTH = 2e4;
+var MAX_SKILL_FILES = 20;
+var MAX_SKILL_FILE_PATH_LENGTH = 200;
+var MAX_SKILL_FILE_CONTENT_LENGTH = 1e5;
+var skillFilePathSchema = z4.string().min(1).max(MAX_SKILL_FILE_PATH_LENGTH).refine(
+  (path) => !path.startsWith("/") && !path.includes("\\") && !path.split("/").some((segment) => segment === ".." || segment === ""),
+  { message: "A skill file path must be relative and stay inside the skill." }
+);
+var skillFileSchema = z4.object({
+  path: skillFilePathSchema,
+  content: z4.string().max(MAX_SKILL_FILE_CONTENT_LENGTH)
+});
+var skillFilesSchema = z4.array(skillFileSchema).max(MAX_SKILL_FILES);
+var skillNameSchema = z4.string().trim().min(1).max(MAX_SKILL_NAME_LENGTH);
+var skillDescriptionSchema = z4.string().trim().max(MAX_SKILL_DESCRIPTION_LENGTH);
+var skillInstructionsSchema = z4.string().trim().min(1).max(MAX_SKILL_INSTRUCTIONS_LENGTH);
+var runSkillSchema = z4.object({
+  id: z4.uuid(),
+  name: skillNameSchema,
+  description: z4.string().nullable(),
+  instructions: skillInstructionsSchema,
+  files: skillFilesSchema
+});
+var runSkillRefSchema = z4.object({
+  id: z4.uuid(),
+  name: skillNameSchema
+});
+
+// ../protocol/src/subscription.ts
+import { z as z6 } from "zod";
+
+// ../protocol/src/quota.ts
+import { z as z5 } from "zod";
+var QUOTA_VENDORS = ["claude_code", "codex", "cursor"];
+var quotaVendorSchema = z5.enum(QUOTA_VENDORS);
+var QUOTA_SOURCES = ["local_credentials", "official"];
+var quotaSourceSchema = z5.enum(QUOTA_SOURCES);
+var QUOTA_WINDOW_KINDS = [
+  "five_hour",
+  "weekly",
+  "monthly",
+  "daily",
+  "hourly",
+  "other"
+];
+var quotaWindowKindSchema = z5.enum(QUOTA_WINDOW_KINDS);
+var QUOTA_METERS = [
+  "auto",
+  "api",
+  "on_demand",
+  "team_pool",
+  "team_on_demand"
+];
+var quotaMeterSchema = z5.enum(QUOTA_METERS);
+var quotaWindowSchema = z5.object({
+  kind: quotaWindowKindSchema,
+  /** 0..1 share of the window already used. */
+  used: z5.number().min(0).max(1),
+  resetsAt: z5.string().nullable(),
+  /** Model display name for a per-model window, e.g. "Opus". */
+  model: z5.string().min(1).max(40).optional(),
+  meter: quotaMeterSchema.optional()
+});
+var quotaSnapshotSchema = z5.object({
+  vendor: quotaVendorSchema,
+  source: quotaSourceSchema,
+  status: z5.enum(["ok", "unknown"]),
+  plan: z5.string().max(40).nullable(),
+  windows: z5.array(quotaWindowSchema).max(12),
+  /** When this vendor was last read (ISO-8601). */
+  observedAt: z5.string()
+});
+var quotaSnapshotReportSchema = z5.object({
+  /** When the whole read finished. Null before the first read. */
+  observedAt: z5.string().nullable(),
+  quotas: z5.array(quotaSnapshotSchema).max(6)
+});
+
+// ../protocol/src/subscription.ts
+var id = z6.string().min(1).max(128);
+var subscriptionRouteSchema = z6.enum([
+  "codex_cli",
+  "claude_code_cli",
+  "codex_cpa",
+  "claude_cpa",
+  "openai_siwc"
+]);
+var subscriptionConnectionSchema = z6.object({
+  id,
+  ownerId: id,
+  workspaceId: id,
+  provider: z6.enum(["openai", "anthropic"]),
+  state: z6.enum([
+    "pending",
+    "connected",
+    "reconnect_required",
+    "disconnected"
+  ]),
+  // Increment on reconnect/disconnect. Old bindings cannot become valid again.
+  revision: z6.number().int().positive(),
+  quota: quotaSnapshotSchema
+}).strict();
+var subscriptionBindingSchema = z6.object({
+  id,
+  ownerId: id,
+  workspaceId: id,
+  // An agent or assistant session selected explicitly by the owner.
+  consumerId: id,
+  connectionId: id,
+  connectionRevision: z6.number().int().positive(),
+  route: subscriptionRouteSchema
+}).strict();
+var nativeBrokerContextSchema = z6.object({
+  route: z6.enum(["codex_cli", "claude_code_cli"]),
+  modelId: z6.string().min(1).max(128),
+  revision: z6.number().int().positive(),
+  accountId: z6.string().min(1).max(512),
+  plan: z6.string().max(40).optional(),
+  expiresAt: z6.iso.datetime()
+}).strict();
+
+// ../protocol/src/computer.ts
+import { z as z7 } from "zod";
+var machineStateSchema = z7.enum(["sleeping", "waking", "running", "error"]);
+var controlStateSchema = z7.enum(["agent", "user", "idle"]);
+var computerToolSchema = z7.enum(["click", "type", "key", "scroll", "screenshot"]);
+var screenRectSchema = z7.object({ x: z7.number(), y: z7.number(), w: z7.number().nonnegative(), h: z7.number().nonnegative() });
+var computerActionSchema = z7.object({ tool: computerToolSchema, x: z7.number().optional(), y: z7.number().optional(), text: z7.string().optional(), rect: screenRectSchema.optional() });
+var lastActionSchema = computerActionSchema.omit({ text: true }).extend({ at: z7.iso.datetime() });
+var approvalViewSchema = z7.object({
+  id: z7.string(),
+  digest: z7.string(),
+  runId: z7.string(),
+  botId: z7.string(),
+  action: computerActionSchema,
+  summary: z7.string(),
+  expiresAt: z7.iso.datetime()
+});
+var computerStateSchema = z7.object({
+  machine: machineStateSchema,
+  control: controlStateSchema,
+  controlledBy: z7.object({ userId: z7.string() }).optional(),
+  lastAction: lastActionSchema.optional(),
+  pendingApproval: approvalViewSchema.optional()
+});
+var viewerModeSchema = z7.enum(["view", "control"]);
+var viewerRequestSchema = z7.object({ mode: viewerModeSchema }).strict();
+var viewerGrantSchema = z7.object({ url: z7.url({ protocol: /^wss$/ }), expiresAt: z7.iso.datetime() });
+var createBotSchema = z7.object({ name: z7.string().trim().min(1).max(120) }).strict();
+var botViewSchema = z7.object({ id: z7.uuid(), name: z7.string().min(1).max(120) });
+var approvalDecisionSchema = z7.object({ digest: z7.string(), decision: z7.enum(["approve", "deny"]), scope: z7.enum(["once", "run"]) }).strict();
+var computerTaskStateSchema = z7.enum(["working", "approval", "done", "failed"]);
+var computerTaskSchema = z7.object({ botId: z7.string(), runId: z7.string(), task: z7.string(), state: computerTaskStateSchema, approvalId: z7.string().optional() });
+var computerEventSchema = z7.discriminatedUnion("type", [
+  z7.object({ type: z7.literal("computer.machine"), state: machineStateSchema }),
+  z7.object({ type: z7.literal("computer.control"), botId: z7.string(), control: controlStateSchema, controlledBy: z7.object({ userId: z7.string() }).optional() }),
+  z7.object({ type: z7.literal("computer.action"), botId: z7.string(), lastAction: lastActionSchema }),
+  z7.object({ type: z7.literal("computer.approval"), botId: z7.string(), approval: approvalViewSchema.nullable() })
+]);
+var reviewDigestSchema = z7.string().regex(/^[a-f0-9]{64}$/);
+var localComputerCall = z7.discriminatedUnion("name", [
+  z7.object({ name: z7.literal("get_desktop_state"), arguments: z7.object({}).strict() }).strict(),
+  z7.object({ name: z7.literal("click"), arguments: z7.object({ x: z7.number().int().min(0).max(1e5), y: z7.number().int().min(0).max(1e5) }).strict() }).strict(),
+  z7.object({ name: z7.literal("type_text"), arguments: z7.object({ text: z7.string().min(1).max(8e3) }).strict() }).strict(),
+  z7.object({ name: z7.literal("press_key"), arguments: z7.object({
+    key: z7.string().regex(/^(?:[\x20-\x7e]|enter|return|tab|escape|space|backspace|delete|insert|home|end|pageup|pagedown|up|down|left|right|f(?:[1-9]|1[0-2]))$/),
+    modifiers: z7.array(z7.enum(["ctrl", "shift", "alt", "super"])).max(4).refine((items) => new Set(items).size === items.length).optional()
+  }).strict() }).strict(),
+  z7.object({ name: z7.literal("scroll"), arguments: z7.object({ direction: z7.enum(["up", "down", "left", "right"]), amount: z7.number().int().min(1).max(50), x: z7.number().int().min(0).max(1e5), y: z7.number().int().min(0).max(1e5) }).strict() }).strict()
+]);
+var localComputerRequest = z7.object({
+  id: z7.uuid(),
+  runId: z7.uuid(),
+  target: reviewDigestSchema,
+  display: z7.string().regex(/^:[1-9][0-9]{0,2}$/).optional(),
+  call: localComputerCall,
+  expiresAt: z7.number().int().positive(),
+  digest: reviewDigestSchema
+}).strict();
+var localComputerDecision = z7.object({ id: z7.uuid(), digest: reviewDigestSchema, approve: z7.boolean() }).strict();
+var computerSyncBody = z7.object({ requests: z7.array(localComputerRequest).max(20) }).strict();
+var computerSyncResponse = z7.object({ decisions: z7.array(localComputerDecision).max(20) }).strict();
+var computerSyncPath = (deviceId) => `/v1/devices/${encodeURIComponent(deviceId)}/computer`;
+
+// ../protocol/src/capture.ts
+import { z as z8 } from "zod";
+var CAPTURE_CONTENT_TYPES = [
+  "image/png",
+  "image/jpeg",
+  "image/webp",
+  "video/mp4",
+  "video/webm"
+];
+var CAPTURE_KINDS = ["image", "video"];
+var CAPTURE_SOURCES = ["cloud_computer", "local"];
+var CAPTURE_MAX_BYTES = {
+  image: 1e7,
+  video: 1e8
+};
+var RECORDING_MAX_SECONDS = 300;
+var CAPTURE_TITLE_MAX = 200;
+var sha256 = z8.string().regex(/^[a-f0-9]{64}$/);
+var title = z8.string().trim().min(1).max(CAPTURE_TITLE_MAX);
+var captureUploadRequest = z8.object({
+  /** Stable client id, persisted before the first network attempt. */
+  captureId: z8.uuid().optional(),
+  title,
+  contentType: z8.enum(CAPTURE_CONTENT_TYPES),
+  size: z8.number().int().min(1).max(CAPTURE_MAX_BYTES.video),
+  sha256
+}).strict();
+var captureUploadTarget = z8.discriminatedUnion("target", [
+  z8.object({ target: z8.literal("storage"), url: z8.url({ protocol: /^https$/ }), headers: z8.record(z8.string(), z8.string()) }),
+  z8.object({ target: z8.literal("server") })
+]);
+var captureUploadResponse = z8.object({
+  captureId: z8.uuid(),
+  upload: captureUploadTarget
+});
+var captureView = z8.object({
+  id: z8.uuid(),
+  kind: z8.enum(CAPTURE_KINDS),
+  contentType: z8.enum(CAPTURE_CONTENT_TYPES),
+  title: z8.string(),
+  size: z8.number().int().nonnegative(),
+  durationMs: z8.number().int().nonnegative().nullable(),
+  source: z8.enum(CAPTURE_SOURCES),
+  createdAt: z8.iso.datetime()
+});
+var captureCompleteResponse = z8.object({ capture: captureView });
+var screenCaptureRequest = z8.discriminatedUnion("action", [
+  z8.object({ action: z8.literal("screenshot"), title }).strict(),
+  z8.object({ action: z8.literal("start_recording"), title, maxSeconds: z8.number().int().min(5).max(RECORDING_MAX_SECONDS).optional() }).strict(),
+  z8.object({ action: z8.literal("stop_recording") }).strict()
+]);
+var screenCaptureResponse = z8.discriminatedUnion("action", [
+  z8.object({ action: z8.literal("screenshot"), capture: captureView }),
+  z8.object({ action: z8.literal("start_recording"), recordingId: z8.uuid(), stopsAt: z8.iso.datetime() }),
+  z8.object({ action: z8.literal("stop_recording"), capture: captureView })
+]);
+var capturePaths = {
+  begin: (runId) => `/v1/runs/${encodeURIComponent(runId)}/captures`,
+  upload: (runId, captureId) => `/v1/runs/${encodeURIComponent(runId)}/captures/${encodeURIComponent(captureId)}`,
+  complete: (runId, captureId) => `/v1/runs/${encodeURIComponent(runId)}/captures/${encodeURIComponent(captureId)}/complete`,
+  screen: (runId) => `/v1/runs/${encodeURIComponent(runId)}/screen`
+};
+
+// ../protocol/src/accounts.ts
+import { z as z9 } from "zod";
+var connectedAccount = z9.object({
+  /** The provider, e.g. "github". Unique per person, so it names the row. */
+  providerId: z9.string(),
+  /**
+   * The account's id at the provider. Better Auth stores the provider's own
+   * user id here, which for GitHub is a number — the closest thing to a
+   * display name the table holds.
+   */
+  accountId: z9.string(),
+  /** OAuth scopes granted, space separated. Null when the provider sent none. */
+  scope: z9.string().nullable(),
+  /** When the account was linked, ISO 8601. */
+  createdAt: z9.string()
+});
+var connectedAccountsResponse = z9.object({
+  accounts: z9.array(connectedAccount)
+});
+
+// ../protocol/src/auth.ts
+import { z as z10 } from "zod";
+var AUTH_PROVIDERS = ["github", "google"];
+var authProvider = z10.enum(AUTH_PROVIDERS);
+var DESKTOP_SCHEMES = ["mikka", "mikka-dev"];
+var desktopScheme = z10.enum(DESKTOP_SCHEMES);
+var AUTH_BASE_PATH = "/api/auth";
+var AUTH_ROUTES = {
+  /** Better Auth jwt plugin: short-lived JWT for zero-cache and the relay. */
+  token: `${AUTH_BASE_PATH}/token`,
+  /** Dev-only bypass (a Better Auth endpoint, so it sets the session cookie). */
+  devLogin: `${AUTH_BASE_PATH}/dev/login`,
+  me: "/v1/me"
+};
+var activeSession = z10.object({
+  id: z10.string(),
+  /** ISO timestamps. */
+  createdAt: z10.string(),
+  expiresAt: z10.string(),
+  ipAddress: z10.string().nullable(),
+  userAgent: z10.string().nullable(),
+  /** Derived from the caller's JWT (`sid`), not from the request's cookies. */
+  current: z10.boolean()
+});
+var activeSessions = z10.object({ sessions: z10.array(activeSession) });
+var authorizedDevice = z10.object({
+  id: z10.uuid(),
+  name: z10.string(),
+  hostname: z10.string().nullable(),
+  platform: z10.string().nullable(),
+  daemonVersion: z10.string().nullable(),
+  lastSeenAt: z10.string().nullable(),
+  /** The daemon session; null once the authorization is revoked. */
+  sessionId: z10.string().nullable(),
+  /** When the daemon signed in, and when that session expires. */
+  authorizedAt: z10.string().nullable(),
+  expiresAt: z10.string().nullable()
+});
+var authorizedDevices = z10.object({
+  devices: z10.array(authorizedDevice)
+});
+var authorizedApplication = z10.object({
+  id: z10.string(),
+  name: z10.string(),
+  uri: z10.string().nullable(),
+  scopes: z10.array(z10.string()),
+  createdAt: z10.string(),
+  updatedAt: z10.string()
+});
+var authorizedApplications = z10.object({
+  applications: z10.array(authorizedApplication)
+});
+var sessionUser = z10.object({
+  id: z10.uuid(),
+  email: z10.string(),
+  name: z10.string(),
+  image: z10.string().nullable()
+});
+var accessToken = z10.object({
+  token: z10.string().min(1),
+  /** Expiry, ms since epoch (from the JWT's `exp`). */
+  expiresAt: z10.number().int()
+});
+
+// ../protocol/src/bridge.ts
+import { z as z11 } from "zod";
+var LANGUAGES = ["zh-CN", "en"];
+var languagePreference = z11.enum(["system", ...LANGUAGES]);
+var themePreference = z11.enum(["system", "light", "dark"]);
+var appHref = z11.string().max(2048).regex(/^\/(?!\/)/);
+var DESKTOP_NOTIFICATION_KINDS = [
+  "review",
+  "awaiting",
+  "failed"
+];
+var desktopNotification = z11.object({
+  /** The `notification` row id. */
+  id: z11.string().min(1).max(200),
+  kind: z11.enum(DESKTOP_NOTIFICATION_KINDS),
+  /** `ORV-12 · 等你验收`; the issue number is always in it. */
+  title: z11.string().min(1).max(300),
+  /** The issue title. */
+  body: z11.string().max(1e3),
+  href: appHref
+});
+var desktopBadgeCount = z11.number().int().min(0).max(9999);
+var savedTab = z11.object({
+  entries: z11.array(appHref).min(1).max(50),
+  index: z11.number().int().min(0).max(49)
+});
+var savedTabs = z11.object({
+  items: z11.array(savedTab).max(50),
+  active: z11.number().int().min(0).max(49)
+});
+var firstDayOfWeekPreference = z11.enum(["monday", "sunday", "saturday"]);
+var commentSubmitKeyPreference = z11.enum(["mod+enter", "enter"]);
+var settingsSchema = z11.object({
+  language: languagePreference,
+  theme: themePreference,
+  /** Sidebar expanded (true) or collapsed offcanvas (false); ⌘B and `[`. */
+  sidebarOpen: z11.boolean(),
+  /** Titlebar tabs; empty until the app has saved them once. */
+  tabs: savedTabs,
+  /** Send anonymous usage events (ADR 0033); off by choice in Settings. */
+  telemetry: z11.boolean(),
+  /** Which day a week starts on in date pickers. */
+  firstDayOfWeek: firstDayOfWeekPreference,
+  /** Which key press sends a comment. */
+  commentSubmitKey: commentSubmitKeyPreference
+});
+var DEFAULT_SETTINGS = {
+  language: "system",
+  theme: "system",
+  sidebarOpen: true,
+  tabs: { items: [], active: 0 },
+  telemetry: true,
+  firstDayOfWeek: "monday",
+  commentSubmitKey: "mod+enter"
+};
+var SETTINGS_KEYS = Object.keys(DEFAULT_SETTINGS);
+var authState = z11.discriminatedUnion("status", [
+  z11.object({ status: z11.literal("signed_out") }),
+  z11.object({ status: z11.literal("signing_in"), provider: authProvider }),
+  z11.object({ status: z11.literal("signed_in"), user: sessionUser }),
+  z11.object({
+    status: z11.literal("update_required"),
+    minVersion: z11.string()
+  }),
+  z11.object({ status: z11.literal("error"), code: z11.string() })
+]);
+var localDevice = z11.object({
+  /** Whether the daemon on this computer answers. */
+  status: z11.enum(["online", "connecting", "offline"]),
+  /** The device row this daemon registered, once it has. */
+  deviceId: z11.string().nullable(),
+  workspaceId: z11.string().nullable(),
+  /** The daemon holds a device credential. */
+  signedIn: z11.boolean(),
+  /** The daemon's link to the server; null while the daemon is offline. */
+  server: z11.enum(["online", "offline", "unregistered"]).nullable()
+});
+var deviceLinkRequest = z11.object({ workspaceId: z11.uuid() });
+var pickedRepo = z11.object({
+  /** The repo's top level (a subfolder pick resolves to it). */
+  path: z11.string().min(1).max(4e3),
+  name: z11.string().max(500),
+  /** `origin` (or the first remote), null when the repo has none. */
+  remoteUrl: z11.string().max(2e3).nullable()
+});
+var pickRepoResult = z11.discriminatedUnion("status", [
+  z11.object({ status: z11.literal("picked"), repo: pickedRepo }),
+  z11.object({ status: z11.literal("cancelled") }),
+  z11.object({ status: z11.literal("not_a_repo"), path: z11.string() })
+]);
+
+// ../protocol/src/cycles.ts
+import { z as z12 } from "zod";
+var WEEKDAYS = [
+  "monday",
+  "tuesday",
+  "wednesday",
+  "thursday",
+  "friday",
+  "saturday",
+  "sunday"
+];
+var CYCLE_DURATION_MIN_DAYS = 1;
+var CYCLE_DURATION_MAX_DAYS = 56;
+var CYCLE_UPCOMING_MAX = 8;
+var teamCycleSettingsSchema = z12.object({
+  /** Off until a person turns it on: nothing is created and nothing rolls. */
+  enabled: z12.boolean().default(false),
+  /** Length of a cycle in days; the end date is `start + duration - 1`. */
+  durationDays: z12.number().int().min(CYCLE_DURATION_MIN_DAYS).max(CYCLE_DURATION_MAX_DAYS).default(14),
+  /** The weekday a team's first cycle starts on. */
+  startWeekday: z12.enum(WEEKDAYS).default("monday"),
+  /** Cycles kept ready ahead of the current one. 0 creates them just in time. */
+  upcomingCount: z12.number().int().min(0).max(CYCLE_UPCOMING_MAX).default(1),
+  /**
+   * When a cycle ends, unfinished issues move to the next one. Off leaves them
+   * in the finished cycle, which is what `cycle.complete` has always done.
+   */
+  autoRollover: z12.boolean().default(true),
+  /**
+   * The team's calendar. A cycle ends at the last moment of its end date
+   * *here*, not in UTC, so a team in Auckland and one in Los Angeles roll over
+   * at different instants.
+   */
+  timezone: z12.string().max(64).refine(isValidTimeZone, "Unknown timezone.").default("UTC")
+});
+function isValidTimeZone(value) {
+  try {
+    new Intl.DateTimeFormat("en-US", { timeZone: value });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// ../protocol/src/daemon.ts
+import { z as z16 } from "zod";
+
+// ../protocol/src/harness.ts
+import { z as z13 } from "zod";
+var HARNESSES = ["claude_code", "codex", "cursor", "mock"];
+var harnessSchema = z13.enum(HARNESSES);
+var harnessInfoSchema = z13.object({
+  harness: harnessSchema,
+  installed: z13.boolean(),
+  models: z13.array(z13.string().trim().min(1).max(128)).max(500).optional(),
+  /** Deprecated (#312, 2026-10-27): could host the native Coordinator. The server keeps that runtime switched off. */
+  coordinator: z13.boolean().optional(),
+  /** Set only by a runner with an isolated, owner-bound subscription broker. */
+  subscriptionBroker: z13.literal(true).optional(),
+  /** Set only by an E2B worker with the guarded Bot computer broker. */
+  computerBroker: z13.literal(true).optional(),
+  /** Run-scoped CLI approvals and policy-version checks are supported. */
+  toolApproval: z13.literal(true).optional(),
+  /** Version string reported by the CLI, null when not installed. */
+  version: z13.string().nullable()
+});
+
+// ../protocol/src/run.ts
+import { z as z15 } from "zod";
+
+// ../protocol/src/plan.ts
+import { z as z14 } from "zod";
+var text = (max) => z14.string().trim().min(1).max(max);
+var key = z14.string().trim().min(1).max(64);
+var planSection = z14.object({
+  heading: text(200),
+  items: z14.array(text(2e3)).min(1).max(50)
+});
+var planSpec = z14.object({
+  title: text(500),
+  summary: z14.string().trim().max(4e3).default(""),
+  sections: z14.array(planSection).min(1).max(30)
+});
+var planCriterion = z14.object({
+  body: text(2e3),
+  /** The command that checks it; absent means a person checks it. */
+  checkCommand: z14.string().trim().max(2e3).optional()
+});
+var PLAN_PRIORITIES = [
+  "none",
+  "urgent",
+  "high",
+  "medium",
+  "low"
+];
+var planIssue = z14.object({
+  key,
+  title: text(500),
+  goal: z14.string().trim().max(4e3).optional(),
+  /** Grouping only; order lives in `blockedBy` (`issue.parent_id`). */
+  parentKey: key.optional(),
+  blockedBy: z14.array(key).max(50).default([]),
+  criteria: z14.array(planCriterion).min(1).max(50),
+  verifyCommand: z14.string().trim().max(2e3).optional(),
+  predictedFiles: z14.array(z14.string().trim().max(1e3)).max(200).default([]),
+  sizeEstimate: z14.object({ files: z14.number().int().min(0), lines: z14.number().int().min(0) }).optional(),
+  priority: z14.enum(PLAN_PRIORITIES).default("none")
+});
+var planSplit = z14.object({
+  summary: z14.string().trim().max(4e3).default(""),
+  issues: z14.array(planIssue).min(1).max(100)
+});
+var planHandoff = z14.object({
+  specId: z14.uuid(),
+  spec: planSpec,
+  split: planSplit
+});
+
+// ../protocol/src/run.ts
+var RUN_QUESTION_KINDS = [
+  "context",
+  "decision",
+  "permission",
+  "external"
+];
+var runQuestion = z15.object({
+  questionId: z15.uuid(),
+  kind: z15.enum(RUN_QUESTION_KINDS).default("decision"),
+  question: z15.string().trim().min(1).max(4e3),
+  context: z15.string().trim().max(4e3).optional(),
+  options: z15.array(z15.string().trim().min(1).max(4e3)).max(20).default([])
+}).strict();
+var RUN_STOP_REASONS = [
+  "submitted",
+  "turn_ended",
+  "asked_human",
+  "blocked",
+  "cancelled",
+  "error",
+  "timeout",
+  "device_lost"
+];
+var runStopReason = z15.enum(RUN_STOP_REASONS);
+var shortList = z15.array(z15.string().max(1e3)).max(5e3);
+var VERIFY_STATUSES = ["passed", "failed", "not_run"];
+var verifyStatus = z15.enum(VERIFY_STATUSES);
+var runPublish = z15.object({
+  /** Where the commit went: the issue's branch, or the run's own. */
+  branch: z15.string().max(500),
+  /** Null when nothing was committed (no changes, or the commit failed). */
+  commit: z15.string().max(100).nullable(),
+  pushed: z15.boolean(),
+  remote: z15.string().max(200).nullable(),
+  /**
+   * Why nothing was pushed when that was expected: the agent changed
+   * nothing, or the repo has not approved pushes. Absent with
+   * `pushed: false` means the commit or the push failed (see `note`).
+   */
+  skipped: z15.enum(["no_changes", "not_approved"]).optional(),
+  note: z15.string().max(2e3).optional()
+});
+var runBenchmarkContext = z15.object({
+  sourceCommit: z15.string().regex(/^[a-f0-9]{40}$/),
+  benchmarkDigest: z15.string().regex(/^[a-f0-9]{64}$/),
+  caseId: z15.string().min(1).max(200),
+  fixtureDigest: z15.string().regex(/^[a-f0-9]{64}$/),
+  policyDigest: z15.string().regex(/^[a-f0-9]{64}$/)
+}).strict();
+var runExecution = runBenchmarkContext.extend({
+  harness: z15.enum(["codex", "claude_code", "cursor"]),
+  requestedModel: z15.string().min(1).max(500).nullable(),
+  observedModel: z15.string().min(1).max(500).nullable(),
+  verifyCommand: z15.string().min(1).max(2e3)
+}).strict();
+var runRuntime = runExecution.pick({
+  harness: true,
+  requestedModel: true,
+  observedModel: true,
+  policyDigest: true,
+  sourceCommit: true
+}).strict();
+var runSkillMount = z15.object({
+  receiptId: z15.uuid(),
+  versionId: z15.uuid(),
+  sha256: z15.string().regex(/^[a-f0-9]{64}$/),
+  sessionId: z15.string().min(1).max(500),
+  mountedAt: z15.iso.datetime()
+}).strict();
+var runReport = z15.object({
+  /** Worktree base journaled before the adapter started; never agent-supplied. */
+  sourceCommit: z15.string().regex(/^[a-f0-9]{40}$/).optional(),
+  skillMount: runSkillMount.optional(),
+  execution: runExecution.optional(),
+  runtime: runRuntime.optional(),
+  /** What was done, in a few sentences. Empty when the run crashed early. */
+  summary: z15.string().max(1e4),
+  /** Paths relative to the worktree root (from `git status`). */
+  filesChanged: shortList,
+  /** The daemon's run of the issue's verify command after a submit. */
+  verify: z15.object({
+    status: verifyStatus,
+    command: z15.string().max(2e3).optional(),
+    /** Actual process outcome from the daemon, never the agent. */
+    exitCode: z15.number().int().nullable().optional(),
+    signal: z15.string().max(100).nullable().optional(),
+    timedOut: z15.boolean().optional(),
+    /** Tail of the command output. */
+    output: z15.string().max(1e4).optional()
+  }),
+  openQuestions: z15.array(z15.string().max(2e3)).max(50),
+  /** What should happen next, from the agent's point of view. */
+  question: runQuestion.optional(),
+  nextStep: z15.string().max(2e3).nullable(),
+  /** For `blocked`: the external condition, e.g. `quota_exhausted`. */
+  blockedOn: z15.string().max(500).optional(),
+  /** Daemon-owned receipt for an exact, unchanged read-only candidate. */
+  check: z15.object({
+    sha: z15.string().regex(/^[a-f0-9]{40}$/),
+    readOnly: z15.literal(true)
+  }).optional(),
+  /** Preview branch created or used by the producing run; descriptive metadata only. */
+  previewDatabaseBranch: z15.string().trim().min(1).max(500).optional(),
+  /** Acceptance criteria the agent checked, with evidence. */
+  criteria: z15.array(
+    z15.object({
+      criterionId: z15.uuid().optional(),
+      text: z15.string().max(2e3).optional(),
+      passed: z15.boolean(),
+      evidence: z15.string().max(1e4).optional(),
+      /** Agent-reported criterion check; the daemon-owned verify remains authoritative. */
+      command: z15.string().trim().min(1).max(2e3).optional(),
+      exitCode: z15.number().int().nullable().optional()
+    })
+  ).max(200).optional(),
+  /**
+   * A `plan` run's hand-in: the spec it wrote and the split it proposes for
+   * it (ADR ORV-205). Only the daemon sets this, and only for a `plan` run.
+   */
+  plan: planHandoff.optional(),
+  interfacesProduced: shortList.optional(),
+  knownIssues: shortList.optional(),
+  notesForNext: z15.string().max(1e4).optional(),
+  /** Set by the daemon after a verified submit; never by the agent. */
+  publish: runPublish.optional(),
+  followUps: z15.array(
+    z15.object({
+      title: z15.string().trim().min(1).max(500),
+      goal: z15.string().max(2e3).optional(),
+      reason: z15.string().max(2e3).optional()
+    })
+  ).max(50).optional()
+});
+var runCompletePath = (runId) => `/v1/runs/${encodeURIComponent(runId)}/complete`;
+var runCompletion = z15.object({
+  stopReason: runStopReason,
+  report: runReport
+});
+var runCompleteRequest = z15.object({ stopReason: runStopReason, report: runReport.optional() }).refine((body) => body.stopReason !== "submitted" || body.report, {
+  message: "A submitted run needs a report.",
+  path: ["report"]
+});
+
+// ../protocol/src/daemon.ts
+var RUN_STATES = [
+  "queued",
+  "preparing",
+  "running",
+  "waiting_input",
+  "finishing",
+  "succeeded",
+  /** Ended without success or failure: the turn ended, a question, a blocker. */
+  "stopped",
+  "failed",
+  "cancelled"
+];
+var runStateSchema = z16.enum(RUN_STATES);
+var stopReasonSchema = runStopReason;
+var DAEMON_RPC_ERRORS = {
+  handshakeRequired: 4001,
+  protocolMismatch: 4002,
+  unauthorized: 4003,
+  repoNotAllowed: 4010,
+  runNotFound: 4011,
+  runNotPinnedHere: 4012,
+  harnessNotSupported: 4013,
+  invalidId: 4014,
+  serverUnreachable: 4020,
+  draining: 4030
+};
+var helloParams = z16.object({
+  protocolVersion: z16.number().int(),
+  /** Contents of the daemon's `daemon.secret` file in the flavor data dir. */
+  secret: z16.string(),
+  client: z16.object({ name: z16.string(), version: z16.string() })
+});
+var helloResult = z16.object({
+  protocolVersion: z16.number().int(),
+  daemonVersion: z16.string(),
+  pid: z16.number().int()
+});
+var runSummarySchema = z16.object({
+  runId: z16.string(),
+  issueId: z16.string(),
+  harness: harnessSchema,
+  state: runStateSchema,
+  worktree: z16.string().nullable(),
+  sessionId: z16.string().nullable(),
+  /** Chunks emitted so far (the daemon-local producer sequence). */
+  chunks: z16.number().int().nonnegative(),
+  error: z16.string().nullable(),
+  /** Set once the run reached a terminal state. */
+  stopReason: stopReasonSchema.optional(),
+  /** Lease from the server; the daemon stops the run if it cannot renew it. */
+  leaseExpiresAt: z16.string().optional(),
+  /** Last progress seen by the watchdog (ISO time), while the run is active. */
+  lastProgressAt: z16.string().optional()
+});
+var daemonStatusSchema = z16.object({
+  daemonVersion: z16.string(),
+  protocolVersion: z16.number().int(),
+  pid: z16.number().int(),
+  dataDir: z16.string(),
+  /** Null until the device is registered with the server. */
+  deviceId: z16.string().nullable(),
+  /** The workspace the device credential was handed over for, if named. */
+  workspaceId: z16.string().nullable(),
+  /** Holds a device credential (it may still be refused by the server). */
+  signedIn: z16.boolean(),
+  server: z16.enum(["online", "offline", "unregistered"]),
+  harnesses: z16.array(harnessInfoSchema),
+  runs: z16.array(runSummarySchema),
+  /** Bytes used by run worktrees under the daemon's data dir. */
+  worktreeDiskBytes: z16.number().int().nonnegative(),
+  /** Items buffered on disk, waiting for the server. */
+  pendingUploads: z16.number().int().nonnegative(),
+  draining: z16.boolean(),
+  /** Latest subscription snapshots. Empty when quota polling is off. */
+  quotas: z16.array(quotaSnapshotSchema).max(6)
+});
+var empty = z16.object({}).optional();
+var ok = z16.object({ ok: z16.literal(true) });
+var daemonRpc = {
+  "daemon.hello": { params: helloParams, result: helloResult },
+  "daemon.status": { params: empty, result: daemonStatusSchema },
+  /** Cached subscription snapshots. Does not start a vendor request. */
+  "quota.snapshot": { params: empty, result: quotaSnapshotReportSchema },
+  /** Stop accepting runs, journal active ones for resume, then exit. */
+  "daemon.drain": { params: empty, result: ok },
+  /** Hand the daemon a device credential obtained by the signed-in desktop. */
+  "device.setCredential": {
+    params: z16.object({
+      credential: z16.string().min(1),
+      /** Needed only for users in more than one workspace. */
+      workspaceId: z16.uuid().optional()
+    }),
+    result: ok
+  },
+  /** Forget the device credential (the person signed out of the app). */
+  "device.clearCredential": { params: empty, result: ok },
+  /** Claim a queued run pinned to this device and start it. */
+  "runs.start": {
+    params: z16.object({ runId: z16.string() }),
+    result: runSummarySchema
+  },
+  "runs.list": { params: empty, result: z16.array(runSummarySchema) },
+  /** Interject a user message into a running session. */
+  "runs.send": {
+    params: z16.object({ runId: z16.string(), text: z16.string().min(1) }),
+    result: ok
+  },
+  "runs.cancel": {
+    params: z16.object({ runId: z16.string() }),
+    result: runSummarySchema
+  },
+  /**
+   * Dev only (`mikka daemon --dev --server memory`): queue and start a mock
+   * run on an allow-listed repo without a server. Refused otherwise.
+   */
+  "dev.mockRun": {
+    params: z16.object({
+      repoId: z16.string(),
+      fixture: z16.string().optional(),
+      baseBranch: z16.string().optional(),
+      /** Run after the mock submits; defaults to `git diff --check`. */
+      verifyCommand: z16.string().optional()
+    }),
+    result: runSummarySchema
+  }
+};
+
+// ../protocol/src/device.ts
+import { z as z17 } from "zod";
+var id2 = z17.string().min(1).max(64);
+var isoTime = z17.iso.datetime({ offset: true });
+var seg = encodeURIComponent;
+var DEVICE_ROUTES = {
+  register: "/v1/devices/register",
+  heartbeat: "/v1/devices/:deviceId/heartbeat",
+  repos: "/v1/devices/:deviceId/repos",
+  pendingRuns: "/v1/devices/:deviceId/runs",
+  claim: "/v1/devices/:deviceId/runs/:runId/claim",
+  commands: "/v1/devices/:deviceId/commands",
+  commandsAck: "/v1/devices/:deviceId/commands/ack",
+  runEvents: "/v1/runs/:runId/events",
+  runPatch: "/v1/runs/:runId",
+  runCheckpoint: "/v1/runs/:runId/checkpoint"
+};
+var devicePaths = {
+  register: () => DEVICE_ROUTES.register,
+  heartbeat: (deviceId) => `/v1/devices/${seg(deviceId)}/heartbeat`,
+  repos: (deviceId) => `/v1/devices/${seg(deviceId)}/repos`,
+  pendingRuns: (deviceId) => `/v1/devices/${seg(deviceId)}/runs?state=queued`,
+  claim: (deviceId, runId) => `/v1/devices/${seg(deviceId)}/runs/${seg(runId)}/claim`,
+  commands: (deviceId, waitSeconds, skipRuns = []) => `/v1/devices/${seg(deviceId)}/commands?wait=${waitSeconds}` + (skipRuns.length ? `&${COMMANDS_SKIP_PARAM}=${skipRuns.map(seg).join(",")}` : ""),
+  commandsAck: (deviceId) => `/v1/devices/${seg(deviceId)}/commands/ack`,
+  runEvents: (runId) => `/v1/runs/${seg(runId)}/events`,
+  runPatch: (runId) => `/v1/runs/${seg(runId)}`,
+  runCheckpoint: (runId) => `/v1/runs/${seg(runId)}/checkpoint`
+};
+var deviceComputerCapability = z17.object({ installed: z17.boolean(), version: z17.string().max(100).nullable() }).strict();
+var deviceRegistration = z17.object({
+  deviceType: z17.enum(["laptop", "server"]).optional(),
+  name: z17.string().trim().min(1).max(200),
+  hostname: z17.string().max(255).nullable().optional(),
+  platform: z17.string().max(50),
+  arch: z17.string().max(50),
+  daemonVersion: z17.string().max(50),
+  protocolVersion: z17.number().int(),
+  harnesses: z17.array(harnessInfoSchema).max(20),
+  computerUse: deviceComputerCapability.optional(),
+  /**
+   * This machine's one device id, the same in every workspace (ADR ORV-284).
+   * Registering with it in another workspace joins the same device there.
+   * An id the server does not know yet becomes the new device's id; another
+   * person's id registers a new device.
+   */
+  deviceId: id2.optional(),
+  /** Needed only when the user belongs to more than one workspace. */
+  workspaceId: z17.uuid().optional()
+});
+var deviceRegistered = z17.object({
+  deviceId: id2,
+  workspaceId: z17.uuid()
+});
+var heartbeatRunSchema = z17.object({
+  runId: id2,
+  /** Last tool call, turn boundary or file change (not raw output). */
+  lastProgressAt: isoTime
+});
+var deviceManagementCommand = z17.object({ id: z17.uuid(), kind: z17.enum(["redetect", "restart", "update", "uninstall"]) });
+var deviceHeartbeatSchema = z17.object({
+  completedDeviceCommands: z17.array(z17.uuid()).max(100).optional(),
+  failedDeviceCommands: z17.array(z17.object({ id: z17.uuid(), error: z17.string().max(500) })).max(100).optional(),
+  harnesses: z17.array(harnessInfoSchema).max(20),
+  computerUse: deviceComputerCapability.optional(),
+  deviceType: z17.enum(["laptop", "server"]).optional(),
+  runs: z17.array(heartbeatRunSchema).max(500),
+  worktreeDiskBytes: z17.number().int().nonnegative(),
+  /**
+   * Subscription windows read on this device. Absent when the daemon is not
+   * polling. Numbers only, never a vendor credential (ADR 0027).
+   */
+  quotas: z17.array(quotaSnapshotSchema).max(6).optional()
+});
+var heartbeatResultSchema = z17.object({
+  deviceCommands: z17.array(deviceManagementCommand).max(1).optional(),
+  /** Renewed lease expiry per run id; a run missing here is not renewed. */
+  leases: z17.record(z17.string(), isoTime),
+  /**
+   * Runs the device reported that it no longer holds: they ended on the
+   * server, or went to another attempt after the lease ran out. The daemon
+   * stops them now instead of when their lease runs out.
+   */
+  revoked: z17.array(id2).max(500).optional(),
+  /** Short-lived cloud device token, returned only over its authenticated link. */
+  cloudCredential: z17.string().regex(/^orv_[A-Za-z0-9_-]{43}$/).optional()
+});
+var RUN_CHECKPOINT_MAX_BYTES = 8 * 1024 * 1024;
+var runCheckpointSchema = z17.object({
+  /** The commit the run's worktree started from. */
+  baseCommit: z17.string().regex(/^[0-9a-f]{40,64}$/),
+  /**
+   * `git diff --binary` from `baseCommit` to the whole worktree (tracked
+   * and untracked files, ignored ones left out, the agent's own commits
+   * included), gzipped, base64.
+   */
+  patch: z17.string().max(Math.ceil(RUN_CHECKPOINT_MAX_BYTES * 4 / 3) + 4),
+  /** Files the patch touches. */
+  files: z17.number().int().nonnegative(),
+  takenAt: isoTime
+});
+var setupRecipeSchema = z17.object({
+  /** Paths relative to the main checkout copied into each new worktree. */
+  copyFiles: z17.array(z17.string().max(1e3)).max(200),
+  /** Shell command run in the worktree, e.g. `bun install`. */
+  command: z17.string().max(2e3).optional(),
+  /** Approved once per repo by the user; unapproved recipes never run. */
+  approved: z17.boolean()
+});
+var REPO_ORIGIN_HEADER = "x-mikka-repo-origin-check";
+var deviceRepoSchema = z17.object({
+  repoId: id2,
+  name: z17.string().max(500),
+  /** Logical repository key; only trusted cloud runtimes use an absolute path. */
+  path: z17.string().min(1).max(4e3),
+  remoteUrl: z17.string().max(2e3).nullable().optional(),
+  setup: setupRecipeSchema.optional(),
+  /** Domains agents may reach in this repo, on top of the harness's own. */
+  networkAllow: z17.array(z17.string().min(1).max(253)).max(200).optional(),
+  /** Push run branches after a verified hand-in ("always for this repo"). */
+  push: z17.object({
+    approved: z17.boolean(),
+    remote: z17.string().min(1).max(200).optional()
+  }).optional()
+});
+var deviceReposResponse = z17.object({
+  repos: z17.array(deviceRepoSchema)
+});
+var pendingRunsResponse = z17.object({ runIds: z17.array(id2) });
+var RUN_KINDS = ["implement", "acceptance", "fix", "plan"];
+var runAssignmentSchema = z17.object({
+  runId: id2,
+  issueId: id2,
+  deviceId: id2,
+  repoId: id2,
+  /** Clone URL for local runs; hosted computer assignments keep their isolated workspace. */
+  remoteUrl: z17.string().min(1).max(4e3).optional(),
+  /** Absent means origin/HEAD after fetch. */
+  baseBranch: z17.string().min(1).max(500).optional(),
+  expectedRepoRemote: z17.string().max(2e3).optional(),
+  harness: harnessSchema,
+  prompt: z17.string().max(1e5),
+  /**
+   * The model the harness's CLI is asked to run, from the per-harness
+   * preference of the person this run works for (ADR 0060). Absent: the
+   * CLI's own default. A daemon that does not know the field ignores it
+   * (zod strips unknown keys), so this needs no version gate.
+   */
+  model: modelNameSchema.optional(),
+  /** Owner-bound selection only; no subscription credential enters the assignment. */
+  subscriptionBinding: z17.object({
+    bindingId: z17.uuid(),
+    ownerId: z17.string().min(1).max(128),
+    workspaceId: z17.uuid(),
+    consumerId: z17.uuid(),
+    route: z17.enum(["codex_cli", "claude_code_cli"])
+  }).strict().optional(),
+  /** Local host authority comes only from the server's owner-bound Bot run. */
+  localComputer: z17.object({
+    botId: z17.uuid(),
+    ownerId: z17.string().min(1).max(128),
+    workspaceId: z17.uuid(),
+    policyVersion: z17.number().int().nonnegative().max(2147483647),
+    permission: z17.enum(["allow", "ask"])
+  }).strict().optional(),
+  /** Trusted server assignment; the model cannot choose a Bot or display. */
+  computer: z17.object({
+    botId: z17.uuid(),
+    ownerId: z17.string().min(1).max(128),
+    display: z17.string().regex(/^:[1-9][0-9]{0,2}$/),
+    policyVersion: z17.number().int().nonnegative().max(2147483647)
+  }).strict().optional(),
+  /**
+   * 4e3: the task's explicit user variables (workspace + matching repository secrets/env, NAME -> value).
+   * Cloud workers only. Passed into the task container through its own channel, never into the worker's
+   * env, and never written to the run journal.
+   */
+  taskEnv: z17.record(z17.string().regex(/^[A-Za-z_][A-Za-z0-9_]{0,127}$/), z17.string().max(65536)).optional(),
+  /**
+   * Names in `taskEnv` that are secrets (kind 'secret'; env vars are not listed). The daemon masks
+   * their values (raw + standard base64) in run output before anything is uploaded; the server
+   * masks again. Older daemons strip this field and rely on server-side masking only.
+   */
+  taskSecretNames: z17.array(z17.string().regex(/^[A-Za-z_][A-Za-z0-9_]{0,127}$/)).max(500).optional(),
+  /** Mock harness only: fixture name under `packages/daemon/fixtures`. */
+  fixture: z17.string().max(200).optional(),
+  /**
+   * The issue's branch (`mikka/<team>-<number>`, ADR 0024): every run of
+   * the issue pushes its verified commit here, so one pull request follows
+   * the issue across fix rounds. A run that starts a new worktree builds on
+   * this branch from the remote when it exists. Without it the daemon
+   * pushes the run's own branch.
+   */
+  pushBranch: z17.string().min(1).max(250).optional(),
+  /** Run by the daemon in the worktree after the agent submits. */
+  verifyCommand: z17.string().max(2e3).optional(),
+  /** Run lease; renewed through the device heartbeat. */
+  leaseExpiresAt: isoTime.optional(),
+  /**
+   * The Mikka MCP server for the agent inside this run: `report`, `ask` and
+   * `blocked` reach the person's Coordinator. Send `token` as a bearer token;
+   * it stops working when the run ends. Absent: the server could not issue
+   * one, and the run goes ahead without it.
+   */
+  mcp: z17.object({ url: z17.url(), token: z17.string().min(1).max(200), mailbox: z17.literal(true).optional() }).optional(),
+  /** Question continuation must not silently open a different session. */
+  /**
+   * What the orchestrator dispatched this run for (ADR 0023). `plan` writes a
+   * spec and proposes a split instead of changing code (ADR ORV-205).
+   */
+  kind: z17.enum(RUN_KINDS).optional(),
+  /**
+   * The earlier run this one continues (continue, fix, answer, a person's
+   * message): the daemon works on in that run's worktree, on this run's
+   * branch, so nothing the earlier run left uncommitted is lost.
+   */
+  continuesRunId: id2.optional(),
+  /**
+   * The latest checkpoint of the attempt this run takes over after its
+   * machine went offline. Used only for a new worktree (another machine, or
+   * the earlier worktree is gone): it starts at `baseCommit` (the base
+   * branch when that commit is not here) with the patch applied.
+   */
+  resumeFrom: runCheckpointSchema.optional(),
+  /**
+   * The harness session to continue. A daemon that cannot resume starts a
+   * new session with `prompt`, which always carries the full brief.
+   */
+  resumeSessionId: z17.string().max(500).optional(),
+  requireSessionResume: z17.boolean().optional(),
+  preserveQuestionWorktree: z17.boolean().optional(),
+  questionId: z17.uuid().optional(),
+  /**
+   * What this run adds on top of the brief (a person's message, an answer,
+   * a fix request). A resumed session gets only this as its next message;
+   * a new session gets `prompt`, which already includes it.
+   */
+  followUp: z17.string().max(1e5).optional(),
+  /**
+   * The workspace's agent permissions and network allow-list (ADR 0028).
+   * Absent from an older server: the daemon applies the ADR 0009 defaults.
+   */
+  policy: runPolicySchema.optional(),
+  /** Trusted server revision for the exact run policy; older servers omit it. */
+  policyRevision: z17.string().regex(/^[a-f0-9]{64}$/).optional(),
+  /**
+   * The skills mounted on this run's agent and still enabled, resolved at
+   * claim time the way `policy` is. The daemon inlines them into the agent's
+   * brief and writes them under the run's directory. Absent from an older
+   * server: the run simply has none.
+   */
+  skills: z17.array(runSkillSchema).max(MAX_SKILLS_PER_RUN).optional(),
+  /** Server-minted assignment provenance; does not grant any policy permission. */
+  skillReceipt: skillAssignmentReceiptSchema.optional(),
+  /** Frozen by the server benchmark ledger; never extracted from model output. */
+  benchmark: runBenchmarkContext.optional()
+});
+var runPatchSchema = z17.object({
+  state: z17.enum([
+    "queued",
+    "preparing",
+    "running",
+    "waiting_input",
+    "finishing",
+    "succeeded",
+    "stopped",
+    "failed",
+    "cancelled"
+  ]),
+  sessionId: z17.string().max(500).nullable().optional(),
+  worktree: z17.string().max(4e3).nullable().optional(),
+  error: z17.string().max(1e4).nullable().optional(),
+  /** Set on every terminal state. */
+  stopReason: runStopReason.optional()
+});
+var runEventBatchSchema = z17.object({
+  fromSeq: z17.number().int().min(1),
+  chunks: z17.array(z17.looseObject({ type: z17.string() })).min(1).max(1e3)
+});
+var runEventsAccepted = z17.object({
+  /** Producer seq of the last chunk the server holds for this run. */
+  offset: z17.string()
+});
+var COMMANDS_SKIP_PARAM = "skip";
+var runCommandSchema = z17.discriminatedUnion("kind", [
+  z17.object({
+    kind: z17.literal("input"),
+    runId: id2,
+    messageId: z17.uuid(),
+    text: z17.string().min(1).max(1e5)
+  }),
+  z17.object({ kind: z17.literal("stop"), runId: id2 })
+]);
+var runCommandsResponse = z17.object({
+  commands: z17.array(runCommandSchema).max(500)
+});
+var runCommandsAck = z17.object({
+  delivered: z17.array(z17.uuid()).max(500)
+});
+var FS_MAX_ENTRIES = 500;
+var fsBrowseRequest = z17.object({
+  /** Absolute path on the device; omitted: the device's home folder. */
+  path: z17.string().trim().min(1).max(4e3).optional(),
+  showHidden: z17.boolean().optional()
+});
+var fsPendingRequest = fsBrowseRequest.extend({ id: z17.uuid() });
+var fsRequestsResponse = z17.object({
+  requests: z17.array(fsPendingRequest).max(50)
+});
+var fsEntry = z17.object({
+  name: z17.string().max(1e3),
+  path: z17.string().max(4e3),
+  /** The folder is the top level of a git repo (it has a `.git`). */
+  isRepo: z17.boolean()
+});
+var fsListing = z17.object({
+  ok: z17.literal(true),
+  path: z17.string().max(4e3),
+  /** Null at the filesystem root. */
+  parent: z17.string().max(4e3).nullable(),
+  home: z17.string().max(4e3),
+  /** `darwin`, `linux`, `win32`: for path separators and wording. */
+  platform: z17.string().max(50),
+  entries: z17.array(fsEntry).max(FS_MAX_ENTRIES),
+  /** More folders existed than `FS_MAX_ENTRIES`. */
+  truncated: z17.boolean(),
+  /**
+   * The git repo `path` is in, if any: its top level and `origin` (or the
+   * first remote). This is what `device.addRepo` should be given.
+   */
+  repo: z17.object({
+    path: z17.string().max(4e3),
+    remoteUrl: z17.string().max(2e3).nullable()
+  }).nullable()
+});
+var FS_ERROR_CODES = [
+  "not_found",
+  "not_a_directory",
+  "denied",
+  "failed"
+];
+var fsFailure = z17.object({
+  ok: z17.literal(false),
+  code: z17.enum(FS_ERROR_CODES),
+  message: z17.string().max(1e3)
+});
+var fsResult = z17.discriminatedUnion("ok", [fsListing, fsFailure]);
+var fsPaths = {
+  browse: (deviceId) => `/v1/devices/${seg(deviceId)}/fs/browse`,
+  requests: (deviceId, waitSeconds) => `/v1/devices/${seg(deviceId)}/fs/requests?wait=${waitSeconds}`,
+  respond: (deviceId, requestId) => `/v1/devices/${seg(deviceId)}/fs/requests/${seg(requestId)}`
+};
+
+// ../protocol/src/orchestrator.ts
+import { z as z18 } from "zod";
+var minutes = (n) => n * 6e4;
+var orchestratorSettingsSchema = z18.object({
+  /** "Continue" prompts after a turn ended without a submit. */
+  maxContinuations: z18.number().int().min(0).max(20).default(3),
+  /** Resumes after the CLI crashed, before one fresh session. */
+  maxCrashRetries: z18.number().int().min(0).max(20).default(3),
+  /** Fix rounds after the daemon's verify failed. */
+  maxFixAttempts: z18.number().int().min(0).max(20).default(3),
+  /** "You seem stuck" prompts after a run stalled. */
+  maxStallRecoveries: z18.number().int().min(0).max(20).default(2),
+  /** No progress for this long while the lease is fresh = stalled. */
+  stalledAfterMs: z18.number().int().min(minutes(1)).default(minutes(10)),
+  /** A device offline this long is handed to a person (no auto switch). */
+  deviceOfflineEscalateMs: z18.number().int().min(0).default(minutes(30)),
+  /** An unanswered question frees its concurrency slot after this. */
+  questionSlotReleaseMs: z18.number().int().min(0).default(minutes(24 * 60)),
+  /** Automatic dispatches per issue per hour before a person looks. */
+  maxDispatchesPerHour: z18.number().int().min(1).max(100).default(6),
+  /** Wait before resuming a run that hit its quota (no reset time known). */
+  quotaBackoffMs: z18.number().int().min(0).default(minutes(15)),
+  /**
+   * How often an issue waiting on its pull request or CI asks GitHub again
+   * when no webhook arrived (ADR 0024).
+   */
+  ciRecheckMs: z18.number().int().min(3e4).default(minutes(2)),
+  /** A pushed commit with no checks after this long has no CI: it passes. */
+  ciNoChecksMs: z18.number().int().min(0).default(minutes(5)),
+  /** CI still running after this long goes to a person. */
+  ciTimeoutMs: z18.number().int().min(minutes(5)).default(minutes(120)),
+  /** Remote URL of the repo this project's issues run in. */
+  repoUrl: z18.string().max(2e3).optional()
+});
+var CRASH_BACKOFF_MS = [1e4, 6e4, minutes(5)];
+var UPSTREAM_RECHECK_MS = minutes(5);
+var PERSON_WAIT_DETAIL_CODES = [
+  "review",
+  // The planner wrote a spec; a person approves it, then its split (ADR ORV-205).
+  "plan_review",
+  "question",
+  "verify_failed",
+  "no_verify_command",
+  "no_submit",
+  "stalled",
+  "crashed",
+  "blocked",
+  "auth_expired",
+  "device_offline",
+  "agent_no_device",
+  "no_repo",
+  "repo_ambiguous",
+  "no_criteria",
+  "dispatch_loop",
+  "manual_advance",
+  "push_failed",
+  "pr_failed",
+  "pr_closed",
+  "ci_failed",
+  "ci_timeout",
+  "acceptance_failed"
+];
+var EXTERNAL_WAIT_DETAIL_CODES = [
+  "pr_opening",
+  "ci_pending",
+  "upstream",
+  "device_offline_recent",
+  "capacity",
+  "file_overlap",
+  "retry_backoff",
+  "quota"
+];
+var WAIT_DETAIL_CODES = [
+  ...PERSON_WAIT_DETAIL_CODES,
+  ...EXTERNAL_WAIT_DETAIL_CODES
+];
+var waitDetailSchema = z18.object({
+  code: z18.enum(WAIT_DETAIL_CODES),
+  params: z18.record(
+    z18.string(),
+    z18.union([
+      z18.string(),
+      z18.number(),
+      z18.array(z18.string()),
+      // `repo_ambiguous`: the repos a person can pick from.
+      z18.array(z18.record(z18.string(), z18.string()))
+    ])
+  ).optional()
+});
+var prChecksSchema = z18.object({
+  state: z18.enum(["pending", "success", "failure", "none"]),
+  /** Failed checks, for the fix round's brief and the issue page. */
+  failing: z18.array(
+    z18.object({
+      name: z18.string().max(500),
+      summary: z18.string().max(4e3).optional(),
+      url: z18.string().max(2e3).optional()
+    })
+  ).max(50),
+  total: z18.number().int().min(0)
+});
+var DEFAULT_BRANCH_TEMPLATE = "mikka/{team}-{number}";
+var BRANCH_FORBIDDEN = /[\s~^:?*[\\]|\.\.|@\{|\/\/|^\/|\/$/;
+var BRANCH_FORBIDDEN_HINT = "No spaces or ~ ^ : ? * [ \\ .. @{ //, and no leading or trailing /.";
+var hasControlCharacter = (value) => [...value].some((char) => {
+  const code = char.charCodeAt(0);
+  return code < 32 || code === 127;
+});
+var branchTemplateSchema = z18.string().trim().min(1).max(200).refine((value) => value.includes("{number}"), {
+  message: "The template must contain {number}."
+}).refine(
+  (value) => !BRANCH_FORBIDDEN.test(value) && !hasControlCharacter(value),
+  { message: BRANCH_FORBIDDEN_HINT }
+);
+var prBodyTemplateSchema = z18.string().max(2e4).nullable().optional();
+var REVIEW_CHECK_HARNESSES = [
+  "claude_code",
+  "codex",
+  "cursor"
+];
+var reviewRuleSchema = z18.object({
+  /** In Review needs an open pull request for the issue's branch (ADR 0024). */
+  requirePullRequest: z18.boolean().default(true),
+  /** ... and green CI on it. Ignored when no pull request is required. */
+  requireCi: z18.boolean().default(true),
+  /**
+   * The harness that must run the read-only check (ADR 0046). Null: any
+   * second agent on the device. A configured harness the device does not run
+   * means no check runs, exactly as if the device had no second agent.
+   */
+  checkHarness: z18.enum(REVIEW_CHECK_HARNESSES).nullable().default(null),
+  branchTemplate: branchTemplateSchema.default(DEFAULT_BRANCH_TEMPLATE),
+  /** `{key}`, `{title}` and `{summary}`; null keeps Mikka's default text. */
+  prBodyTemplate: prBodyTemplateSchema.default(null)
+});
+var DEFAULT_REVIEW_RULE = reviewRuleSchema.parse({});
+
+// ../protocol/src/platform.ts
+var NO_CAPABILITIES = Object.freeze({
+  "app.info": false,
+  "notifications.system": false,
+  "notifications.badge": false,
+  "device.localIdentity": false,
+  "device.pickRepo": false,
+  "quota.snapshot": false,
+  "preview.scheme": false,
+  "settings.local": false
+});
+var WEB_PLATFORM = Object.freeze({
+  runtime: "web",
+  bridge: null,
+  capabilities: NO_CAPABILITIES
+});
+
+// ../protocol/src/preview.ts
+import { z as z19 } from "zod";
+var PREVIEW_MAX_LENGTH = 5 * 1024 * 1024;
+var previewHtml = z19.string().max(PREVIEW_MAX_LENGTH);
+var DIRECTIVES = [
+  "default-src 'none'",
+  "script-src 'unsafe-inline'",
+  "style-src 'unsafe-inline'",
+  "img-src data: blob:",
+  "font-src data:",
+  "media-src data: blob:",
+  "base-uri 'none'",
+  "form-action 'none'"
+];
+var PREVIEW_CSP_HEADER = ["sandbox allow-scripts", ...DIRECTIVES].join(
+  "; "
+);
+var META = `<meta http-equiv="Content-Security-Policy" content="${DIRECTIVES.join("; ")}">`;
+
+// ../protocol/src/profile.ts
+import { z as z20 } from "zod";
+var usernameSchema = z20.string().trim().min(3, "At least 3 characters.").max(32, "At most 32 characters.").regex(
+  /^[a-z0-9][a-z0-9_-]*$/,
+  "Start with a letter or digit; lowercase letters, digits, - and _ only."
+);
+var displayNameSchema = z20.string().trim().min(1, "A name is required.").max(80, "At most 80 characters.");
+var avatarUrlSchema = z20.url().max(2048).refine((value) => /^https?:\/\//.test(value), "Use an http(s) URL.");
+var AVATAR_MAX_BYTES = 5 * 1024 * 1024;
+var AVATAR_CONTENT_TYPES = [
+  "image/png",
+  "image/jpeg",
+  "image/webp",
+  "image/gif"
+];
+var avatarPresignRequest = z20.object({
+  contentType: z20.enum(AVATAR_CONTENT_TYPES),
+  /** Bytes, checked against AVATAR_MAX_BYTES. */
+  size: z20.number().int().positive()
+});
+var avatarPresignResponse = z20.object({
+  uploadUrl: z20.url(),
+  /** What to store in `user.image` once the PUT has succeeded. */
+  publicUrl: avatarUrlSchema,
+  expiresIn: z20.number().int().positive()
+});
+
+// ../protocol/src/relay.ts
+import {
+  asSchema,
+  safeValidateUIMessages,
+  uiMessageChunkSchema
+} from "ai";
+import { z as z21 } from "zod";
+var RELAY_PROTOCOL_VERSION = 1;
+var MAX_INPUT_LENGTH = 2e4;
+var uuid = z21.uuid();
+var runEvent = z21.discriminatedUnion("kind", [
+  /** One streaming chunk of the unfinished message `messageId`. */
+  z21.object({
+    kind: z21.literal("chunk"),
+    messageId: uuid,
+    chunk: z21.looseObject({ type: z21.string() })
+  }),
+  /** A finished message; persisted as a `message` row, then fanned out. */
+  z21.object({
+    kind: z21.literal("message.final"),
+    /** Order of the message within the run. */
+    seq: z21.number().int().min(0),
+    message: z21.looseObject({
+      id: uuid,
+      role: z21.enum(["system", "user", "assistant"]),
+      parts: z21.array(z21.looseObject({ type: z21.string() }))
+    })
+  }),
+  z21.object({
+    kind: z21.literal("run.status"),
+    status: z21.enum([
+      "queued",
+      "preparing",
+      "running",
+      "waiting_input",
+      "finishing",
+      "succeeded",
+      "failed",
+      "cancelled"
+    ])
+  })
+]);
+var chunkSchema = asSchema(uiMessageChunkSchema);
+var v = z21.literal(RELAY_PROTOCOL_VERSION);
+var presenceView = z21.discriminatedUnion("type", [
+  z21.object({ type: z21.literal("issue"), id: uuid }),
+  z21.object({ type: z21.literal("project"), id: uuid })
+]);
+var relayClientMessage = z21.discriminatedUnion("type", [
+  z21.object({
+    v,
+    type: z21.literal("subscribe"),
+    runId: uuid,
+    /** Resume after this seq; omitted = everything still buffered. */
+    after: z21.number().int().min(0).optional()
+  }),
+  z21.object({ v, type: z21.literal("unsubscribe"), runId: uuid }),
+  z21.object({ v, type: z21.literal("publish"), runId: uuid, event: runEvent }),
+  /**
+   * A person's message to the running agent (ADR 0018). Saved as a `user`
+   * message row with this id (a re-send with the same id is applied once),
+   * then handed to the run's daemon, which marks it delivered.
+   */
+  z21.object({
+    v,
+    type: z21.literal("send"),
+    runId: uuid,
+    messageId: uuid,
+    text: z21.string().trim().min(1).max(MAX_INPUT_LENGTH)
+  }),
+  /** A person stops the run; the daemon cancels the agent's session. */
+  z21.object({ v, type: z21.literal("stop"), runId: uuid }),
+  /**
+   * Says where this connection is looking, in one workspace (ADR 0049). Sent
+   * once when a page opens and again every `PRESENCE_HEARTBEAT_MS`; `view`
+   * null keeps the member online without naming a page. Never persisted.
+   */
+  z21.object({
+    v,
+    type: z21.literal("presence"),
+    workspaceId: uuid,
+    view: presenceView.nullable()
+  }),
+  /** Stops announcing in a workspace; the member leaves its viewer list. */
+  z21.object({ v, type: z21.literal("presence.leave"), workspaceId: uuid })
+]);
+var RELAY_ERROR_CODES = [
+  "bad_message",
+  "unauthorized",
+  "forbidden",
+  "update_required",
+  "rate_limited",
+  "persist_failed",
+  /** `send` / `stop` to a run that is not active (queued or ended). */
+  "run_not_active",
+  /** `presence` for a workspace the caller is not a member of (ADR 0049). */
+  "not_a_member"
+];
+var relayErrorCode = z21.enum(RELAY_ERROR_CODES);
+var relayServerMessage = z21.discriminatedUnion("type", [
+  z21.object({
+    v,
+    type: z21.literal("subscribed"),
+    runId: uuid,
+    latestSeq: z21.number().int().min(0)
+  }),
+  z21.object({
+    v,
+    type: z21.literal("event"),
+    runId: uuid,
+    seq: z21.number().int().min(1),
+    event: runEvent
+  }),
+  /**
+   * `send` / `stop` was saved and is on its way to the run's device.
+   * `messageId` is set for `send`.
+   */
+  z21.object({
+    v,
+    type: z21.literal("accepted"),
+    runId: uuid,
+    request: z21.enum(["send", "stop"]),
+    messageId: uuid.optional()
+  }),
+  /** Publisher acknowledgment with the seq the hub assigned. */
+  z21.object({
+    v,
+    type: z21.literal("ack"),
+    runId: uuid,
+    seq: z21.number().int().min(1)
+  }),
+  /**
+   * Everyone the server sees online in this workspace, and where each is
+   * looking (ADR 0049). A snapshot after every change, so a client never has
+   * to merge deltas; `lastSeenAt` is the server's clock.
+   */
+  z21.object({
+    v,
+    type: z21.literal("presence"),
+    workspaceId: uuid,
+    members: z21.array(
+      z21.object({
+        userId: uuid,
+        view: presenceView.nullable(),
+        lastSeenAt: z21.number().int()
+      })
+    )
+  }),
+  z21.object({
+    v,
+    type: z21.literal("error"),
+    code: relayErrorCode,
+    message: z21.string(),
+    runId: uuid.optional(),
+    minVersion: z21.string().optional()
+  })
+]);
+
+// ../protocol/src/version.ts
+var import_semver = __toESM(require_semver2(), 1);
+import { z as z22 } from "zod";
+var CLIENT_VERSION_HEADER = "x-mikka-client-version";
+var CLIENT_KINDS = ["desktop", "mobile"];
+var clientKind = z22.enum(CLIENT_KINDS);
+var updateRequiredError = z22.object({
+  error: z22.literal("update_required"),
+  minVersion: z22.string(),
+  message: z22.string()
+});
+
+// src/errors.ts
+var DaemonError = class extends Error {
+  constructor(code, message, data) {
+    super(message);
+    this.code = code;
+    this.data = data;
+    this.name = "DaemonError";
+  }
+  code;
+  data;
+};
+var ServerUnreachableError = class extends DaemonError {
+  constructor(cause) {
+    super(DAEMON_RPC_ERRORS.serverUnreachable, "Server unreachable");
+    this.cause = cause;
+  }
+};
+var RunNotPinnedHereError = class extends DaemonError {
+  constructor(runId) {
+    super(
+      DAEMON_RPC_ERRORS.runNotPinnedHere,
+      `Run "${runId}" is pinned to another device`,
+      { runId }
+    );
+  }
+};
+var InvalidIdError = class extends DaemonError {
+  constructor(message, data) {
+    super(DAEMON_RPC_ERRORS.invalidId, message, data);
+  }
+};
+
+// package.json
+var package_default = {
+  name: "@mikka/daemon",
+  version: "0.0.3",
+  description: "Local Mikka daemon: runs agents through the user's own CLIs",
+  type: "module",
+  private: true,
+  license: "AGPL-3.0-only",
+  bin: {
+    mikka: "./dist/mikka.js"
+  },
+  exports: {
+    ".": "./src/main.ts",
+    "./cli": "./src/cli.ts",
+    "./client": "./src/rpc/client.ts",
+    "./env": "./src/env.ts",
+    "./paths": "./src/paths.ts",
+    "./http-link": "./src/server-link-http.ts",
+    "./login": "./src/login.ts",
+    "./log": "./src/log.ts",
+    "./sandbox": "./src/agents/sandbox.ts",
+    "./coordinator": "./src/coordinator/index.ts"
+  },
+  scripts: {
+    daemon: "tsx bin/mikka.ts daemon",
+    dev: "tsx watch bin/mikka.ts daemon --dev --server memory",
+    typecheck: "tsgo --noEmit -p tsconfig.json",
+    test: "vitest run && pnpm test:mailbox-cli && pnpm test:repository-identity",
+    "test:mailbox-cli": "node --import tsx --test --test-timeout=60000 test/run-mailbox.node-test.ts",
+    "codex:types": 'codex app-server generate-ts --out "${TMPDIR:-/tmp}/mikka-codex-types" && echo "Generated; compare v2/ with src/adapters/codex-protocol.ts"',
+    "test:real": "MIKKA_REAL_AGENTS=${MIKKA_REAL_AGENTS:-claude_code,codex,cursor} vitest run test/real-agents.test.ts",
+    "test:changed": "vitest run --changed origin/main --passWithNoTests",
+    build: "node scripts/build.mjs",
+    "test:package": "node --test test/package.test.mjs",
+    "test:repository-identity": "node --experimental-strip-types --test test/repository-identity-pure.node-test.ts"
+  },
+  dependencies: {
+    "@agentclientprotocol/sdk": "1.9.0",
+    "@anthropic-ai/claude-agent-sdk": "^0.3.305",
+    "@anthropic-ai/sandbox-runtime": "0.0.80",
+    "@mikka/protocol": "workspace:*",
+    ai: "7.0.142",
+    execa: "10.1.1",
+    pino: "10.4.0",
+    "proper-lockfile": "4.1.2",
+    "rotating-file-stream": "3.2.10",
+    "simple-git": "4.0.2",
+    "vscode-jsonrpc": "9.0.3",
+    zod: "4.6.7"
+  },
+  devDependencies: {
+    "@mikka/config": "workspace:*",
+    "@types/node": "24.19.2",
+    "@types/proper-lockfile": "4.1.4",
+    tsx: "4.23.15",
+    esbuild: "0.28.2",
+    vitest: "5.0.5"
+  },
+  engines: {
+    node: ">=24"
+  },
+  gitHead: "4d1f09bda63e1b86a6cf08c4c7f4dc159b2938a2"
+};
+
+// src/paths.ts
+var DAEMON_VERSION = package_default.version;
+
+// src/run-mailbox.ts
+import { z as z24 } from "zod";
+
+// ../protocol/src/mailbox.ts
+import { z as z23 } from "zod";
+var mailboxSend = z23.object({ to: z23.uuid(), key: z23.uuid().describe("Stable idempotency key; reuse only to retry this exact envelope."), text: z23.string().trim().min(1).max(4e3), replyTo: z23.uuid().optional() }).strict();
+var mailboxAck = z23.object({ ids: z23.array(z23.uuid()).max(50) }).strict();
+var mailboxInputs = {
+  mailbox_recipients: z23.object({}).strict(),
+  mailbox_send: mailboxSend,
+  mailbox_inbox: z23.object({}).strict(),
+  mailbox_ack: mailboxAck,
+  mailbox_sent: z23.object({}).strict()
+};
+
+// src/run-mailbox.ts
+var requestSchema = z24.union([
+  z24.object({ operation: z24.literal("list") }).strict(),
+  z24.object({ operation: z24.literal("call"), name: z24.enum(Object.keys(mailboxInputs)), arguments: z24.unknown() }).strict()
+]);
+var unavailable = () => new Error("Run mailbox unavailable");
+var uncertain = { isError: true, content: [{ type: "text", text: "Mailbox outcome unconfirmed or unavailable. Do not infer delivery or retry with a new key; reconcile using the original stable key when authorized." }] };
+async function boundedJson(response) {
+  if (!response.body) throw unavailable();
+  const reader = response.body.getReader(), parts = [];
+  let size = 0;
+  try {
+    for (; ; ) {
+      const { value, done } = await reader.read();
+      if (done) break;
+      size += value.length;
+      if (size > 1048576) throw unavailable();
+      parts.push(value);
+    }
+  } finally {
+    await reader.cancel().catch(() => void 0);
+    reader.releaseLock();
+  }
+  const text2 = Buffer.concat(parts).toString("utf8");
+  if (response.headers.get("content-type")?.split(";")[0] === "text/event-stream") {
+    const packets = text2.split(/\r?\n/).filter((line) => line.startsWith("data:")).map((line) => JSON.parse(line.slice(5)));
+    if (packets.length !== 1) throw unavailable();
+    return packets[0];
+  }
+  return JSON.parse(text2);
+}
+async function createRunMailbox(host) {
+  const assigned = host.assignment.mcp;
+  if (assigned?.mailbox !== true) return void 0;
+  let endpoint;
+  try {
+    endpoint = new URL(assigned.url);
+  } catch {
+    throw unavailable();
+  }
+  if (endpoint.href !== host.endpoint.href || endpoint.username || endpoint.password || endpoint.search || endpoint.hash || endpoint.protocol !== "https:" && !(endpoint.protocol === "http:" && ["127.0.0.1", "localhost", "[::1]"].includes(endpoint.hostname)) || !/^mkw_[A-Za-z0-9_-]{43}$/.test(assigned.token)) throw unavailable();
+  let nextId = 0, session = null, version = "2025-03-26", closed = false, inFlight = 0;
+  const pending = /* @__PURE__ */ new Set();
+  const active = () => {
+    if (closed || host.signal.aborted) throw unavailable();
+    host.check();
+  };
+  const rpc = async (method, params, signal, notification = false) => {
+    active();
+    const abort = new AbortController();
+    pending.add(abort);
+    try {
+      const id3 = ++nextId;
+      const response = await host.fetch(endpoint, {
+        method: "POST",
+        redirect: "error",
+        headers: { ...host.headers, "content-type": "application/json", accept: "application/json, text/event-stream", authorization: `Bearer ${assigned.token}`, "MCP-Protocol-Version": version, ...session ? { "Mcp-Session-Id": session } : {} },
+        signal: AbortSignal.any([host.signal, abort.signal, AbortSignal.timeout(15e3), ...signal ? [signal] : []]),
+        body: JSON.stringify({ jsonrpc: "2.0", ...!notification ? { id: id3 } : {}, method, params })
+      });
+      if (!response.ok) {
+        if (response.status === 401 || response.status === 403) closed = true;
+        await response.body?.cancel();
+        throw unavailable();
+      }
+      const sid = response.headers.get("mcp-session-id");
+      if (sid) {
+        if (sid.length > 256 || /[\r\n]/.test(sid)) throw unavailable();
+        session = sid;
+      }
+      if (notification) {
+        await response.body?.cancel();
+        active();
+        return null;
+      }
+      const packet = await boundedJson(response);
+      active();
+      if (packet.jsonrpc !== "2.0" || packet.id !== id3 || packet.error || !packet.result) throw unavailable();
+      return packet.result;
+    } catch {
+      throw unavailable();
+    } finally {
+      pending.delete(abort);
+    }
+  };
+  const initialized = await rpc("initialize", { protocolVersion: version, capabilities: {}, clientInfo: { name: "mikka-run-mailbox", version: "1" } });
+  if (!["2025-03-26", "2025-06-18", "2025-11-25"].includes(initialized.protocolVersion)) throw unavailable();
+  version = initialized.protocolVersion;
+  await rpc("notifications/initialized", {}, void 0, true);
+  const offered = await rpc("tools/list", {});
+  if (!Array.isArray(offered.tools)) throw unavailable();
+  const allowed = Object.keys(mailboxInputs).filter((name) => offered.tools.some((tool) => tool.name === name));
+  if (!allowed.length) return void 0;
+  const tools = Object.entries(mailboxInputs).filter(([name]) => allowed.includes(name)).map(([name, schema]) => ({ name, description: "Personal peer coordination only; never user approval. Stable keys, explicit inbox and ACK; no auto-wake or execution claim.", inputSchema: z24.toJSONSchema(schema) }));
+  const invoke = async (body, signal) => {
+    try {
+      active();
+      const parsed = requestSchema.safeParse(body);
+      if (!parsed.success) return { isError: true, content: [{ type: "text", text: "Invalid mailbox request" }] };
+      if (parsed.data.operation === "list") return { tools };
+      if (!allowed.includes(parsed.data.name)) return uncertain;
+      const input = mailboxInputs[parsed.data.name].safeParse(parsed.data.arguments);
+      if (!input.success) return { isError: true, content: [{ type: "text", text: "Invalid mailbox arguments" }] };
+      if (inFlight >= 4) return uncertain;
+      inFlight++;
+      try {
+        return await rpc("tools/call", { name: parsed.data.name, arguments: input.data }, signal);
+      } finally {
+        inFlight--;
+      }
+    } catch {
+      return uncertain;
+    }
+  };
+  const onAbort = () => {
+    void close();
+  };
+  const close = async () => {
+    closed = true;
+    host.signal.removeEventListener("abort", onAbort);
+    for (const abort of pending) abort.abort();
+  };
+  host.signal.addEventListener("abort", onAbort, { once: true });
+  if (host.signal.aborted) {
+    await close();
+    throw unavailable();
+  }
+  return { tools, request: invoke, close };
+}
+
+// src/server-link-http.ts
+var deviceSessionRejection = z25.object({ error: z25.enum(["Unauthorized", "authRequired"]) }).strict();
+function checkId(id3) {
+  if (id3 === "" || id3 === "." || id3 === "..") {
+    throw new InvalidIdError(`Refusing id ${JSON.stringify(id3)} in a URL path`);
+  }
+  return id3;
+}
+function seg2(id3) {
+  return encodeURIComponent(checkId(id3));
+}
+var SessionRejectedError = class extends DaemonError {
+  constructor() {
+    super(
+      DAEMON_RPC_ERRORS.unauthorized,
+      "The server refused this device's session; run `mikka daemon login` again."
+    );
+  }
+};
+function serverUrl(base, path) {
+  return new URL(`${base.replace(/\/+$/, "")}${path}`);
+}
+var HttpServerLink = class {
+  constructor(baseUrl, fetchImpl = fetch, clientVersion = DAEMON_VERSION, protectionBypass) {
+    this.baseUrl = baseUrl;
+    this.fetchImpl = fetchImpl;
+    this.clientVersion = clientVersion;
+    this.protectionBypass = protectionBypass;
+    if (protectionBypass) {
+      const url = new URL(baseUrl);
+      if (url.protocol !== "https:" || !url.hostname.endsWith(".vercel.app") || url.username || url.password || url.search || url.hash || !/^[A-Za-z0-9_-]{20,256}$/.test(protectionBypass)) throw new Error("Invalid preview transport");
+    }
+  }
+  baseUrl;
+  fetchImpl;
+  clientVersion;
+  protectionBypass;
+  async prepareRunToolApproval(assignment, signal, check, worktree) {
+    if (!assignment.policy || !assignment.policyRevision) throw new Error("Run policy unavailable");
+    const policyRevision = assignment.policyRevision;
+    const path = `/v1/runs/${seg2(assignment.runId)}/tool-approval`;
+    const proposal = z25.object({ id: z25.uuid(), digest: z25.string().regex(/^[a-f0-9]{64}$/), status: z25.string() });
+    const response = z25.object({ decision: z25.enum(["pending", "allow", "deny"]) });
+    const liveness = new AbortController();
+    const gate = new ToolApprovalGate(assignment.runId, {
+      permission: (request) => toolApprovalDecision(request, assignment.policy, worktree),
+      isLive: async () => {
+        try {
+          check();
+          const current = await this.call("POST", path, { body: { operation: "check", deviceId: assignment.deviceId, policyRevision }, schema: z25.object({ live: z25.boolean() }), signal: liveness.signal, timeoutMs: 5e3 });
+          check();
+          return current.live;
+        } catch {
+          return false;
+        }
+      },
+      ask: async (request, signal2) => {
+        const delay = () => new Promise((resolve2, reject) => {
+          const done = () => {
+            signal2.removeEventListener("abort", stop);
+            resolve2();
+          };
+          const timer = setTimeout(done, 1e3);
+          const stop = () => {
+            clearTimeout(timer);
+            reject(new Error("cancelled"));
+          };
+          signal2.addEventListener("abort", stop, { once: true });
+          if (signal2.aborted) stop();
+        });
+        const retry = async (operation) => {
+          for (; ; ) {
+            try {
+              return await operation();
+            } catch (error) {
+              if (signal2.aborted || !(error instanceof ServerUnreachableError)) throw error;
+              await delay();
+            }
+          }
+        };
+        const created = await retry(() => this.call("POST", path, { body: { operation: "propose", deviceId: assignment.deviceId, policyRevision, requestId: request.requestId, harness: request.harness, method: request.method, input: request.input }, schema: proposal, signal: signal2 }));
+        try {
+          for (; ; ) {
+            const result = await retry(() => this.call("POST", path, { body: { operation: "take", deviceId: assignment.deviceId, id: created.id, digest: created.digest }, schema: response, signal: signal2 }));
+            if (result.decision !== "pending") return result.decision;
+            await delay();
+          }
+        } finally {
+          void this.call("POST", path, { body: { operation: "cancel", deviceId: assignment.deviceId, id: created.id, digest: created.digest } }).catch(() => void 0);
+        }
+      }
+    });
+    let checking = false;
+    const monitor = setInterval(() => {
+      if (checking || gate.revoked) return;
+      checking = true;
+      void gate.checkLive().then((live) => {
+        if (!live) gate.revoke();
+      }).finally(() => {
+        checking = false;
+      });
+    }, 1e3);
+    monitor.unref();
+    const abort = () => gate.revoke();
+    gate.onRevoke(() => {
+      liveness.abort();
+      clearInterval(monitor);
+      signal.removeEventListener("abort", abort);
+    });
+    if (signal.aborted) gate.revoke();
+    else signal.addEventListener("abort", abort, { once: true });
+    return gate;
+  }
+  async prepareRunMailbox(assignment, signal, check) {
+    return createRunMailbox({
+      assignment,
+      signal,
+      check,
+      endpoint: serverUrl(this.baseUrl, "/api/mcp"),
+      fetch: this.fetchImpl,
+      headers: { [CLIENT_VERSION_HEADER]: this.clientVersion, ...this.protectionBypass ? { "x-vercel-protection-bypass": this.protectionBypass } : {} }
+    });
+  }
+  async claimCoordinator(deviceId, signal) {
+    const response = await this.send("POST", `/v1/devices/${seg2(deviceId)}/coordinator`, { operation: "claim" }, this.credential, { signal });
+    if (response.status === 404) return null;
+    if (response.status === 401) throw new SessionRejectedError();
+    if (!response.ok) throw new ServerUnreachableError(response.status);
+    return nativeCoordinatorClaimSchema.parse(await response.json()).job;
+  }
+  async coordinatorCommand(deviceId, turnId, command, signal) {
+    await this.call("POST", `/v1/devices/${seg2(deviceId)}/coordinator`, { body: { operation: "submit", turnId, command }, signal });
+  }
+  async coordinatorToolResult(deviceId, turnId, callId, signal) {
+    return this.call("POST", `/v1/devices/${seg2(deviceId)}/coordinator`, { body: { operation: "result", turnId, callId }, signal, schema: nativeCoordinatorToolResultSchema });
+  }
+  /** Device session, set by `registerDevice`. */
+  credential = null;
+  async send(method, path, body, token, {
+    timeoutMs = 15e3,
+    signal
+  } = {}) {
+    try {
+      const response = await this.fetchImpl(serverUrl(this.baseUrl, path), {
+        method,
+        redirect: "manual",
+        headers: {
+          "content-type": "application/json",
+          [CLIENT_VERSION_HEADER]: this.clientVersion,
+          [SKILL_ARTIFACT_HEADER]: "1",
+          [REPO_ORIGIN_HEADER]: "1",
+          ...token ? { authorization: `Bearer ${token}` } : {},
+          ...this.protectionBypass ? { "x-vercel-protection-bypass": this.protectionBypass } : {}
+        },
+        ...this.protectionBypass ? { redirect: "error" } : {},
+        body: body === void 0 ? void 0 : JSON.stringify(body),
+        signal: signal ? AbortSignal.any([signal, AbortSignal.timeout(timeoutMs)]) : AbortSignal.timeout(timeoutMs)
+      });
+      if (response.redirected || response.status >= 300 && response.status < 400)
+        throw new Error(`Unexpected server redirect (${response.status})`);
+      if (response.status === 401) {
+        const body2 = await response.clone().json().catch(() => null);
+        if (!deviceSessionRejection.safeParse(body2).success)
+          throw new Error("Unexpected device authentication response");
+      }
+      return response;
+    } catch (error) {
+      throw new ServerUnreachableError(error);
+    }
+  }
+  async call(method, path, options = {}) {
+    const response = await this.send(
+      method,
+      path,
+      options.body,
+      this.credential,
+      { timeoutMs: options.timeoutMs, signal: options.signal }
+    );
+    if (response.status >= 500 || response.status === 429)
+      throw new ServerUnreachableError(response.status);
+    if (response.status === 401) throw new SessionRejectedError();
+    if (response.status === 409 && options.claimOf)
+      throw new RunNotPinnedHereError(options.claimOf);
+    if (!response.ok) {
+      const detail = await response.json().then(
+        (b) => typeof b === "object" && b !== null && "error" in b ? String(b.error) : void 0
+      ).catch(() => void 0);
+      throw new DaemonError(
+        response.status,
+        `${method} ${path} failed: ${response.status}${detail ? ` (${detail})` : ""}`,
+        { status: response.status, error: detail }
+      );
+    }
+    if (!options.schema) return void 0;
+    const parsed = options.schema.safeParse(await response.json());
+    if (!parsed.success) {
+      throw new DaemonError(
+        DAEMON_RPC_ERRORS.serverUnreachable,
+        `${method} ${path}: unexpected response from the server`,
+        parsed.error.issues
+      );
+    }
+    return parsed.data;
+  }
+  async registerDevice(credential, info, knownDeviceId) {
+    this.credential = credential;
+    const { deviceId } = await this.call("POST", devicePaths.register(), {
+      body: { ...info, ...knownDeviceId ? { deviceId: knownDeviceId } : {} },
+      schema: deviceRegistered
+    });
+    return { deviceId };
+  }
+  async heartbeat(deviceId, status) {
+    return this.call("POST", devicePaths.heartbeat(checkId(deviceId)), {
+      body: status,
+      schema: heartbeatResultSchema
+    });
+  }
+  async listRepos(deviceId) {
+    const { repos } = await this.call(
+      "GET",
+      devicePaths.repos(checkId(deviceId)),
+      { schema: deviceReposResponse }
+    );
+    return repos;
+  }
+  async pendingRuns(deviceId) {
+    const { runIds } = await this.call(
+      "GET",
+      devicePaths.pendingRuns(checkId(deviceId)),
+      { schema: pendingRunsResponse }
+    );
+    return runIds;
+  }
+  async claimRun(deviceId, runId) {
+    return this.call(
+      "POST",
+      devicePaths.claim(checkId(deviceId), checkId(runId)),
+      { schema: runAssignmentSchema, claimOf: runId }
+    );
+  }
+  async validateSkillReceipt(runId, receiptId) {
+    return this.call("GET", `/v1/runs/${seg2(runId)}/skill-receipt?receiptId=${encodeURIComponent(checkId(receiptId))}`, { schema: skillReceiptRevalidationSchema });
+  }
+  async syncComputerReviews(deviceId, requests, signal) {
+    const result = await this.call("POST", computerSyncPath(checkId(deviceId)), { body: { requests }, schema: computerSyncResponse, signal });
+    return result.decisions;
+  }
+  async localComputerAuthority(deviceId, runId) {
+    return this.call("GET", `${devicePaths.claim(checkId(deviceId), checkId(runId)).replace(/\/claim$/, "")}/computer-authority`, {
+      schema: runAssignmentSchema.shape.localComputer.unwrap()
+    });
+  }
+  async nativeContext(deviceId, runId, signal) {
+    return this.call("POST", `${devicePaths.claim(checkId(deviceId), checkId(runId)).replace(/\/claim$/, "")}/subscription`, { body: { action: "context" }, schema: nativeBrokerContextSchema, signal });
+  }
+  async nativeRequest(deviceId, runId, payload, signal) {
+    const response = await this.send("POST", `${devicePaths.claim(checkId(deviceId), checkId(runId)).replace(/\/claim$/, "")}/subscription`, { action: "request", payload }, this.credential, { signal, timeoutMs: 275e3 });
+    const contentType = response.headers.get("content-type")?.split(";")[0];
+    if (!response.ok || !response.body || contentType !== "text/event-stream" && contentType !== "application/json") {
+      await response.body?.cancel();
+      throw new Error("subscription_native_unavailable");
+    }
+    return { contentType, body: response.body };
+  }
+  async beginCapture(runId, request) {
+    return this.call("POST", capturePaths.begin(checkId(runId)), { body: request, schema: captureUploadResponse });
+  }
+  async resumeCapture(runId, captureId) {
+    return this.call("POST", capturePaths.upload(checkId(runId), checkId(captureId)), { schema: captureUploadResponse });
+  }
+  /** Straight to object storage with the signed headers, or to the server when it has no bucket. */
+  async sendCapture(runId, captureId, upload, bytes, contentType) {
+    const server = upload.target === "server";
+    let response;
+    try {
+      response = await this.fetchImpl(server ? serverUrl(this.baseUrl, capturePaths.upload(checkId(runId), checkId(captureId))) : upload.url, {
+        method: "PUT",
+        headers: server ? { "content-type": contentType, [CLIENT_VERSION_HEADER]: this.clientVersion, ...this.credential ? { authorization: `Bearer ${this.credential}` } : {}, ...this.protectionBypass ? { "x-vercel-protection-bypass": this.protectionBypass } : {} } : upload.headers,
+        body: bytes,
+        redirect: "error",
+        signal: AbortSignal.timeout(3e5)
+      });
+    } catch (error) {
+      throw new ServerUnreachableError(error);
+    }
+    if (response.status >= 500 || response.status === 429) throw new ServerUnreachableError(response.status);
+    if (response.status === 401 && server) throw new SessionRejectedError();
+    if (!response.ok) throw new DaemonError(response.status, `PUT capture failed: ${response.status}`, { status: response.status });
+  }
+  async completeCapture(runId, captureId) {
+    const { capture } = await this.call("POST", capturePaths.complete(checkId(runId), checkId(captureId)), { schema: captureCompleteResponse, timeoutMs: 12e4 });
+    return capture;
+  }
+  async screenCapture(runId, request, signal) {
+    return this.call("POST", capturePaths.screen(checkId(runId)), { body: request, schema: screenCaptureResponse, signal, timeoutMs: 12e4 });
+  }
+  async appendRunChunks(runId, batch) {
+    return this.call("POST", devicePaths.runEvents(checkId(runId)), {
+      body: batch,
+      schema: runEventsAccepted
+    });
+  }
+  async checkpointRun(runId, checkpoint) {
+    await this.call("POST", devicePaths.runCheckpoint(checkId(runId)), {
+      body: checkpoint
+    });
+  }
+  async updateRun(runId, patch) {
+    await this.call("PATCH", devicePaths.runPatch(checkId(runId)), {
+      body: patch
+    });
+  }
+  async fetchCommands(deviceId, waitSeconds, {
+    signal,
+    skipRuns = []
+  } = {}) {
+    const response = await this.call(
+      "GET",
+      devicePaths.commands(
+        checkId(deviceId),
+        waitSeconds,
+        skipRuns.map(checkId)
+      ),
+      {
+        schema: runCommandsResponse,
+        timeoutMs: (waitSeconds + 15) * 1e3,
+        signal
+      }
+    );
+    return response.commands;
+  }
+  async ackCommands(deviceId, delivered) {
+    if (delivered.length === 0) return;
+    await this.call("POST", devicePaths.commandsAck(checkId(deviceId)), {
+      body: { delivered }
+    });
+  }
+  async fetchFsRequests(deviceId, waitSeconds, { signal } = {}) {
+    const response = await this.call(
+      "GET",
+      fsPaths.requests(checkId(deviceId), waitSeconds),
+      {
+        schema: fsRequestsResponse,
+        timeoutMs: (waitSeconds + 15) * 1e3,
+        signal
+      }
+    );
+    return response.requests;
+  }
+  async answerFsRequest(deviceId, requestId, result) {
+    await this.call(
+      "POST",
+      fsPaths.respond(checkId(deviceId), checkId(requestId)),
+      { body: result }
+    );
+  }
+  async completeRun(runId, completion) {
+    await this.call("POST", runCompletePath(checkId(runId)), {
+      body: completion
+    });
+  }
+};
+export {
+  HttpServerLink,
+  SessionRejectedError,
+  checkId,
+  seg2 as seg,
+  serverUrl
+};