@aspectlylabs/mikka 0.0.0-stage → 0.0.3

package/login.js

@@ -0,0 +1,3889 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJS = (cb, mod) => function __require() {
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key2 of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key2) && key2 !== except)
+        __defProp(to, key2, { get: () => from[key2], enumerable: !(desc = __getOwnPropDesc(from, key2)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/constants.js
+var require_constants = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/constants.js"(exports, module) {
+    "use strict";
+    var SEMVER_SPEC_VERSION = "2.0.0";
+    var MAX_LENGTH = 256;
+    var MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER || /* istanbul ignore next */
+    9007199254740991;
+    var MAX_SAFE_COMPONENT_LENGTH = 16;
+    var MAX_SAFE_BUILD_LENGTH = MAX_LENGTH - 6;
+    var RELEASE_TYPES = [
+      "major",
+      "premajor",
+      "minor",
+      "preminor",
+      "patch",
+      "prepatch",
+      "prerelease"
+    ];
+    module.exports = {
+      MAX_LENGTH,
+      MAX_SAFE_COMPONENT_LENGTH,
+      MAX_SAFE_BUILD_LENGTH,
+      MAX_SAFE_INTEGER,
+      RELEASE_TYPES,
+      SEMVER_SPEC_VERSION,
+      FLAG_INCLUDE_PRERELEASE: 1,
+      FLAG_LOOSE: 2
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/debug.js
+var require_debug = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/debug.js"(exports, module) {
+    "use strict";
+    var debug = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () => {
+    };
+    module.exports = debug;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/re.js
+var require_re = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/re.js"(exports, module) {
+    "use strict";
+    var {
+      MAX_SAFE_COMPONENT_LENGTH,
+      MAX_SAFE_BUILD_LENGTH,
+      MAX_LENGTH
+    } = require_constants();
+    var debug = require_debug();
+    exports = module.exports = {};
+    var re = exports.re = [];
+    var safeRe = exports.safeRe = [];
+    var src = exports.src = [];
+    var safeSrc = exports.safeSrc = [];
+    var t = exports.t = {};
+    var R = 0;
+    var LETTERDASHNUMBER = "[a-zA-Z0-9-]";
+    var safeRegexReplacements = [
+      ["\\s", 1],
+      ["\\d", MAX_LENGTH],
+      [LETTERDASHNUMBER, MAX_SAFE_BUILD_LENGTH]
+    ];
+    var makeSafeRegex = (value) => {
+      for (const [token, max] of safeRegexReplacements) {
+        value = value.split(`${token}*`).join(`${token}{0,${max}}`).split(`${token}+`).join(`${token}{1,${max}}`);
+      }
+      return value;
+    };
+    var createToken = (name, value, isGlobal) => {
+      const safe = makeSafeRegex(value);
+      const index = R++;
+      debug(name, index, value);
+      t[name] = index;
+      src[index] = value;
+      safeSrc[index] = safe;
+      re[index] = new RegExp(value, isGlobal ? "g" : void 0);
+      safeRe[index] = new RegExp(safe, isGlobal ? "g" : void 0);
+    };
+    createToken("NUMERICIDENTIFIER", "0|[1-9]\\d*");
+    createToken("NUMERICIDENTIFIERLOOSE", "\\d+");
+    createToken("NONNUMERICIDENTIFIER", `\\d*[a-zA-Z-]${LETTERDASHNUMBER}*`);
+    createToken("MAINVERSION", `(${src[t.NUMERICIDENTIFIER]})\\.(${src[t.NUMERICIDENTIFIER]})\\.(${src[t.NUMERICIDENTIFIER]})`);
+    createToken("MAINVERSIONLOOSE", `(${src[t.NUMERICIDENTIFIERLOOSE]})\\.(${src[t.NUMERICIDENTIFIERLOOSE]})\\.(${src[t.NUMERICIDENTIFIERLOOSE]})`);
+    createToken("PRERELEASEIDENTIFIER", `(?:${src[t.NONNUMERICIDENTIFIER]}|${src[t.NUMERICIDENTIFIER]})`);
+    createToken("PRERELEASEIDENTIFIERLOOSE", `(?:${src[t.NONNUMERICIDENTIFIER]}|${src[t.NUMERICIDENTIFIERLOOSE]})`);
+    createToken("PRERELEASE", `(?:-(${src[t.PRERELEASEIDENTIFIER]}(?:\\.${src[t.PRERELEASEIDENTIFIER]})*))`);
+    createToken("PRERELEASELOOSE", `(?:-?(${src[t.PRERELEASEIDENTIFIERLOOSE]}(?:\\.${src[t.PRERELEASEIDENTIFIERLOOSE]})*))`);
+    createToken("BUILDIDENTIFIER", `${LETTERDASHNUMBER}+`);
+    createToken("BUILD", `(?:\\+(${src[t.BUILDIDENTIFIER]}(?:\\.${src[t.BUILDIDENTIFIER]})*))`);
+    createToken("FULLPLAIN", `v?${src[t.MAINVERSION]}${src[t.PRERELEASE]}?${src[t.BUILD]}?`);
+    createToken("FULL", `^${src[t.FULLPLAIN]}$`);
+    createToken("LOOSEPLAIN", `[v=\\s]*${src[t.MAINVERSIONLOOSE]}${src[t.PRERELEASELOOSE]}?${src[t.BUILD]}?`);
+    createToken("LOOSE", `^${src[t.LOOSEPLAIN]}$`);
+    createToken("GTLT", "((?:<|>)?=?)");
+    createToken("XRANGEIDENTIFIERLOOSE", `${src[t.NUMERICIDENTIFIERLOOSE]}|x|X|\\*`);
+    createToken("XRANGEIDENTIFIER", `${src[t.NUMERICIDENTIFIER]}|x|X|\\*`);
+    createToken("XRANGEPLAIN", `[v=\\s]*(${src[t.XRANGEIDENTIFIER]})(?:\\.(${src[t.XRANGEIDENTIFIER]})(?:\\.(${src[t.XRANGEIDENTIFIER]})(?:${src[t.PRERELEASE]})?${src[t.BUILD]}?)?)?`);
+    createToken("XRANGEPLAINLOOSE", `[v=\\s]*(${src[t.XRANGEIDENTIFIERLOOSE]})(?:\\.(${src[t.XRANGEIDENTIFIERLOOSE]})(?:\\.(${src[t.XRANGEIDENTIFIERLOOSE]})(?:${src[t.PRERELEASELOOSE]})?${src[t.BUILD]}?)?)?`);
+    createToken("XRANGE", `^${src[t.GTLT]}\\s*${src[t.XRANGEPLAIN]}$`);
+    createToken("XRANGELOOSE", `^${src[t.GTLT]}\\s*${src[t.XRANGEPLAINLOOSE]}$`);
+    createToken("COERCEPLAIN", `${"(^|[^\\d])(\\d{1,"}${MAX_SAFE_COMPONENT_LENGTH}})(?:\\.(\\d{1,${MAX_SAFE_COMPONENT_LENGTH}}))?(?:\\.(\\d{1,${MAX_SAFE_COMPONENT_LENGTH}}))?`);
+    createToken("COERCE", `${src[t.COERCEPLAIN]}(?:$|[^\\d])`);
+    createToken("COERCEFULL", src[t.COERCEPLAIN] + `(?:${src[t.PRERELEASE]})?(?:${src[t.BUILD]})?(?:$|[^\\d])`);
+    createToken("COERCERTL", src[t.COERCE], true);
+    createToken("COERCERTLFULL", src[t.COERCEFULL], true);
+    createToken("LONETILDE", "(?:~>?)");
+    createToken("TILDETRIM", `(\\s*)${src[t.LONETILDE]}\\s+`, true);
+    exports.tildeTrimReplace = "$1~";
+    createToken("TILDE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAIN]}$`);
+    createToken("TILDELOOSE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAINLOOSE]}$`);
+    createToken("LONECARET", "(?:\\^)");
+    createToken("CARETTRIM", `(\\s*)${src[t.LONECARET]}\\s+`, true);
+    exports.caretTrimReplace = "$1^";
+    createToken("CARET", `^${src[t.LONECARET]}${src[t.XRANGEPLAIN]}$`);
+    createToken("CARETLOOSE", `^${src[t.LONECARET]}${src[t.XRANGEPLAINLOOSE]}$`);
+    createToken("COMPARATORLOOSE", `^${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]})$|^$`);
+    createToken("COMPARATOR", `^${src[t.GTLT]}\\s*(${src[t.FULLPLAIN]})$|^$`);
+    createToken("COMPARATORTRIM", `(\\s*)${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]}|${src[t.XRANGEPLAIN]})`, true);
+    exports.comparatorTrimReplace = "$1$2$3";
+    createToken("HYPHENRANGE", `^\\s*(${src[t.XRANGEPLAIN]})\\s+-\\s+(${src[t.XRANGEPLAIN]})\\s*$`);
+    createToken("HYPHENRANGELOOSE", `^\\s*(${src[t.XRANGEPLAINLOOSE]})\\s+-\\s+(${src[t.XRANGEPLAINLOOSE]})\\s*$`);
+    createToken("STAR", "(<|>)?=?\\s*\\*");
+    createToken("GTE0", "^\\s*>=\\s*0\\.0\\.0\\s*$");
+    createToken("GTE0PRE", "^\\s*>=\\s*0\\.0\\.0-0\\s*$");
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/parse-options.js
+var require_parse_options = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/parse-options.js"(exports, module) {
+    "use strict";
+    var looseOption = Object.freeze({ loose: true });
+    var emptyOpts = Object.freeze({});
+    var parseOptions = (options) => {
+      if (!options) {
+        return emptyOpts;
+      }
+      if (typeof options !== "object") {
+        return looseOption;
+      }
+      return options;
+    };
+    module.exports = parseOptions;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/identifiers.js
+var require_identifiers = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/identifiers.js"(exports, module) {
+    "use strict";
+    var numeric = /^[0-9]+$/;
+    var compareIdentifiers = (a, b) => {
+      if (typeof a === "number" && typeof b === "number") {
+        return a === b ? 0 : a < b ? -1 : 1;
+      }
+      const anum = numeric.test(a);
+      const bnum = numeric.test(b);
+      if (anum && bnum) {
+        a = +a;
+        b = +b;
+      }
+      return a === b ? 0 : anum && !bnum ? -1 : bnum && !anum ? 1 : a < b ? -1 : 1;
+    };
+    var rcompareIdentifiers = (a, b) => compareIdentifiers(b, a);
+    module.exports = {
+      compareIdentifiers,
+      rcompareIdentifiers
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/semver.js
+var require_semver = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/semver.js"(exports, module) {
+    "use strict";
+    var debug = require_debug();
+    var { MAX_LENGTH, MAX_SAFE_INTEGER } = require_constants();
+    var { safeRe: re, t } = require_re();
+    var parseOptions = require_parse_options();
+    var { compareIdentifiers } = require_identifiers();
+    var isPrereleaseIdentifier = (prerelease, identifier) => {
+      const identifiers = identifier.split(".");
+      if (identifiers.length > prerelease.length) {
+        return false;
+      }
+      for (let i = 0; i < identifiers.length; i++) {
+        if (compareIdentifiers(prerelease[i], identifiers[i]) !== 0) {
+          return false;
+        }
+      }
+      return true;
+    };
+    var SemVer = class _SemVer {
+      constructor(version, options) {
+        options = parseOptions(options);
+        if (version instanceof _SemVer) {
+          if (version.loose === !!options.loose && version.includePrerelease === !!options.includePrerelease) {
+            return version;
+          } else {
+            version = version.version;
+          }
+        } else if (typeof version !== "string") {
+          throw new TypeError(`Invalid version. Must be a string. Got type "${typeof version}".`);
+        }
+        if (version.length > MAX_LENGTH) {
+          throw new TypeError(
+            `version is longer than ${MAX_LENGTH} characters`
+          );
+        }
+        debug("SemVer", version, options);
+        this.options = options;
+        this.loose = !!options.loose;
+        this.includePrerelease = !!options.includePrerelease;
+        const m = version.trim().match(options.loose ? re[t.LOOSE] : re[t.FULL]);
+        if (!m) {
+          throw new TypeError(`Invalid Version: ${version}`);
+        }
+        this.raw = version;
+        this.major = +m[1];
+        this.minor = +m[2];
+        this.patch = +m[3];
+        if (this.major > MAX_SAFE_INTEGER || this.major < 0) {
+          throw new TypeError("Invalid major version");
+        }
+        if (this.minor > MAX_SAFE_INTEGER || this.minor < 0) {
+          throw new TypeError("Invalid minor version");
+        }
+        if (this.patch > MAX_SAFE_INTEGER || this.patch < 0) {
+          throw new TypeError("Invalid patch version");
+        }
+        if (!m[4]) {
+          this.prerelease = [];
+        } else {
+          this.prerelease = m[4].split(".").map((id3) => {
+            if (/^[0-9]+$/.test(id3)) {
+              const num = +id3;
+              if (num >= 0 && num < MAX_SAFE_INTEGER) {
+                return num;
+              }
+            }
+            return id3;
+          });
+        }
+        this.build = m[5] ? m[5].split(".") : [];
+        this.format();
+      }
+      format() {
+        this.version = `${this.major}.${this.minor}.${this.patch}`;
+        if (this.prerelease.length) {
+          this.version += `-${this.prerelease.join(".")}`;
+        }
+        return this.version;
+      }
+      toString() {
+        return this.version;
+      }
+      compare(other) {
+        debug("SemVer.compare", this.version, this.options, other);
+        if (!(other instanceof _SemVer)) {
+          if (typeof other === "string" && other === this.version) {
+            return 0;
+          }
+          other = new _SemVer(other, this.options);
+        }
+        if (other.version === this.version) {
+          return 0;
+        }
+        return this.compareMain(other) || this.comparePre(other);
+      }
+      compareMain(other) {
+        if (!(other instanceof _SemVer)) {
+          other = new _SemVer(other, this.options);
+        }
+        if (this.major < other.major) {
+          return -1;
+        }
+        if (this.major > other.major) {
+          return 1;
+        }
+        if (this.minor < other.minor) {
+          return -1;
+        }
+        if (this.minor > other.minor) {
+          return 1;
+        }
+        if (this.patch < other.patch) {
+          return -1;
+        }
+        if (this.patch > other.patch) {
+          return 1;
+        }
+        return 0;
+      }
+      comparePre(other) {
+        if (!(other instanceof _SemVer)) {
+          other = new _SemVer(other, this.options);
+        }
+        if (this.prerelease.length && !other.prerelease.length) {
+          return -1;
+        } else if (!this.prerelease.length && other.prerelease.length) {
+          return 1;
+        } else if (!this.prerelease.length && !other.prerelease.length) {
+          return 0;
+        }
+        let i = 0;
+        do {
+          const a = this.prerelease[i];
+          const b = other.prerelease[i];
+          debug("prerelease compare", i, a, b);
+          if (a === void 0 && b === void 0) {
+            return 0;
+          } else if (b === void 0) {
+            return 1;
+          } else if (a === void 0) {
+            return -1;
+          } else if (a === b) {
+            continue;
+          } else {
+            return compareIdentifiers(a, b);
+          }
+        } while (++i);
+      }
+      compareBuild(other) {
+        if (!(other instanceof _SemVer)) {
+          other = new _SemVer(other, this.options);
+        }
+        let i = 0;
+        do {
+          const a = this.build[i];
+          const b = other.build[i];
+          debug("build compare", i, a, b);
+          if (a === void 0 && b === void 0) {
+            return 0;
+          } else if (b === void 0) {
+            return 1;
+          } else if (a === void 0) {
+            return -1;
+          } else if (a === b) {
+            continue;
+          } else {
+            return compareIdentifiers(a, b);
+          }
+        } while (++i);
+      }
+      // preminor will bump the version up to the next minor release, and immediately
+      // down to pre-release. premajor and prepatch work the same way.
+      inc(release, identifier, identifierBase) {
+        if (release.startsWith("pre")) {
+          if (!identifier && identifierBase === false) {
+            throw new Error("invalid increment argument: identifier is empty");
+          }
+          if (identifier) {
+            const match = `-${identifier}`.match(this.options.loose ? re[t.PRERELEASELOOSE] : re[t.PRERELEASE]);
+            if (!match || match[1] !== identifier) {
+              throw new Error(`invalid identifier: ${identifier}`);
+            }
+          }
+        }
+        switch (release) {
+          case "premajor":
+            this.prerelease.length = 0;
+            this.patch = 0;
+            this.minor = 0;
+            this.major++;
+            this.inc("pre", identifier, identifierBase);
+            break;
+          case "preminor":
+            this.prerelease.length = 0;
+            this.patch = 0;
+            this.minor++;
+            this.inc("pre", identifier, identifierBase);
+            break;
+          case "prepatch":
+            this.prerelease.length = 0;
+            this.inc("patch", identifier, identifierBase);
+            this.inc("pre", identifier, identifierBase);
+            break;
+          // If the input is a non-prerelease version, this acts the same as
+          // prepatch.
+          case "prerelease":
+            if (this.prerelease.length === 0) {
+              this.inc("patch", identifier, identifierBase);
+            }
+            this.inc("pre", identifier, identifierBase);
+            break;
+          case "release":
+            if (this.prerelease.length === 0) {
+              throw new Error(`version ${this.raw} is not a prerelease`);
+            }
+            this.prerelease.length = 0;
+            break;
+          case "major":
+            if (this.minor !== 0 || this.patch !== 0 || this.prerelease.length === 0) {
+              this.major++;
+            }
+            this.minor = 0;
+            this.patch = 0;
+            this.prerelease = [];
+            break;
+          case "minor":
+            if (this.patch !== 0 || this.prerelease.length === 0) {
+              this.minor++;
+            }
+            this.patch = 0;
+            this.prerelease = [];
+            break;
+          case "patch":
+            if (this.prerelease.length === 0) {
+              this.patch++;
+            }
+            this.prerelease = [];
+            break;
+          // This probably shouldn't be used publicly.
+          // 1.0.0 'pre' would become 1.0.0-0 which is the wrong direction.
+          case "pre": {
+            const base = Number(identifierBase) ? 1 : 0;
+            if (this.prerelease.length === 0) {
+              this.prerelease = [base];
+            } else {
+              let i = this.prerelease.length;
+              while (--i >= 0) {
+                if (typeof this.prerelease[i] === "number") {
+                  this.prerelease[i]++;
+                  i = -2;
+                }
+              }
+              if (i === -1) {
+                if (identifier === this.prerelease.join(".") && identifierBase === false) {
+                  throw new Error("invalid increment argument: identifier already exists");
+                }
+                this.prerelease.push(base);
+              }
+            }
+            if (identifier) {
+              let prerelease = [identifier, base];
+              if (identifierBase === false) {
+                prerelease = [identifier];
+              }
+              if (isPrereleaseIdentifier(this.prerelease, identifier)) {
+                const prereleaseBase = this.prerelease[identifier.split(".").length];
+                if (isNaN(prereleaseBase)) {
+                  this.prerelease = prerelease;
+                }
+              } else {
+                this.prerelease = prerelease;
+              }
+            }
+            break;
+          }
+          default:
+            throw new Error(`invalid increment argument: ${release}`);
+        }
+        this.raw = this.format();
+        if (this.build.length) {
+          this.raw += `+${this.build.join(".")}`;
+        }
+        return this;
+      }
+    };
+    module.exports = SemVer;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/parse.js
+var require_parse = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/parse.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var parse = (version, options, throwErrors = false) => {
+      if (version instanceof SemVer) {
+        return version;
+      }
+      try {
+        return new SemVer(version, options);
+      } catch (er) {
+        if (!throwErrors) {
+          return null;
+        }
+        throw er;
+      }
+    };
+    module.exports = parse;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/valid.js
+var require_valid = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/valid.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var valid2 = (version, options) => {
+      const v2 = parse(version, options);
+      return v2 ? v2.version : null;
+    };
+    module.exports = valid2;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/clean.js
+var require_clean = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/clean.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var clean = (version, options) => {
+      const s = parse(version.trim().replace(/^[=v]+/, ""), options);
+      return s ? s.version : null;
+    };
+    module.exports = clean;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/inc.js
+var require_inc = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/inc.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var inc = (version, release, options, identifier, identifierBase) => {
+      if (typeof options === "string") {
+        identifierBase = identifier;
+        identifier = options;
+        options = void 0;
+      }
+      try {
+        return new SemVer(
+          version instanceof SemVer ? version.version : version,
+          options
+        ).inc(release, identifier, identifierBase).version;
+      } catch (er) {
+        return null;
+      }
+    };
+    module.exports = inc;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/diff.js
+var require_diff = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/diff.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var diff = (version1, version2) => {
+      const v1 = parse(version1, null, true);
+      const v2 = parse(version2, null, true);
+      const comparison = v1.compare(v2);
+      if (comparison === 0) {
+        return null;
+      }
+      const v1Higher = comparison > 0;
+      const highVersion = v1Higher ? v1 : v2;
+      const lowVersion = v1Higher ? v2 : v1;
+      const highHasPre = !!highVersion.prerelease.length;
+      const lowHasPre = !!lowVersion.prerelease.length;
+      if (lowHasPre && !highHasPre) {
+        if (!lowVersion.patch && !lowVersion.minor) {
+          return "major";
+        }
+        if (lowVersion.compareMain(highVersion) === 0) {
+          if (lowVersion.minor && !lowVersion.patch) {
+            return "minor";
+          }
+          return "patch";
+        }
+      }
+      const prefix = highHasPre ? "pre" : "";
+      if (v1.major !== v2.major) {
+        return prefix + "major";
+      }
+      if (v1.minor !== v2.minor) {
+        return prefix + "minor";
+      }
+      if (v1.patch !== v2.patch) {
+        return prefix + "patch";
+      }
+      return "prerelease";
+    };
+    module.exports = diff;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/major.js
+var require_major = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/major.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var major = (a, loose) => new SemVer(a, loose).major;
+    module.exports = major;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/minor.js
+var require_minor = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/minor.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var minor = (a, loose) => new SemVer(a, loose).minor;
+    module.exports = minor;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/patch.js
+var require_patch = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/patch.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var patch = (a, loose) => new SemVer(a, loose).patch;
+    module.exports = patch;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/prerelease.js
+var require_prerelease = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/prerelease.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var prerelease = (version, options) => {
+      const parsed = parse(version, options);
+      return parsed && parsed.prerelease.length ? parsed.prerelease : null;
+    };
+    module.exports = prerelease;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare.js
+var require_compare = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var compare = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
+    module.exports = compare;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rcompare.js
+var require_rcompare = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rcompare.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var rcompare = (a, b, loose) => compare(b, a, loose);
+    module.exports = rcompare;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-loose.js
+var require_compare_loose = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-loose.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var compareLoose = (a, b) => compare(a, b, true);
+    module.exports = compareLoose;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-build.js
+var require_compare_build = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-build.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var compareBuild = (a, b, loose) => {
+      const versionA = new SemVer(a, loose);
+      const versionB = new SemVer(b, loose);
+      return versionA.compare(versionB) || versionA.compareBuild(versionB);
+    };
+    module.exports = compareBuild;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/sort.js
+var require_sort = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/sort.js"(exports, module) {
+    "use strict";
+    var compareBuild = require_compare_build();
+    var sort = (list, loose) => list.sort((a, b) => compareBuild(a, b, loose));
+    module.exports = sort;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rsort.js
+var require_rsort = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rsort.js"(exports, module) {
+    "use strict";
+    var compareBuild = require_compare_build();
+    var rsort = (list, loose) => list.sort((a, b) => compareBuild(b, a, loose));
+    module.exports = rsort;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gt.js
+var require_gt = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gt.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var gt = (a, b, loose) => compare(a, b, loose) > 0;
+    module.exports = gt;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lt.js
+var require_lt = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lt.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var lt = (a, b, loose) => compare(a, b, loose) < 0;
+    module.exports = lt;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/eq.js
+var require_eq = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/eq.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var eq = (a, b, loose) => compare(a, b, loose) === 0;
+    module.exports = eq;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/neq.js
+var require_neq = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/neq.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var neq = (a, b, loose) => compare(a, b, loose) !== 0;
+    module.exports = neq;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gte.js
+var require_gte = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gte.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var gte2 = (a, b, loose) => compare(a, b, loose) >= 0;
+    module.exports = gte2;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lte.js
+var require_lte = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lte.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var lte = (a, b, loose) => compare(a, b, loose) <= 0;
+    module.exports = lte;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/cmp.js
+var require_cmp = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/cmp.js"(exports, module) {
+    "use strict";
+    var eq = require_eq();
+    var neq = require_neq();
+    var gt = require_gt();
+    var gte2 = require_gte();
+    var lt = require_lt();
+    var lte = require_lte();
+    var cmp = (a, op, b, loose) => {
+      switch (op) {
+        case "===":
+          if (typeof a === "object") {
+            a = a.version;
+          }
+          if (typeof b === "object") {
+            b = b.version;
+          }
+          return a === b;
+        case "!==":
+          if (typeof a === "object") {
+            a = a.version;
+          }
+          if (typeof b === "object") {
+            b = b.version;
+          }
+          return a !== b;
+        case "":
+        case "=":
+        case "==":
+          return eq(a, b, loose);
+        case "!=":
+          return neq(a, b, loose);
+        case ">":
+          return gt(a, b, loose);
+        case ">=":
+          return gte2(a, b, loose);
+        case "<":
+          return lt(a, b, loose);
+        case "<=":
+          return lte(a, b, loose);
+        default:
+          throw new TypeError(`Invalid operator: ${op}`);
+      }
+    };
+    module.exports = cmp;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/coerce.js
+var require_coerce = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/coerce.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var parse = require_parse();
+    var { safeRe: re, t } = require_re();
+    var coerce2 = (version, options) => {
+      if (version instanceof SemVer) {
+        return version;
+      }
+      if (typeof version === "number") {
+        version = String(version);
+      }
+      if (typeof version !== "string") {
+        return null;
+      }
+      options = options || {};
+      let match = null;
+      if (!options.rtl) {
+        match = version.match(options.includePrerelease ? re[t.COERCEFULL] : re[t.COERCE]);
+      } else {
+        const coerceRtlRegex = options.includePrerelease ? re[t.COERCERTLFULL] : re[t.COERCERTL];
+        let next;
+        while ((next = coerceRtlRegex.exec(version)) && (!match || match.index + match[0].length !== version.length)) {
+          if (!match || next.index + next[0].length !== match.index + match[0].length) {
+            match = next;
+          }
+          coerceRtlRegex.lastIndex = next.index + next[1].length + next[2].length;
+        }
+        coerceRtlRegex.lastIndex = -1;
+      }
+      if (match === null) {
+        return null;
+      }
+      const major = match[2];
+      const minor = match[3] || "0";
+      const patch = match[4] || "0";
+      const prerelease = options.includePrerelease && match[5] ? `-${match[5]}` : "";
+      const build = options.includePrerelease && match[6] ? `+${match[6]}` : "";
+      return parse(`${major}.${minor}.${patch}${prerelease}${build}`, options);
+    };
+    module.exports = coerce2;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/truncate.js
+var require_truncate = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/truncate.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var constants = require_constants();
+    var SemVer = require_semver();
+    var truncate = (version, truncation, options) => {
+      if (!constants.RELEASE_TYPES.includes(truncation)) {
+        return null;
+      }
+      const clonedVersion = cloneInputVersion(version, options);
+      return clonedVersion && doTruncation(clonedVersion, truncation);
+    };
+    var cloneInputVersion = (version, options) => {
+      const versionStringToParse = version instanceof SemVer ? version.version : version;
+      return parse(versionStringToParse, options);
+    };
+    var doTruncation = (version, truncation) => {
+      if (isPrerelease(truncation)) {
+        return version.version;
+      }
+      version.prerelease = [];
+      switch (truncation) {
+        case "major":
+          version.minor = 0;
+          version.patch = 0;
+          break;
+        case "minor":
+          version.patch = 0;
+          break;
+      }
+      return version.format();
+    };
+    var isPrerelease = (type) => {
+      return type.startsWith("pre");
+    };
+    module.exports = truncate;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/lrucache.js
+var require_lrucache = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/lrucache.js"(exports, module) {
+    "use strict";
+    var LRUCache = class {
+      constructor() {
+        this.max = 1e3;
+        this.map = /* @__PURE__ */ new Map();
+      }
+      get(key2) {
+        const value = this.map.get(key2);
+        if (value === void 0) {
+          return void 0;
+        } else {
+          this.map.delete(key2);
+          this.map.set(key2, value);
+          return value;
+        }
+      }
+      delete(key2) {
+        return this.map.delete(key2);
+      }
+      set(key2, value) {
+        const deleted = this.delete(key2);
+        if (!deleted && value !== void 0) {
+          if (this.map.size >= this.max) {
+            const firstKey = this.map.keys().next().value;
+            this.delete(firstKey);
+          }
+          this.map.set(key2, value);
+        }
+        return this;
+      }
+    };
+    module.exports = LRUCache;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/range.js
+var require_range = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/range.js"(exports, module) {
+    "use strict";
+    var SPACE_CHARACTERS = /\s+/g;
+    var Range = class _Range {
+      constructor(range, options) {
+        options = parseOptions(options);
+        if (range instanceof _Range) {
+          if (range.loose === !!options.loose && range.includePrerelease === !!options.includePrerelease) {
+            return range;
+          } else {
+            return new _Range(range.raw, options);
+          }
+        }
+        if (range instanceof Comparator) {
+          this.raw = range.value;
+          this.set = [[range]];
+          this.formatted = void 0;
+          return this;
+        }
+        this.options = options;
+        this.loose = !!options.loose;
+        this.includePrerelease = !!options.includePrerelease;
+        this.raw = range.trim().replace(SPACE_CHARACTERS, " ");
+        this.set = this.raw.split("||").map((r) => this.parseRange(r.trim())).filter((c) => c.length);
+        if (!this.set.length) {
+          throw new TypeError(`Invalid SemVer Range: ${this.raw}`);
+        }
+        if (this.set.length > 1) {
+          const first = this.set[0];
+          this.set = this.set.filter((c) => !isNullSet(c[0]));
+          if (this.set.length === 0) {
+            this.set = [first];
+          } else if (this.set.length > 1) {
+            for (const c of this.set) {
+              if (c.length === 1 && isAny(c[0])) {
+                this.set = [c];
+                break;
+              }
+            }
+          }
+        }
+        this.formatted = void 0;
+      }
+      get range() {
+        if (this.formatted === void 0) {
+          this.formatted = "";
+          for (let i = 0; i < this.set.length; i++) {
+            if (i > 0) {
+              this.formatted += "||";
+            }
+            const comps = this.set[i];
+            for (let k = 0; k < comps.length; k++) {
+              if (k > 0) {
+                this.formatted += " ";
+              }
+              this.formatted += comps[k].toString().trim();
+            }
+          }
+        }
+        return this.formatted;
+      }
+      format() {
+        return this.range;
+      }
+      toString() {
+        return this.range;
+      }
+      parseRange(range) {
+        range = range.replace(BUILDSTRIPRE, "");
+        const memoOpts = (this.options.includePrerelease && FLAG_INCLUDE_PRERELEASE) | (this.options.loose && FLAG_LOOSE);
+        const memoKey = memoOpts + ":" + range;
+        const cached = cache.get(memoKey);
+        if (cached) {
+          return cached;
+        }
+        const loose = this.options.loose;
+        const hr = loose ? re[t.HYPHENRANGELOOSE] : re[t.HYPHENRANGE];
+        range = range.replace(hr, hyphenReplace(this.options.includePrerelease));
+        debug("hyphen replace", range);
+        range = range.replace(re[t.COMPARATORTRIM], comparatorTrimReplace);
+        debug("comparator trim", range);
+        range = range.replace(re[t.TILDETRIM], tildeTrimReplace);
+        debug("tilde trim", range);
+        range = range.replace(re[t.CARETTRIM], caretTrimReplace);
+        debug("caret trim", range);
+        let rangeList = range.split(" ").map((comp) => parseComparator(comp, this.options)).join(" ").split(/\s+/).map((comp) => replaceGTE0(comp, this.options));
+        if (loose) {
+          rangeList = rangeList.filter((comp) => {
+            debug("loose invalid filter", comp, this.options);
+            return !!comp.match(re[t.COMPARATORLOOSE]);
+          });
+        }
+        debug("range list", rangeList);
+        const rangeMap = /* @__PURE__ */ new Map();
+        const comparators = rangeList.map((comp) => new Comparator(comp, this.options));
+        for (const comp of comparators) {
+          if (isNullSet(comp)) {
+            return [comp];
+          }
+          rangeMap.set(comp.value, comp);
+        }
+        if (rangeMap.size > 1 && rangeMap.has("")) {
+          rangeMap.delete("");
+        }
+        const result = [...rangeMap.values()];
+        cache.set(memoKey, result);
+        return result;
+      }
+      intersects(range, options) {
+        if (!(range instanceof _Range)) {
+          throw new TypeError("a Range is required");
+        }
+        return this.set.some((thisComparators) => {
+          return isSatisfiable(thisComparators, options) && range.set.some((rangeComparators) => {
+            return isSatisfiable(rangeComparators, options) && thisComparators.every((thisComparator) => {
+              return rangeComparators.every((rangeComparator) => {
+                return thisComparator.intersects(rangeComparator, options);
+              });
+            });
+          });
+        });
+      }
+      // if ANY of the sets match ALL of its comparators, then pass
+      test(version) {
+        if (!version) {
+          return false;
+        }
+        if (typeof version === "string") {
+          try {
+            version = new SemVer(version, this.options);
+          } catch (er) {
+            return false;
+          }
+        }
+        for (let i = 0; i < this.set.length; i++) {
+          if (testSet(this.set[i], version, this.options)) {
+            return true;
+          }
+        }
+        return false;
+      }
+    };
+    module.exports = Range;
+    var LRU = require_lrucache();
+    var cache = new LRU();
+    var parseOptions = require_parse_options();
+    var Comparator = require_comparator();
+    var debug = require_debug();
+    var SemVer = require_semver();
+    var {
+      safeRe: re,
+      src,
+      t,
+      comparatorTrimReplace,
+      tildeTrimReplace,
+      caretTrimReplace
+    } = require_re();
+    var { FLAG_INCLUDE_PRERELEASE, FLAG_LOOSE } = require_constants();
+    var BUILDSTRIPRE = new RegExp(src[t.BUILD], "g");
+    var isNullSet = (c) => c.value === "<0.0.0-0";
+    var isAny = (c) => c.value === "";
+    var isSatisfiable = (comparators, options) => {
+      let result = true;
+      const remainingComparators = comparators.slice();
+      let testComparator = remainingComparators.pop();
+      while (result && remainingComparators.length) {
+        result = remainingComparators.every((otherComparator) => {
+          return testComparator.intersects(otherComparator, options);
+        });
+        testComparator = remainingComparators.pop();
+      }
+      return result;
+    };
+    var parseComparator = (comp, options) => {
+      comp = comp.replace(re[t.BUILD], "");
+      debug("comp", comp, options);
+      comp = replaceCarets(comp, options);
+      debug("caret", comp);
+      comp = replaceTildes(comp, options);
+      debug("tildes", comp);
+      comp = replaceXRanges(comp, options);
+      debug("xrange", comp);
+      comp = replaceStars(comp, options);
+      debug("stars", comp);
+      return comp;
+    };
+    var isX = (id3) => !id3 || id3.toLowerCase() === "x" || id3 === "*";
+    var invalidXRangeOrder = (M, m, p) => isX(M) && !isX(m) || isX(m) && p && !isX(p);
+    var replaceTildes = (comp, options) => {
+      return comp.trim().split(/\s+/).map((c) => replaceTilde(c, options)).join(" ");
+    };
+    var replaceTilde = (comp, options) => {
+      const r = options.loose ? re[t.TILDELOOSE] : re[t.TILDE];
+      const z27 = options.includePrerelease ? "-0" : "";
+      return comp.replace(r, (_, M, m, p, pr) => {
+        debug("tilde", comp, _, M, m, p, pr);
+        let ret;
+        if (isX(M)) {
+          ret = "";
+        } else if (isX(m)) {
+          ret = `>=${M}.0.0${z27} <${+M + 1}.0.0-0`;
+        } else if (isX(p)) {
+          ret = `>=${M}.${m}.0${z27} <${M}.${+m + 1}.0-0`;
+        } else if (pr) {
+          debug("replaceTilde pr", pr);
+          ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
+        } else {
+          ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
+        }
+        debug("tilde return", ret);
+        return ret;
+      });
+    };
+    var replaceCarets = (comp, options) => {
+      return comp.trim().split(/\s+/).map((c) => replaceCaret(c, options)).join(" ");
+    };
+    var replaceCaret = (comp, options) => {
+      debug("caret", comp, options);
+      const r = options.loose ? re[t.CARETLOOSE] : re[t.CARET];
+      const z27 = options.includePrerelease ? "-0" : "";
+      return comp.replace(r, (_, M, m, p, pr) => {
+        debug("caret", comp, _, M, m, p, pr);
+        let ret;
+        if (isX(M)) {
+          ret = "";
+        } else if (isX(m)) {
+          ret = `>=${M}.0.0${z27} <${+M + 1}.0.0-0`;
+        } else if (isX(p)) {
+          if (M === "0") {
+            ret = `>=${M}.${m}.0${z27} <${M}.${+m + 1}.0-0`;
+          } else {
+            ret = `>=${M}.${m}.0${z27} <${+M + 1}.0.0-0`;
+          }
+        } else if (pr) {
+          debug("replaceCaret pr", pr);
+          if (M === "0") {
+            if (m === "0") {
+              ret = `>=${M}.${m}.${p}-${pr} <${M}.${m}.${+p + 1}-0`;
+            } else {
+              ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
+            }
+          } else {
+            ret = `>=${M}.${m}.${p}-${pr} <${+M + 1}.0.0-0`;
+          }
+        } else {
+          debug("no pr");
+          if (M === "0") {
+            if (m === "0") {
+              ret = `>=${M}.${m}.${p} <${M}.${m}.${+p + 1}-0`;
+            } else {
+              ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
+            }
+          } else {
+            ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
+          }
+        }
+        debug("caret return", ret);
+        return ret;
+      });
+    };
+    var replaceXRanges = (comp, options) => {
+      debug("replaceXRanges", comp, options);
+      return comp.split(/\s+/).map((c) => replaceXRange(c, options)).join(" ");
+    };
+    var replaceXRange = (comp, options) => {
+      comp = comp.trim();
+      const r = options.loose ? re[t.XRANGELOOSE] : re[t.XRANGE];
+      return comp.replace(r, (ret, gtlt, M, m, p, pr) => {
+        debug("xRange", comp, ret, gtlt, M, m, p, pr);
+        if (invalidXRangeOrder(M, m, p)) {
+          return comp;
+        }
+        const xM = isX(M);
+        const xm = xM || isX(m);
+        const xp = xm || isX(p);
+        const anyX = xp;
+        if (gtlt === "=" && anyX) {
+          gtlt = "";
+        }
+        pr = options.includePrerelease ? "-0" : "";
+        if (xM) {
+          if (gtlt === ">" || gtlt === "<") {
+            ret = "<0.0.0-0";
+          } else {
+            ret = "*";
+          }
+        } else if (gtlt && anyX) {
+          if (xm) {
+            m = 0;
+          }
+          p = 0;
+          if (gtlt === ">") {
+            gtlt = ">=";
+            if (xm) {
+              M = +M + 1;
+              m = 0;
+              p = 0;
+            } else {
+              m = +m + 1;
+              p = 0;
+            }
+          } else if (gtlt === "<=") {
+            gtlt = "<";
+            if (xm) {
+              M = +M + 1;
+            } else {
+              m = +m + 1;
+            }
+          }
+          if (gtlt === "<") {
+            pr = "-0";
+          }
+          ret = `${gtlt + M}.${m}.${p}${pr}`;
+        } else if (xm) {
+          ret = `>=${M}.0.0${pr} <${+M + 1}.0.0-0`;
+        } else if (xp) {
+          ret = `>=${M}.${m}.0${pr} <${M}.${+m + 1}.0-0`;
+        }
+        debug("xRange return", ret);
+        return ret;
+      });
+    };
+    var replaceStars = (comp, options) => {
+      debug("replaceStars", comp, options);
+      return comp.trim().replace(re[t.STAR], "");
+    };
+    var replaceGTE0 = (comp, options) => {
+      debug("replaceGTE0", comp, options);
+      return comp.trim().replace(re[options.includePrerelease ? t.GTE0PRE : t.GTE0], "");
+    };
+    var hyphenReplace = (incPr) => ($0, from, fM, fm, fp, fpr, fb, to, tM, tm, tp, tpr) => {
+      if (isX(fM)) {
+        from = "";
+      } else if (isX(fm)) {
+        from = `>=${fM}.0.0${incPr ? "-0" : ""}`;
+      } else if (isX(fp)) {
+        from = `>=${fM}.${fm}.0${incPr ? "-0" : ""}`;
+      } else if (fpr) {
+        from = `>=${from}`;
+      } else {
+        from = `>=${from}${incPr ? "-0" : ""}`;
+      }
+      if (isX(tM)) {
+        to = "";
+      } else if (isX(tm)) {
+        to = `<${+tM + 1}.0.0-0`;
+      } else if (isX(tp)) {
+        to = `<${tM}.${+tm + 1}.0-0`;
+      } else if (tpr) {
+        to = `<=${tM}.${tm}.${tp}-${tpr}`;
+      } else if (incPr) {
+        to = `<${tM}.${tm}.${+tp + 1}-0`;
+      } else {
+        to = `<=${to}`;
+      }
+      return `${from} ${to}`.trim();
+    };
+    var testSet = (set, version, options) => {
+      for (let i = 0; i < set.length; i++) {
+        if (!set[i].test(version)) {
+          return false;
+        }
+      }
+      if (version.prerelease.length && !options.includePrerelease) {
+        for (let i = 0; i < set.length; i++) {
+          debug(set[i].semver);
+          if (set[i].semver === Comparator.ANY) {
+            continue;
+          }
+          if (set[i].semver.prerelease.length > 0) {
+            const allowed = set[i].semver;
+            if (allowed.major === version.major && allowed.minor === version.minor && allowed.patch === version.patch) {
+              return true;
+            }
+          }
+        }
+        return false;
+      }
+      return true;
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/comparator.js
+var require_comparator = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/comparator.js"(exports, module) {
+    "use strict";
+    var ANY = /* @__PURE__ */ Symbol("SemVer ANY");
+    var Comparator = class _Comparator {
+      static get ANY() {
+        return ANY;
+      }
+      constructor(comp, options) {
+        options = parseOptions(options);
+        if (comp instanceof _Comparator) {
+          if (comp.loose === !!options.loose) {
+            return comp;
+          } else {
+            comp = comp.value;
+          }
+        }
+        comp = comp.trim().split(/\s+/).join(" ");
+        debug("comparator", comp, options);
+        this.options = options;
+        this.loose = !!options.loose;
+        this.parse(comp);
+        if (this.semver === ANY) {
+          this.value = "";
+        } else {
+          this.value = this.operator + this.semver.version;
+        }
+        debug("comp", this);
+      }
+      parse(comp) {
+        const r = this.options.loose ? re[t.COMPARATORLOOSE] : re[t.COMPARATOR];
+        const m = comp.match(r);
+        if (!m) {
+          throw new TypeError(`Invalid comparator: ${comp}`);
+        }
+        this.operator = m[1] !== void 0 ? m[1] : "";
+        if (this.operator === "=") {
+          this.operator = "";
+        }
+        if (!m[2]) {
+          this.semver = ANY;
+        } else {
+          this.semver = new SemVer(m[2], this.options.loose);
+        }
+      }
+      toString() {
+        return this.value;
+      }
+      test(version) {
+        debug("Comparator.test", version, this.options.loose);
+        if (this.semver === ANY || version === ANY) {
+          return true;
+        }
+        if (typeof version === "string") {
+          try {
+            version = new SemVer(version, this.options);
+          } catch (er) {
+            return false;
+          }
+        }
+        return cmp(version, this.operator, this.semver, this.options);
+      }
+      intersects(comp, options) {
+        if (!(comp instanceof _Comparator)) {
+          throw new TypeError("a Comparator is required");
+        }
+        if (this.operator === "") {
+          if (this.value === "") {
+            return true;
+          }
+          return new Range(comp.value, options).test(this.value);
+        } else if (comp.operator === "") {
+          if (comp.value === "") {
+            return true;
+          }
+          return new Range(this.value, options).test(comp.semver);
+        }
+        options = parseOptions(options);
+        if (options.includePrerelease && (this.value === "<0.0.0-0" || comp.value === "<0.0.0-0")) {
+          return false;
+        }
+        if (!options.includePrerelease && (this.value.startsWith("<0.0.0") || comp.value.startsWith("<0.0.0"))) {
+          return false;
+        }
+        if (this.operator.startsWith(">") && comp.operator.startsWith(">")) {
+          return true;
+        }
+        if (this.operator.startsWith("<") && comp.operator.startsWith("<")) {
+          return true;
+        }
+        if (this.semver.version === comp.semver.version && this.operator.includes("=") && comp.operator.includes("=")) {
+          return true;
+        }
+        if (cmp(this.semver, "<", comp.semver, options) && this.operator.startsWith(">") && comp.operator.startsWith("<")) {
+          return true;
+        }
+        if (cmp(this.semver, ">", comp.semver, options) && this.operator.startsWith("<") && comp.operator.startsWith(">")) {
+          return true;
+        }
+        return false;
+      }
+    };
+    module.exports = Comparator;
+    var parseOptions = require_parse_options();
+    var { safeRe: re, t } = require_re();
+    var cmp = require_cmp();
+    var debug = require_debug();
+    var SemVer = require_semver();
+    var Range = require_range();
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/satisfies.js
+var require_satisfies = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/satisfies.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var satisfies = (version, range, options) => {
+      try {
+        range = new Range(range, options);
+      } catch (er) {
+        return false;
+      }
+      return range.test(version);
+    };
+    module.exports = satisfies;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/to-comparators.js
+var require_to_comparators = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/to-comparators.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var toComparators = (range, options) => new Range(range, options).set.map((comp) => comp.map((c) => c.value).join(" ").trim().split(" "));
+    module.exports = toComparators;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/max-satisfying.js
+var require_max_satisfying = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/max-satisfying.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var Range = require_range();
+    var maxSatisfying = (versions, range, options) => {
+      let max = null;
+      let maxSV = null;
+      let rangeObj = null;
+      try {
+        rangeObj = new Range(range, options);
+      } catch (er) {
+        return null;
+      }
+      versions.forEach((v2) => {
+        if (rangeObj.test(v2)) {
+          if (!max || maxSV.compare(v2) === -1) {
+            max = v2;
+            maxSV = new SemVer(max, options);
+          }
+        }
+      });
+      return max;
+    };
+    module.exports = maxSatisfying;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-satisfying.js
+var require_min_satisfying = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-satisfying.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var Range = require_range();
+    var minSatisfying = (versions, range, options) => {
+      let min = null;
+      let minSV = null;
+      let rangeObj = null;
+      try {
+        rangeObj = new Range(range, options);
+      } catch (er) {
+        return null;
+      }
+      versions.forEach((v2) => {
+        if (rangeObj.test(v2)) {
+          if (!min || minSV.compare(v2) === 1) {
+            min = v2;
+            minSV = new SemVer(min, options);
+          }
+        }
+      });
+      return min;
+    };
+    module.exports = minSatisfying;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-version.js
+var require_min_version = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-version.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var Range = require_range();
+    var gt = require_gt();
+    var minVersion = (range, loose) => {
+      range = new Range(range, loose);
+      let minver = new SemVer("0.0.0");
+      if (range.test(minver)) {
+        return minver;
+      }
+      minver = new SemVer("0.0.0-0");
+      if (range.test(minver)) {
+        return minver;
+      }
+      minver = null;
+      for (let i = 0; i < range.set.length; ++i) {
+        const comparators = range.set[i];
+        let setMin = null;
+        comparators.forEach((comparator) => {
+          const compver = new SemVer(comparator.semver.version);
+          switch (comparator.operator) {
+            case ">":
+              if (compver.prerelease.length === 0) {
+                compver.patch++;
+              } else {
+                compver.prerelease.push(0);
+              }
+              compver.raw = compver.format();
+            /* fallthrough */
+            case "":
+            case ">=":
+              if (!setMin || gt(compver, setMin)) {
+                setMin = compver;
+              }
+              break;
+            case "<":
+            case "<=":
+              break;
+            /* istanbul ignore next */
+            default:
+              throw new Error(`Unexpected operation: ${comparator.operator}`);
+          }
+        });
+        if (setMin && (!minver || gt(minver, setMin))) {
+          minver = setMin;
+        }
+      }
+      if (minver && range.test(minver)) {
+        return minver;
+      }
+      return null;
+    };
+    module.exports = minVersion;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/valid.js
+var require_valid2 = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/valid.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var validRange = (range, options) => {
+      try {
+        return new Range(range, options).range || "*";
+      } catch (er) {
+        return null;
+      }
+    };
+    module.exports = validRange;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/outside.js
+var require_outside = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/outside.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var Comparator = require_comparator();
+    var { ANY } = Comparator;
+    var Range = require_range();
+    var satisfies = require_satisfies();
+    var gt = require_gt();
+    var lt = require_lt();
+    var lte = require_lte();
+    var gte2 = require_gte();
+    var outside = (version, range, hilo, options) => {
+      version = new SemVer(version, options);
+      range = new Range(range, options);
+      let gtfn, ltefn, ltfn, comp, ecomp;
+      switch (hilo) {
+        case ">":
+          gtfn = gt;
+          ltefn = lte;
+          ltfn = lt;
+          comp = ">";
+          ecomp = ">=";
+          break;
+        case "<":
+          gtfn = lt;
+          ltefn = gte2;
+          ltfn = gt;
+          comp = "<";
+          ecomp = "<=";
+          break;
+        default:
+          throw new TypeError('Must provide a hilo val of "<" or ">"');
+      }
+      if (satisfies(version, range, options)) {
+        return false;
+      }
+      for (let i = 0; i < range.set.length; ++i) {
+        const comparators = range.set[i];
+        let high = null;
+        let low = null;
+        comparators.forEach((comparator) => {
+          if (comparator.semver === ANY) {
+            comparator = new Comparator(">=0.0.0");
+          }
+          high = high || comparator;
+          low = low || comparator;
+          if (gtfn(comparator.semver, high.semver, options)) {
+            high = comparator;
+          } else if (ltfn(comparator.semver, low.semver, options)) {
+            low = comparator;
+          }
+        });
+        if (high.operator === comp || high.operator === ecomp) {
+          return false;
+        }
+        if ((!low.operator || low.operator === comp) && ltefn(version, low.semver)) {
+          return false;
+        } else if (low.operator === ecomp && ltfn(version, low.semver)) {
+          return false;
+        }
+      }
+      return true;
+    };
+    module.exports = outside;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/gtr.js
+var require_gtr = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/gtr.js"(exports, module) {
+    "use strict";
+    var outside = require_outside();
+    var gtr = (version, range, options) => outside(version, range, ">", options);
+    module.exports = gtr;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/ltr.js
+var require_ltr = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/ltr.js"(exports, module) {
+    "use strict";
+    var outside = require_outside();
+    var ltr = (version, range, options) => outside(version, range, "<", options);
+    module.exports = ltr;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/intersects.js
+var require_intersects = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/intersects.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var intersects = (r1, r2, options) => {
+      r1 = new Range(r1, options);
+      r2 = new Range(r2, options);
+      return r1.intersects(r2, options);
+    };
+    module.exports = intersects;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/simplify.js
+var require_simplify = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/simplify.js"(exports, module) {
+    "use strict";
+    var satisfies = require_satisfies();
+    var compare = require_compare();
+    module.exports = (versions, range, options) => {
+      const set = [];
+      let first = null;
+      let prev = null;
+      const v2 = versions.sort((a, b) => compare(a, b, options));
+      for (const version of v2) {
+        const included = satisfies(version, range, options);
+        if (included) {
+          prev = version;
+          if (!first) {
+            first = version;
+          }
+        } else {
+          if (prev) {
+            set.push([first, prev]);
+          }
+          prev = null;
+          first = null;
+        }
+      }
+      if (first) {
+        set.push([first, null]);
+      }
+      const ranges = [];
+      for (const [min, max] of set) {
+        if (min === max) {
+          ranges.push(min);
+        } else if (!max && min === v2[0]) {
+          ranges.push("*");
+        } else if (!max) {
+          ranges.push(`>=${min}`);
+        } else if (min === v2[0]) {
+          ranges.push(`<=${max}`);
+        } else {
+          ranges.push(`${min} - ${max}`);
+        }
+      }
+      const simplified = ranges.join(" || ");
+      const original = typeof range.raw === "string" ? range.raw : String(range);
+      return simplified.length < original.length ? simplified : range;
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/subset.js
+var require_subset = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/subset.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var Comparator = require_comparator();
+    var { ANY } = Comparator;
+    var satisfies = require_satisfies();
+    var compare = require_compare();
+    var subset = (sub, dom, options = {}) => {
+      if (sub === dom) {
+        return true;
+      }
+      sub = new Range(sub, options);
+      dom = new Range(dom, options);
+      let sawNonNull = false;
+      OUTER: for (const simpleSub of sub.set) {
+        for (const simpleDom of dom.set) {
+          const isSub = simpleSubset(simpleSub, simpleDom, options);
+          sawNonNull = sawNonNull || isSub !== null;
+          if (isSub) {
+            continue OUTER;
+          }
+        }
+        if (sawNonNull) {
+          return false;
+        }
+      }
+      return true;
+    };
+    var minimumVersionWithPreRelease = [new Comparator(">=0.0.0-0")];
+    var minimumVersion = [new Comparator(">=0.0.0")];
+    var simpleSubset = (sub, dom, options) => {
+      if (sub === dom) {
+        return true;
+      }
+      if (sub.length === 1 && sub[0].semver === ANY) {
+        if (dom.length === 1 && dom[0].semver === ANY) {
+          return true;
+        } else if (options.includePrerelease) {
+          sub = minimumVersionWithPreRelease;
+        } else {
+          sub = minimumVersion;
+        }
+      }
+      if (dom.length === 1 && dom[0].semver === ANY) {
+        if (options.includePrerelease) {
+          return true;
+        } else {
+          dom = minimumVersion;
+        }
+      }
+      const eqSet = /* @__PURE__ */ new Set();
+      let gt, lt;
+      for (const c of sub) {
+        if (c.operator === ">" || c.operator === ">=") {
+          gt = higherGT(gt, c, options);
+        } else if (c.operator === "<" || c.operator === "<=") {
+          lt = lowerLT(lt, c, options);
+        } else {
+          eqSet.add(c.semver);
+        }
+      }
+      if (eqSet.size > 1) {
+        return null;
+      }
+      let gtltComp;
+      if (gt && lt) {
+        gtltComp = compare(gt.semver, lt.semver, options);
+        if (gtltComp > 0) {
+          return null;
+        } else if (gtltComp === 0 && (gt.operator !== ">=" || lt.operator !== "<=")) {
+          return null;
+        }
+      }
+      for (const eq of eqSet) {
+        if (gt && !satisfies(eq, String(gt), options)) {
+          return null;
+        }
+        if (lt && !satisfies(eq, String(lt), options)) {
+          return null;
+        }
+        for (const c of dom) {
+          if (!satisfies(eq, String(c), options)) {
+            return false;
+          }
+        }
+        return true;
+      }
+      let higher, lower;
+      let hasDomLT, hasDomGT;
+      let needDomLTPre = lt && !options.includePrerelease && lt.semver.prerelease.length ? lt.semver : false;
+      let needDomGTPre = gt && !options.includePrerelease && gt.semver.prerelease.length ? gt.semver : false;
+      if (needDomLTPre && needDomLTPre.prerelease.length === 1 && lt.operator === "<" && needDomLTPre.prerelease[0] === 0) {
+        needDomLTPre = false;
+      }
+      for (const c of dom) {
+        hasDomGT = hasDomGT || c.operator === ">" || c.operator === ">=";
+        hasDomLT = hasDomLT || c.operator === "<" || c.operator === "<=";
+        if (gt) {
+          if (needDomGTPre) {
+            if (c.semver.prerelease && c.semver.prerelease.length && c.semver.major === needDomGTPre.major && c.semver.minor === needDomGTPre.minor && c.semver.patch === needDomGTPre.patch) {
+              needDomGTPre = false;
+            }
+          }
+          if (c.operator === ">" || c.operator === ">=") {
+            higher = higherGT(gt, c, options);
+            if (higher === c && higher !== gt) {
+              return false;
+            }
+          } else if (gt.operator === ">=" && !c.test(gt.semver)) {
+            return false;
+          }
+        }
+        if (lt) {
+          if (needDomLTPre) {
+            if (c.semver.prerelease && c.semver.prerelease.length && c.semver.major === needDomLTPre.major && c.semver.minor === needDomLTPre.minor && c.semver.patch === needDomLTPre.patch) {
+              needDomLTPre = false;
+            }
+          }
+          if (c.operator === "<" || c.operator === "<=") {
+            lower = lowerLT(lt, c, options);
+            if (lower === c && lower !== lt) {
+              return false;
+            }
+          } else if (lt.operator === "<=" && !c.test(lt.semver)) {
+            return false;
+          }
+        }
+        if (!c.operator && (lt || gt) && gtltComp !== 0) {
+          return false;
+        }
+      }
+      if (gt && hasDomLT && !lt && gtltComp !== 0) {
+        return false;
+      }
+      if (lt && hasDomGT && !gt && gtltComp !== 0) {
+        return false;
+      }
+      if (needDomGTPre || needDomLTPre) {
+        return false;
+      }
+      return true;
+    };
+    var higherGT = (a, b, options) => {
+      if (!a) {
+        return b;
+      }
+      const comp = compare(a.semver, b.semver, options);
+      return comp > 0 ? a : comp < 0 ? b : b.operator === ">" && a.operator === ">=" ? b : a;
+    };
+    var lowerLT = (a, b, options) => {
+      if (!a) {
+        return b;
+      }
+      const comp = compare(a.semver, b.semver, options);
+      return comp < 0 ? a : comp > 0 ? b : b.operator === "<" && a.operator === "<=" ? b : a;
+    };
+    module.exports = subset;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/index.js
+var require_semver2 = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/index.js"(exports, module) {
+    "use strict";
+    var internalRe = require_re();
+    var constants = require_constants();
+    var SemVer = require_semver();
+    var identifiers = require_identifiers();
+    var parse = require_parse();
+    var valid2 = require_valid();
+    var clean = require_clean();
+    var inc = require_inc();
+    var diff = require_diff();
+    var major = require_major();
+    var minor = require_minor();
+    var patch = require_patch();
+    var prerelease = require_prerelease();
+    var compare = require_compare();
+    var rcompare = require_rcompare();
+    var compareLoose = require_compare_loose();
+    var compareBuild = require_compare_build();
+    var sort = require_sort();
+    var rsort = require_rsort();
+    var gt = require_gt();
+    var lt = require_lt();
+    var eq = require_eq();
+    var neq = require_neq();
+    var gte2 = require_gte();
+    var lte = require_lte();
+    var cmp = require_cmp();
+    var coerce2 = require_coerce();
+    var truncate = require_truncate();
+    var Comparator = require_comparator();
+    var Range = require_range();
+    var satisfies = require_satisfies();
+    var toComparators = require_to_comparators();
+    var maxSatisfying = require_max_satisfying();
+    var minSatisfying = require_min_satisfying();
+    var minVersion = require_min_version();
+    var validRange = require_valid2();
+    var outside = require_outside();
+    var gtr = require_gtr();
+    var ltr = require_ltr();
+    var intersects = require_intersects();
+    var simplifyRange = require_simplify();
+    var subset = require_subset();
+    module.exports = {
+      parse,
+      valid: valid2,
+      clean,
+      inc,
+      diff,
+      major,
+      minor,
+      patch,
+      prerelease,
+      compare,
+      rcompare,
+      compareLoose,
+      compareBuild,
+      sort,
+      rsort,
+      gt,
+      lt,
+      eq,
+      neq,
+      gte: gte2,
+      lte,
+      cmp,
+      coerce: coerce2,
+      truncate,
+      Comparator,
+      Range,
+      satisfies,
+      toComparators,
+      maxSatisfying,
+      minSatisfying,
+      minVersion,
+      validRange,
+      outside,
+      gtr,
+      ltr,
+      intersects,
+      simplifyRange,
+      subset,
+      SemVer,
+      re: internalRe.re,
+      src: internalRe.src,
+      tokens: internalRe.t,
+      SEMVER_SPEC_VERSION: constants.SEMVER_SPEC_VERSION,
+      RELEASE_TYPES: constants.RELEASE_TYPES,
+      compareIdentifiers: identifiers.compareIdentifiers,
+      rcompareIdentifiers: identifiers.rcompareIdentifiers
+    };
+  }
+});
+
+// ../protocol/src/accounts.ts
+import { z } from "zod";
+var connectedAccount = z.object({
+  /** The provider, e.g. "github". Unique per person, so it names the row. */
+  providerId: z.string(),
+  /**
+   * The account's id at the provider. Better Auth stores the provider's own
+   * user id here, which for GitHub is a number — the closest thing to a
+   * display name the table holds.
+   */
+  accountId: z.string(),
+  /** OAuth scopes granted, space separated. Null when the provider sent none. */
+  scope: z.string().nullable(),
+  /** When the account was linked, ISO 8601. */
+  createdAt: z.string()
+});
+var connectedAccountsResponse = z.object({
+  accounts: z.array(connectedAccount)
+});
+
+// ../protocol/src/agent-policy.ts
+import { z as z2 } from "zod";
+var PERMISSION_DECISIONS = ["allow", "ask", "deny"];
+var CONFIGURABLE_PERMISSIONS = {
+  install_dependency: ["allow", "ask", "deny"],
+  // Everything outside the worktree is read-only in the sandbox (ADR 0009,
+  // Stage 1 isolation), so writing there cannot be allowed wholesale.
+  write_outside_repo: ["ask", "deny"],
+  git_push: ["allow", "ask", "deny"],
+  network: ["allow", "ask", "deny"],
+  computer_use: ["allow", "ask", "deny"]
+};
+var CONFIGURABLE_ACTIONS = Object.keys(
+  CONFIGURABLE_PERMISSIONS
+);
+var FIXED_PERMISSIONS = {
+  read_in_worktree: "allow",
+  write_in_worktree: "allow",
+  run_project_script: "allow",
+  // Allowed once the user approved the repo's recipe; asked before that.
+  run_setup_recipe: "allow"
+};
+var PERMISSION_DEFAULTS = {
+  ...FIXED_PERMISSIONS,
+  install_dependency: "allow",
+  write_outside_repo: "ask",
+  git_push: "ask",
+  network: "ask",
+  computer_use: "ask"
+};
+var NETWORK_DOMAIN_RE = /^(\*\.)?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*(:[0-9]{1,5})?$/;
+var MAX_NETWORK_DOMAINS = 200;
+var MAX_GUIDANCE_LENGTH = 1e4;
+var MAX_MODEL_NAME_LENGTH = 120;
+var networkDomainSchema = z2.string().trim().toLowerCase().min(1).max(253).regex(NETWORK_DOMAIN_RE);
+function normalizeDomains(domains) {
+  return [...new Set(domains.map((d) => d.trim().toLowerCase()))].filter(
+    Boolean
+  );
+}
+var networkAllowSchema = z2.array(networkDomainSchema).max(MAX_NETWORK_DOMAINS).transform(normalizeDomains);
+var storedPermissionsSchema = z2.strictObject({
+  install_dependency: z2.enum(CONFIGURABLE_PERMISSIONS.install_dependency),
+  write_outside_repo: z2.enum(CONFIGURABLE_PERMISSIONS.write_outside_repo),
+  git_push: z2.enum(CONFIGURABLE_PERMISSIONS.git_push),
+  network: z2.enum(CONFIGURABLE_PERMISSIONS.network),
+  computer_use: z2.enum(CONFIGURABLE_PERMISSIONS.computer_use)
+}).partial();
+var guidanceSchema = z2.string().max(MAX_GUIDANCE_LENGTH);
+var runPolicySchema = z2.object({
+  permissions: z2.object({
+    install_dependency: z2.enum(PERMISSION_DECISIONS),
+    write_outside_repo: z2.enum(PERMISSION_DECISIONS),
+    git_push: z2.enum(PERMISSION_DECISIONS),
+    network: z2.enum(PERMISSION_DECISIONS),
+    // Older servers omit this field; the daemon treats that as ask, never allow.
+    computer_use: z2.enum(PERMISSION_DECISIONS).optional()
+  }),
+  /** The workspace layer of the domain allow-list (ADR 0009). */
+  networkAllow: z2.array(z2.string().min(1).max(253)).max(MAX_NETWORK_DOMAINS),
+  /** Host-derived worker/workspace ceiling; even network=allow cannot widen it. */
+  networkCeiling: z2.array(networkDomainSchema).max(MAX_NETWORK_DOMAINS).optional(),
+  /**
+   * The run only reads: the worktree is not writable and nothing is pushed
+   * (ADR 0046). Absent from an older server means a normal, writable run.
+   */
+  readOnly: z2.boolean().optional()
+});
+var MODEL_HARNESSES = ["claude_code", "codex", "cursor"];
+var modelHarnessSchema = z2.enum(MODEL_HARNESSES);
+var modelNameSchema = z2.string().trim().min(1).max(MAX_MODEL_NAME_LENGTH);
+var modelByHarnessSchema = z2.strictObject({
+  claude_code: modelNameSchema,
+  codex: modelNameSchema,
+  cursor: modelNameSchema
+}).partial();
+var APPROVAL_MODES = ["ask", "read_only"];
+var approvalModeSchema = z2.enum(APPROVAL_MODES);
+
+// ../protocol/src/auth.ts
+import { z as z3 } from "zod";
+var AUTH_PROVIDERS = ["github", "google"];
+var authProvider = z3.enum(AUTH_PROVIDERS);
+var DESKTOP_SCHEMES = ["mikka", "mikka-dev"];
+var desktopScheme = z3.enum(DESKTOP_SCHEMES);
+var AUTH_BASE_PATH = "/api/auth";
+var DAEMON_CLIENT_ID = "mikka-daemon";
+var AUTH_ROUTES = {
+  /** Better Auth jwt plugin: short-lived JWT for zero-cache and the relay. */
+  token: `${AUTH_BASE_PATH}/token`,
+  /** Dev-only bypass (a Better Auth endpoint, so it sets the session cookie). */
+  devLogin: `${AUTH_BASE_PATH}/dev/login`,
+  me: "/v1/me"
+};
+var activeSession = z3.object({
+  id: z3.string(),
+  /** ISO timestamps. */
+  createdAt: z3.string(),
+  expiresAt: z3.string(),
+  ipAddress: z3.string().nullable(),
+  userAgent: z3.string().nullable(),
+  /** Derived from the caller's JWT (`sid`), not from the request's cookies. */
+  current: z3.boolean()
+});
+var activeSessions = z3.object({ sessions: z3.array(activeSession) });
+var authorizedDevice = z3.object({
+  id: z3.uuid(),
+  name: z3.string(),
+  hostname: z3.string().nullable(),
+  platform: z3.string().nullable(),
+  daemonVersion: z3.string().nullable(),
+  lastSeenAt: z3.string().nullable(),
+  /** The daemon session; null once the authorization is revoked. */
+  sessionId: z3.string().nullable(),
+  /** When the daemon signed in, and when that session expires. */
+  authorizedAt: z3.string().nullable(),
+  expiresAt: z3.string().nullable()
+});
+var authorizedDevices = z3.object({
+  devices: z3.array(authorizedDevice)
+});
+var authorizedApplication = z3.object({
+  id: z3.string(),
+  name: z3.string(),
+  uri: z3.string().nullable(),
+  scopes: z3.array(z3.string()),
+  createdAt: z3.string(),
+  updatedAt: z3.string()
+});
+var authorizedApplications = z3.object({
+  applications: z3.array(authorizedApplication)
+});
+var sessionUser = z3.object({
+  id: z3.uuid(),
+  email: z3.string(),
+  name: z3.string(),
+  image: z3.string().nullable()
+});
+var accessToken = z3.object({
+  token: z3.string().min(1),
+  /** Expiry, ms since epoch (from the JWT's `exp`). */
+  expiresAt: z3.number().int()
+});
+
+// ../protocol/src/bridge.ts
+import { z as z4 } from "zod";
+var LANGUAGES = ["zh-CN", "en"];
+var languagePreference = z4.enum(["system", ...LANGUAGES]);
+var themePreference = z4.enum(["system", "light", "dark"]);
+var appHref = z4.string().max(2048).regex(/^\/(?!\/)/);
+var DESKTOP_NOTIFICATION_KINDS = [
+  "review",
+  "awaiting",
+  "failed"
+];
+var desktopNotification = z4.object({
+  /** The `notification` row id. */
+  id: z4.string().min(1).max(200),
+  kind: z4.enum(DESKTOP_NOTIFICATION_KINDS),
+  /** `ORV-12 · 等你验收`; the issue number is always in it. */
+  title: z4.string().min(1).max(300),
+  /** The issue title. */
+  body: z4.string().max(1e3),
+  href: appHref
+});
+var desktopBadgeCount = z4.number().int().min(0).max(9999);
+var savedTab = z4.object({
+  entries: z4.array(appHref).min(1).max(50),
+  index: z4.number().int().min(0).max(49)
+});
+var savedTabs = z4.object({
+  items: z4.array(savedTab).max(50),
+  active: z4.number().int().min(0).max(49)
+});
+var firstDayOfWeekPreference = z4.enum(["monday", "sunday", "saturday"]);
+var commentSubmitKeyPreference = z4.enum(["mod+enter", "enter"]);
+var settingsSchema = z4.object({
+  language: languagePreference,
+  theme: themePreference,
+  /** Sidebar expanded (true) or collapsed offcanvas (false); ⌘B and `[`. */
+  sidebarOpen: z4.boolean(),
+  /** Titlebar tabs; empty until the app has saved them once. */
+  tabs: savedTabs,
+  /** Send anonymous usage events (ADR 0033); off by choice in Settings. */
+  telemetry: z4.boolean(),
+  /** Which day a week starts on in date pickers. */
+  firstDayOfWeek: firstDayOfWeekPreference,
+  /** Which key press sends a comment. */
+  commentSubmitKey: commentSubmitKeyPreference
+});
+var DEFAULT_SETTINGS = {
+  language: "system",
+  theme: "system",
+  sidebarOpen: true,
+  tabs: { items: [], active: 0 },
+  telemetry: true,
+  firstDayOfWeek: "monday",
+  commentSubmitKey: "mod+enter"
+};
+var SETTINGS_KEYS = Object.keys(DEFAULT_SETTINGS);
+var authState = z4.discriminatedUnion("status", [
+  z4.object({ status: z4.literal("signed_out") }),
+  z4.object({ status: z4.literal("signing_in"), provider: authProvider }),
+  z4.object({ status: z4.literal("signed_in"), user: sessionUser }),
+  z4.object({
+    status: z4.literal("update_required"),
+    minVersion: z4.string()
+  }),
+  z4.object({ status: z4.literal("error"), code: z4.string() })
+]);
+var localDevice = z4.object({
+  /** Whether the daemon on this computer answers. */
+  status: z4.enum(["online", "connecting", "offline"]),
+  /** The device row this daemon registered, once it has. */
+  deviceId: z4.string().nullable(),
+  workspaceId: z4.string().nullable(),
+  /** The daemon holds a device credential. */
+  signedIn: z4.boolean(),
+  /** The daemon's link to the server; null while the daemon is offline. */
+  server: z4.enum(["online", "offline", "unregistered"]).nullable()
+});
+var deviceLinkRequest = z4.object({ workspaceId: z4.uuid() });
+var pickedRepo = z4.object({
+  /** The repo's top level (a subfolder pick resolves to it). */
+  path: z4.string().min(1).max(4e3),
+  name: z4.string().max(500),
+  /** `origin` (or the first remote), null when the repo has none. */
+  remoteUrl: z4.string().max(2e3).nullable()
+});
+var pickRepoResult = z4.discriminatedUnion("status", [
+  z4.object({ status: z4.literal("picked"), repo: pickedRepo }),
+  z4.object({ status: z4.literal("cancelled") }),
+  z4.object({ status: z4.literal("not_a_repo"), path: z4.string() })
+]);
+
+// ../protocol/src/cycles.ts
+import { z as z5 } from "zod";
+var WEEKDAYS = [
+  "monday",
+  "tuesday",
+  "wednesday",
+  "thursday",
+  "friday",
+  "saturday",
+  "sunday"
+];
+var CYCLE_DURATION_MIN_DAYS = 1;
+var CYCLE_DURATION_MAX_DAYS = 56;
+var CYCLE_UPCOMING_MAX = 8;
+var teamCycleSettingsSchema = z5.object({
+  /** Off until a person turns it on: nothing is created and nothing rolls. */
+  enabled: z5.boolean().default(false),
+  /** Length of a cycle in days; the end date is `start + duration - 1`. */
+  durationDays: z5.number().int().min(CYCLE_DURATION_MIN_DAYS).max(CYCLE_DURATION_MAX_DAYS).default(14),
+  /** The weekday a team's first cycle starts on. */
+  startWeekday: z5.enum(WEEKDAYS).default("monday"),
+  /** Cycles kept ready ahead of the current one. 0 creates them just in time. */
+  upcomingCount: z5.number().int().min(0).max(CYCLE_UPCOMING_MAX).default(1),
+  /**
+   * When a cycle ends, unfinished issues move to the next one. Off leaves them
+   * in the finished cycle, which is what `cycle.complete` has always done.
+   */
+  autoRollover: z5.boolean().default(true),
+  /**
+   * The team's calendar. A cycle ends at the last moment of its end date
+   * *here*, not in UTC, so a team in Auckland and one in Los Angeles roll over
+   * at different instants.
+   */
+  timezone: z5.string().max(64).refine(isValidTimeZone, "Unknown timezone.").default("UTC")
+});
+function isValidTimeZone(value) {
+  try {
+    new Intl.DateTimeFormat("en-US", { timeZone: value });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// ../protocol/src/daemon.ts
+import { z as z10 } from "zod";
+
+// ../protocol/src/harness.ts
+import { z as z6 } from "zod";
+var HARNESSES = ["claude_code", "codex", "cursor", "mock"];
+var harnessSchema = z6.enum(HARNESSES);
+var harnessInfoSchema = z6.object({
+  harness: harnessSchema,
+  installed: z6.boolean(),
+  models: z6.array(z6.string().trim().min(1).max(128)).max(500).optional(),
+  /** Deprecated (#312, 2026-10-27): could host the native Coordinator. The server keeps that runtime switched off. */
+  coordinator: z6.boolean().optional(),
+  /** Set only by a runner with an isolated, owner-bound subscription broker. */
+  subscriptionBroker: z6.literal(true).optional(),
+  /** Set only by an E2B worker with the guarded Bot computer broker. */
+  computerBroker: z6.literal(true).optional(),
+  /** Run-scoped CLI approvals and policy-version checks are supported. */
+  toolApproval: z6.literal(true).optional(),
+  /** Version string reported by the CLI, null when not installed. */
+  version: z6.string().nullable()
+});
+
+// ../protocol/src/quota.ts
+import { z as z7 } from "zod";
+var QUOTA_VENDORS = ["claude_code", "codex", "cursor"];
+var quotaVendorSchema = z7.enum(QUOTA_VENDORS);
+var QUOTA_SOURCES = ["local_credentials", "official"];
+var quotaSourceSchema = z7.enum(QUOTA_SOURCES);
+var QUOTA_WINDOW_KINDS = [
+  "five_hour",
+  "weekly",
+  "monthly",
+  "daily",
+  "hourly",
+  "other"
+];
+var quotaWindowKindSchema = z7.enum(QUOTA_WINDOW_KINDS);
+var QUOTA_METERS = [
+  "auto",
+  "api",
+  "on_demand",
+  "team_pool",
+  "team_on_demand"
+];
+var quotaMeterSchema = z7.enum(QUOTA_METERS);
+var quotaWindowSchema = z7.object({
+  kind: quotaWindowKindSchema,
+  /** 0..1 share of the window already used. */
+  used: z7.number().min(0).max(1),
+  resetsAt: z7.string().nullable(),
+  /** Model display name for a per-model window, e.g. "Opus". */
+  model: z7.string().min(1).max(40).optional(),
+  meter: quotaMeterSchema.optional()
+});
+var quotaSnapshotSchema = z7.object({
+  vendor: quotaVendorSchema,
+  source: quotaSourceSchema,
+  status: z7.enum(["ok", "unknown"]),
+  plan: z7.string().max(40).nullable(),
+  windows: z7.array(quotaWindowSchema).max(12),
+  /** When this vendor was last read (ISO-8601). */
+  observedAt: z7.string()
+});
+var quotaSnapshotReportSchema = z7.object({
+  /** When the whole read finished. Null before the first read. */
+  observedAt: z7.string().nullable(),
+  quotas: z7.array(quotaSnapshotSchema).max(6)
+});
+
+// ../protocol/src/run.ts
+import { z as z9 } from "zod";
+
+// ../protocol/src/plan.ts
+import { z as z8 } from "zod";
+var text = (max) => z8.string().trim().min(1).max(max);
+var key = z8.string().trim().min(1).max(64);
+var planSection = z8.object({
+  heading: text(200),
+  items: z8.array(text(2e3)).min(1).max(50)
+});
+var planSpec = z8.object({
+  title: text(500),
+  summary: z8.string().trim().max(4e3).default(""),
+  sections: z8.array(planSection).min(1).max(30)
+});
+var planCriterion = z8.object({
+  body: text(2e3),
+  /** The command that checks it; absent means a person checks it. */
+  checkCommand: z8.string().trim().max(2e3).optional()
+});
+var PLAN_PRIORITIES = [
+  "none",
+  "urgent",
+  "high",
+  "medium",
+  "low"
+];
+var planIssue = z8.object({
+  key,
+  title: text(500),
+  goal: z8.string().trim().max(4e3).optional(),
+  /** Grouping only; order lives in `blockedBy` (`issue.parent_id`). */
+  parentKey: key.optional(),
+  blockedBy: z8.array(key).max(50).default([]),
+  criteria: z8.array(planCriterion).min(1).max(50),
+  verifyCommand: z8.string().trim().max(2e3).optional(),
+  predictedFiles: z8.array(z8.string().trim().max(1e3)).max(200).default([]),
+  sizeEstimate: z8.object({ files: z8.number().int().min(0), lines: z8.number().int().min(0) }).optional(),
+  priority: z8.enum(PLAN_PRIORITIES).default("none")
+});
+var planSplit = z8.object({
+  summary: z8.string().trim().max(4e3).default(""),
+  issues: z8.array(planIssue).min(1).max(100)
+});
+var planHandoff = z8.object({
+  specId: z8.uuid(),
+  spec: planSpec,
+  split: planSplit
+});
+
+// ../protocol/src/run.ts
+var RUN_QUESTION_KINDS = [
+  "context",
+  "decision",
+  "permission",
+  "external"
+];
+var runQuestion = z9.object({
+  questionId: z9.uuid(),
+  kind: z9.enum(RUN_QUESTION_KINDS).default("decision"),
+  question: z9.string().trim().min(1).max(4e3),
+  context: z9.string().trim().max(4e3).optional(),
+  options: z9.array(z9.string().trim().min(1).max(4e3)).max(20).default([])
+}).strict();
+var RUN_STOP_REASONS = [
+  "submitted",
+  "turn_ended",
+  "asked_human",
+  "blocked",
+  "cancelled",
+  "error",
+  "timeout",
+  "device_lost"
+];
+var runStopReason = z9.enum(RUN_STOP_REASONS);
+var shortList = z9.array(z9.string().max(1e3)).max(5e3);
+var VERIFY_STATUSES = ["passed", "failed", "not_run"];
+var verifyStatus = z9.enum(VERIFY_STATUSES);
+var runPublish = z9.object({
+  /** Where the commit went: the issue's branch, or the run's own. */
+  branch: z9.string().max(500),
+  /** Null when nothing was committed (no changes, or the commit failed). */
+  commit: z9.string().max(100).nullable(),
+  pushed: z9.boolean(),
+  remote: z9.string().max(200).nullable(),
+  /**
+   * Why nothing was pushed when that was expected: the agent changed
+   * nothing, or the repo has not approved pushes. Absent with
+   * `pushed: false` means the commit or the push failed (see `note`).
+   */
+  skipped: z9.enum(["no_changes", "not_approved"]).optional(),
+  note: z9.string().max(2e3).optional()
+});
+var runBenchmarkContext = z9.object({
+  sourceCommit: z9.string().regex(/^[a-f0-9]{40}$/),
+  benchmarkDigest: z9.string().regex(/^[a-f0-9]{64}$/),
+  caseId: z9.string().min(1).max(200),
+  fixtureDigest: z9.string().regex(/^[a-f0-9]{64}$/),
+  policyDigest: z9.string().regex(/^[a-f0-9]{64}$/)
+}).strict();
+var runExecution = runBenchmarkContext.extend({
+  harness: z9.enum(["codex", "claude_code", "cursor"]),
+  requestedModel: z9.string().min(1).max(500).nullable(),
+  observedModel: z9.string().min(1).max(500).nullable(),
+  verifyCommand: z9.string().min(1).max(2e3)
+}).strict();
+var runRuntime = runExecution.pick({
+  harness: true,
+  requestedModel: true,
+  observedModel: true,
+  policyDigest: true,
+  sourceCommit: true
+}).strict();
+var runSkillMount = z9.object({
+  receiptId: z9.uuid(),
+  versionId: z9.uuid(),
+  sha256: z9.string().regex(/^[a-f0-9]{64}$/),
+  sessionId: z9.string().min(1).max(500),
+  mountedAt: z9.iso.datetime()
+}).strict();
+var runReport = z9.object({
+  /** Worktree base journaled before the adapter started; never agent-supplied. */
+  sourceCommit: z9.string().regex(/^[a-f0-9]{40}$/).optional(),
+  skillMount: runSkillMount.optional(),
+  execution: runExecution.optional(),
+  runtime: runRuntime.optional(),
+  /** What was done, in a few sentences. Empty when the run crashed early. */
+  summary: z9.string().max(1e4),
+  /** Paths relative to the worktree root (from `git status`). */
+  filesChanged: shortList,
+  /** The daemon's run of the issue's verify command after a submit. */
+  verify: z9.object({
+    status: verifyStatus,
+    command: z9.string().max(2e3).optional(),
+    /** Actual process outcome from the daemon, never the agent. */
+    exitCode: z9.number().int().nullable().optional(),
+    signal: z9.string().max(100).nullable().optional(),
+    timedOut: z9.boolean().optional(),
+    /** Tail of the command output. */
+    output: z9.string().max(1e4).optional()
+  }),
+  openQuestions: z9.array(z9.string().max(2e3)).max(50),
+  /** What should happen next, from the agent's point of view. */
+  question: runQuestion.optional(),
+  nextStep: z9.string().max(2e3).nullable(),
+  /** For `blocked`: the external condition, e.g. `quota_exhausted`. */
+  blockedOn: z9.string().max(500).optional(),
+  /** Daemon-owned receipt for an exact, unchanged read-only candidate. */
+  check: z9.object({
+    sha: z9.string().regex(/^[a-f0-9]{40}$/),
+    readOnly: z9.literal(true)
+  }).optional(),
+  /** Preview branch created or used by the producing run; descriptive metadata only. */
+  previewDatabaseBranch: z9.string().trim().min(1).max(500).optional(),
+  /** Acceptance criteria the agent checked, with evidence. */
+  criteria: z9.array(
+    z9.object({
+      criterionId: z9.uuid().optional(),
+      text: z9.string().max(2e3).optional(),
+      passed: z9.boolean(),
+      evidence: z9.string().max(1e4).optional(),
+      /** Agent-reported criterion check; the daemon-owned verify remains authoritative. */
+      command: z9.string().trim().min(1).max(2e3).optional(),
+      exitCode: z9.number().int().nullable().optional()
+    })
+  ).max(200).optional(),
+  /**
+   * A `plan` run's hand-in: the spec it wrote and the split it proposes for
+   * it (ADR ORV-205). Only the daemon sets this, and only for a `plan` run.
+   */
+  plan: planHandoff.optional(),
+  interfacesProduced: shortList.optional(),
+  knownIssues: shortList.optional(),
+  notesForNext: z9.string().max(1e4).optional(),
+  /** Set by the daemon after a verified submit; never by the agent. */
+  publish: runPublish.optional(),
+  followUps: z9.array(
+    z9.object({
+      title: z9.string().trim().min(1).max(500),
+      goal: z9.string().max(2e3).optional(),
+      reason: z9.string().max(2e3).optional()
+    })
+  ).max(50).optional()
+});
+var runCompletion = z9.object({
+  stopReason: runStopReason,
+  report: runReport
+});
+var runCompleteRequest = z9.object({ stopReason: runStopReason, report: runReport.optional() }).refine((body) => body.stopReason !== "submitted" || body.report, {
+  message: "A submitted run needs a report.",
+  path: ["report"]
+});
+
+// ../protocol/src/daemon.ts
+var RUN_STATES = [
+  "queued",
+  "preparing",
+  "running",
+  "waiting_input",
+  "finishing",
+  "succeeded",
+  /** Ended without success or failure: the turn ended, a question, a blocker. */
+  "stopped",
+  "failed",
+  "cancelled"
+];
+var runStateSchema = z10.enum(RUN_STATES);
+var stopReasonSchema = runStopReason;
+var DAEMON_RPC_ERRORS = {
+  handshakeRequired: 4001,
+  protocolMismatch: 4002,
+  unauthorized: 4003,
+  repoNotAllowed: 4010,
+  runNotFound: 4011,
+  runNotPinnedHere: 4012,
+  harnessNotSupported: 4013,
+  invalidId: 4014,
+  serverUnreachable: 4020,
+  draining: 4030
+};
+var helloParams = z10.object({
+  protocolVersion: z10.number().int(),
+  /** Contents of the daemon's `daemon.secret` file in the flavor data dir. */
+  secret: z10.string(),
+  client: z10.object({ name: z10.string(), version: z10.string() })
+});
+var helloResult = z10.object({
+  protocolVersion: z10.number().int(),
+  daemonVersion: z10.string(),
+  pid: z10.number().int()
+});
+var runSummarySchema = z10.object({
+  runId: z10.string(),
+  issueId: z10.string(),
+  harness: harnessSchema,
+  state: runStateSchema,
+  worktree: z10.string().nullable(),
+  sessionId: z10.string().nullable(),
+  /** Chunks emitted so far (the daemon-local producer sequence). */
+  chunks: z10.number().int().nonnegative(),
+  error: z10.string().nullable(),
+  /** Set once the run reached a terminal state. */
+  stopReason: stopReasonSchema.optional(),
+  /** Lease from the server; the daemon stops the run if it cannot renew it. */
+  leaseExpiresAt: z10.string().optional(),
+  /** Last progress seen by the watchdog (ISO time), while the run is active. */
+  lastProgressAt: z10.string().optional()
+});
+var daemonStatusSchema = z10.object({
+  daemonVersion: z10.string(),
+  protocolVersion: z10.number().int(),
+  pid: z10.number().int(),
+  dataDir: z10.string(),
+  /** Null until the device is registered with the server. */
+  deviceId: z10.string().nullable(),
+  /** The workspace the device credential was handed over for, if named. */
+  workspaceId: z10.string().nullable(),
+  /** Holds a device credential (it may still be refused by the server). */
+  signedIn: z10.boolean(),
+  server: z10.enum(["online", "offline", "unregistered"]),
+  harnesses: z10.array(harnessInfoSchema),
+  runs: z10.array(runSummarySchema),
+  /** Bytes used by run worktrees under the daemon's data dir. */
+  worktreeDiskBytes: z10.number().int().nonnegative(),
+  /** Items buffered on disk, waiting for the server. */
+  pendingUploads: z10.number().int().nonnegative(),
+  draining: z10.boolean(),
+  /** Latest subscription snapshots. Empty when quota polling is off. */
+  quotas: z10.array(quotaSnapshotSchema).max(6)
+});
+var empty = z10.object({}).optional();
+var ok = z10.object({ ok: z10.literal(true) });
+var daemonRpc = {
+  "daemon.hello": { params: helloParams, result: helloResult },
+  "daemon.status": { params: empty, result: daemonStatusSchema },
+  /** Cached subscription snapshots. Does not start a vendor request. */
+  "quota.snapshot": { params: empty, result: quotaSnapshotReportSchema },
+  /** Stop accepting runs, journal active ones for resume, then exit. */
+  "daemon.drain": { params: empty, result: ok },
+  /** Hand the daemon a device credential obtained by the signed-in desktop. */
+  "device.setCredential": {
+    params: z10.object({
+      credential: z10.string().min(1),
+      /** Needed only for users in more than one workspace. */
+      workspaceId: z10.uuid().optional()
+    }),
+    result: ok
+  },
+  /** Forget the device credential (the person signed out of the app). */
+  "device.clearCredential": { params: empty, result: ok },
+  /** Claim a queued run pinned to this device and start it. */
+  "runs.start": {
+    params: z10.object({ runId: z10.string() }),
+    result: runSummarySchema
+  },
+  "runs.list": { params: empty, result: z10.array(runSummarySchema) },
+  /** Interject a user message into a running session. */
+  "runs.send": {
+    params: z10.object({ runId: z10.string(), text: z10.string().min(1) }),
+    result: ok
+  },
+  "runs.cancel": {
+    params: z10.object({ runId: z10.string() }),
+    result: runSummarySchema
+  },
+  /**
+   * Dev only (`mikka daemon --dev --server memory`): queue and start a mock
+   * run on an allow-listed repo without a server. Refused otherwise.
+   */
+  "dev.mockRun": {
+    params: z10.object({
+      repoId: z10.string(),
+      fixture: z10.string().optional(),
+      baseBranch: z10.string().optional(),
+      /** Run after the mock submits; defaults to `git diff --check`. */
+      verifyCommand: z10.string().optional()
+    }),
+    result: runSummarySchema
+  }
+};
+
+// ../protocol/src/device.ts
+import { z as z13 } from "zod";
+
+// ../protocol/src/skill.ts
+import { z as z12 } from "zod";
+
+// ../protocol/src/skill-artifact.ts
+import { z as z11 } from "zod";
+var skillArtifactRefSchema = z11.object({
+  schemaVersion: z11.literal(1),
+  registryId: z11.literal("mikka-builtin"),
+  skillId: z11.uuid(),
+  versionId: z11.uuid(),
+  format: z11.literal("single-skill-md-v1"),
+  sha256: z11.string().regex(/^[a-f0-9]{64}$/)
+}).strict();
+var skillAssignmentReceiptSchema = z11.object({
+  id: z11.uuid(),
+  runId: z11.uuid(),
+  issueId: z11.uuid(),
+  agentId: z11.uuid(),
+  repoId: z11.uuid(),
+  deviceId: z11.uuid(),
+  leaseExpiresAt: z11.iso.datetime(),
+  assignedAt: z11.iso.datetime(),
+  artifact: skillArtifactRefSchema
+}).strict();
+var skillReceiptRevalidationSchema = z11.object({
+  skillReceipt: skillAssignmentReceiptSchema,
+  leaseExpiresAt: z11.iso.datetime()
+}).strict();
+
+// ../protocol/src/skill.ts
+var MAX_SKILLS_PER_RUN = 20;
+var MAX_SKILL_NAME_LENGTH = 80;
+var MAX_SKILL_DESCRIPTION_LENGTH = 500;
+var MAX_SKILL_INSTRUCTIONS_LENGTH = 2e4;
+var MAX_SKILL_FILES = 20;
+var MAX_SKILL_FILE_PATH_LENGTH = 200;
+var MAX_SKILL_FILE_CONTENT_LENGTH = 1e5;
+var skillFilePathSchema = z12.string().min(1).max(MAX_SKILL_FILE_PATH_LENGTH).refine(
+  (path) => !path.startsWith("/") && !path.includes("\\") && !path.split("/").some((segment) => segment === ".." || segment === ""),
+  { message: "A skill file path must be relative and stay inside the skill." }
+);
+var skillFileSchema = z12.object({
+  path: skillFilePathSchema,
+  content: z12.string().max(MAX_SKILL_FILE_CONTENT_LENGTH)
+});
+var skillFilesSchema = z12.array(skillFileSchema).max(MAX_SKILL_FILES);
+var skillNameSchema = z12.string().trim().min(1).max(MAX_SKILL_NAME_LENGTH);
+var skillDescriptionSchema = z12.string().trim().max(MAX_SKILL_DESCRIPTION_LENGTH);
+var skillInstructionsSchema = z12.string().trim().min(1).max(MAX_SKILL_INSTRUCTIONS_LENGTH);
+var runSkillSchema = z12.object({
+  id: z12.uuid(),
+  name: skillNameSchema,
+  description: z12.string().nullable(),
+  instructions: skillInstructionsSchema,
+  files: skillFilesSchema
+});
+var runSkillRefSchema = z12.object({
+  id: z12.uuid(),
+  name: skillNameSchema
+});
+
+// ../protocol/src/device.ts
+var id = z13.string().min(1).max(64);
+var isoTime = z13.iso.datetime({ offset: true });
+var deviceComputerCapability = z13.object({ installed: z13.boolean(), version: z13.string().max(100).nullable() }).strict();
+var deviceRegistration = z13.object({
+  deviceType: z13.enum(["laptop", "server"]).optional(),
+  name: z13.string().trim().min(1).max(200),
+  hostname: z13.string().max(255).nullable().optional(),
+  platform: z13.string().max(50),
+  arch: z13.string().max(50),
+  daemonVersion: z13.string().max(50),
+  protocolVersion: z13.number().int(),
+  harnesses: z13.array(harnessInfoSchema).max(20),
+  computerUse: deviceComputerCapability.optional(),
+  /**
+   * This machine's one device id, the same in every workspace (ADR ORV-284).
+   * Registering with it in another workspace joins the same device there.
+   * An id the server does not know yet becomes the new device's id; another
+   * person's id registers a new device.
+   */
+  deviceId: id.optional(),
+  /** Needed only when the user belongs to more than one workspace. */
+  workspaceId: z13.uuid().optional()
+});
+var deviceRegistered = z13.object({
+  deviceId: id,
+  workspaceId: z13.uuid()
+});
+var heartbeatRunSchema = z13.object({
+  runId: id,
+  /** Last tool call, turn boundary or file change (not raw output). */
+  lastProgressAt: isoTime
+});
+var deviceManagementCommand = z13.object({ id: z13.uuid(), kind: z13.enum(["redetect", "restart", "update", "uninstall"]) });
+var deviceHeartbeatSchema = z13.object({
+  completedDeviceCommands: z13.array(z13.uuid()).max(100).optional(),
+  failedDeviceCommands: z13.array(z13.object({ id: z13.uuid(), error: z13.string().max(500) })).max(100).optional(),
+  harnesses: z13.array(harnessInfoSchema).max(20),
+  computerUse: deviceComputerCapability.optional(),
+  deviceType: z13.enum(["laptop", "server"]).optional(),
+  runs: z13.array(heartbeatRunSchema).max(500),
+  worktreeDiskBytes: z13.number().int().nonnegative(),
+  /**
+   * Subscription windows read on this device. Absent when the daemon is not
+   * polling. Numbers only, never a vendor credential (ADR 0027).
+   */
+  quotas: z13.array(quotaSnapshotSchema).max(6).optional()
+});
+var heartbeatResultSchema = z13.object({
+  deviceCommands: z13.array(deviceManagementCommand).max(1).optional(),
+  /** Renewed lease expiry per run id; a run missing here is not renewed. */
+  leases: z13.record(z13.string(), isoTime),
+  /**
+   * Runs the device reported that it no longer holds: they ended on the
+   * server, or went to another attempt after the lease ran out. The daemon
+   * stops them now instead of when their lease runs out.
+   */
+  revoked: z13.array(id).max(500).optional(),
+  /** Short-lived cloud device token, returned only over its authenticated link. */
+  cloudCredential: z13.string().regex(/^orv_[A-Za-z0-9_-]{43}$/).optional()
+});
+var RUN_CHECKPOINT_MAX_BYTES = 8 * 1024 * 1024;
+var runCheckpointSchema = z13.object({
+  /** The commit the run's worktree started from. */
+  baseCommit: z13.string().regex(/^[0-9a-f]{40,64}$/),
+  /**
+   * `git diff --binary` from `baseCommit` to the whole worktree (tracked
+   * and untracked files, ignored ones left out, the agent's own commits
+   * included), gzipped, base64.
+   */
+  patch: z13.string().max(Math.ceil(RUN_CHECKPOINT_MAX_BYTES * 4 / 3) + 4),
+  /** Files the patch touches. */
+  files: z13.number().int().nonnegative(),
+  takenAt: isoTime
+});
+var setupRecipeSchema = z13.object({
+  /** Paths relative to the main checkout copied into each new worktree. */
+  copyFiles: z13.array(z13.string().max(1e3)).max(200),
+  /** Shell command run in the worktree, e.g. `bun install`. */
+  command: z13.string().max(2e3).optional(),
+  /** Approved once per repo by the user; unapproved recipes never run. */
+  approved: z13.boolean()
+});
+var deviceRepoSchema = z13.object({
+  repoId: id,
+  name: z13.string().max(500),
+  /** Logical repository key; only trusted cloud runtimes use an absolute path. */
+  path: z13.string().min(1).max(4e3),
+  remoteUrl: z13.string().max(2e3).nullable().optional(),
+  setup: setupRecipeSchema.optional(),
+  /** Domains agents may reach in this repo, on top of the harness's own. */
+  networkAllow: z13.array(z13.string().min(1).max(253)).max(200).optional(),
+  /** Push run branches after a verified hand-in ("always for this repo"). */
+  push: z13.object({
+    approved: z13.boolean(),
+    remote: z13.string().min(1).max(200).optional()
+  }).optional()
+});
+var deviceReposResponse = z13.object({
+  repos: z13.array(deviceRepoSchema)
+});
+var pendingRunsResponse = z13.object({ runIds: z13.array(id) });
+var RUN_KINDS = ["implement", "acceptance", "fix", "plan"];
+var runAssignmentSchema = z13.object({
+  runId: id,
+  issueId: id,
+  deviceId: id,
+  repoId: id,
+  /** Clone URL for local runs; hosted computer assignments keep their isolated workspace. */
+  remoteUrl: z13.string().min(1).max(4e3).optional(),
+  /** Absent means origin/HEAD after fetch. */
+  baseBranch: z13.string().min(1).max(500).optional(),
+  expectedRepoRemote: z13.string().max(2e3).optional(),
+  harness: harnessSchema,
+  prompt: z13.string().max(1e5),
+  /**
+   * The model the harness's CLI is asked to run, from the per-harness
+   * preference of the person this run works for (ADR 0060). Absent: the
+   * CLI's own default. A daemon that does not know the field ignores it
+   * (zod strips unknown keys), so this needs no version gate.
+   */
+  model: modelNameSchema.optional(),
+  /** Owner-bound selection only; no subscription credential enters the assignment. */
+  subscriptionBinding: z13.object({
+    bindingId: z13.uuid(),
+    ownerId: z13.string().min(1).max(128),
+    workspaceId: z13.uuid(),
+    consumerId: z13.uuid(),
+    route: z13.enum(["codex_cli", "claude_code_cli"])
+  }).strict().optional(),
+  /** Local host authority comes only from the server's owner-bound Bot run. */
+  localComputer: z13.object({
+    botId: z13.uuid(),
+    ownerId: z13.string().min(1).max(128),
+    workspaceId: z13.uuid(),
+    policyVersion: z13.number().int().nonnegative().max(2147483647),
+    permission: z13.enum(["allow", "ask"])
+  }).strict().optional(),
+  /** Trusted server assignment; the model cannot choose a Bot or display. */
+  computer: z13.object({
+    botId: z13.uuid(),
+    ownerId: z13.string().min(1).max(128),
+    display: z13.string().regex(/^:[1-9][0-9]{0,2}$/),
+    policyVersion: z13.number().int().nonnegative().max(2147483647)
+  }).strict().optional(),
+  /**
+   * 4e3: the task's explicit user variables (workspace + matching repository secrets/env, NAME -> value).
+   * Cloud workers only. Passed into the task container through its own channel, never into the worker's
+   * env, and never written to the run journal.
+   */
+  taskEnv: z13.record(z13.string().regex(/^[A-Za-z_][A-Za-z0-9_]{0,127}$/), z13.string().max(65536)).optional(),
+  /**
+   * Names in `taskEnv` that are secrets (kind 'secret'; env vars are not listed). The daemon masks
+   * their values (raw + standard base64) in run output before anything is uploaded; the server
+   * masks again. Older daemons strip this field and rely on server-side masking only.
+   */
+  taskSecretNames: z13.array(z13.string().regex(/^[A-Za-z_][A-Za-z0-9_]{0,127}$/)).max(500).optional(),
+  /** Mock harness only: fixture name under `packages/daemon/fixtures`. */
+  fixture: z13.string().max(200).optional(),
+  /**
+   * The issue's branch (`mikka/<team>-<number>`, ADR 0024): every run of
+   * the issue pushes its verified commit here, so one pull request follows
+   * the issue across fix rounds. A run that starts a new worktree builds on
+   * this branch from the remote when it exists. Without it the daemon
+   * pushes the run's own branch.
+   */
+  pushBranch: z13.string().min(1).max(250).optional(),
+  /** Run by the daemon in the worktree after the agent submits. */
+  verifyCommand: z13.string().max(2e3).optional(),
+  /** Run lease; renewed through the device heartbeat. */
+  leaseExpiresAt: isoTime.optional(),
+  /**
+   * The Mikka MCP server for the agent inside this run: `report`, `ask` and
+   * `blocked` reach the person's Coordinator. Send `token` as a bearer token;
+   * it stops working when the run ends. Absent: the server could not issue
+   * one, and the run goes ahead without it.
+   */
+  mcp: z13.object({ url: z13.url(), token: z13.string().min(1).max(200), mailbox: z13.literal(true).optional() }).optional(),
+  /** Question continuation must not silently open a different session. */
+  /**
+   * What the orchestrator dispatched this run for (ADR 0023). `plan` writes a
+   * spec and proposes a split instead of changing code (ADR ORV-205).
+   */
+  kind: z13.enum(RUN_KINDS).optional(),
+  /**
+   * The earlier run this one continues (continue, fix, answer, a person's
+   * message): the daemon works on in that run's worktree, on this run's
+   * branch, so nothing the earlier run left uncommitted is lost.
+   */
+  continuesRunId: id.optional(),
+  /**
+   * The latest checkpoint of the attempt this run takes over after its
+   * machine went offline. Used only for a new worktree (another machine, or
+   * the earlier worktree is gone): it starts at `baseCommit` (the base
+   * branch when that commit is not here) with the patch applied.
+   */
+  resumeFrom: runCheckpointSchema.optional(),
+  /**
+   * The harness session to continue. A daemon that cannot resume starts a
+   * new session with `prompt`, which always carries the full brief.
+   */
+  resumeSessionId: z13.string().max(500).optional(),
+  requireSessionResume: z13.boolean().optional(),
+  preserveQuestionWorktree: z13.boolean().optional(),
+  questionId: z13.uuid().optional(),
+  /**
+   * What this run adds on top of the brief (a person's message, an answer,
+   * a fix request). A resumed session gets only this as its next message;
+   * a new session gets `prompt`, which already includes it.
+   */
+  followUp: z13.string().max(1e5).optional(),
+  /**
+   * The workspace's agent permissions and network allow-list (ADR 0028).
+   * Absent from an older server: the daemon applies the ADR 0009 defaults.
+   */
+  policy: runPolicySchema.optional(),
+  /** Trusted server revision for the exact run policy; older servers omit it. */
+  policyRevision: z13.string().regex(/^[a-f0-9]{64}$/).optional(),
+  /**
+   * The skills mounted on this run's agent and still enabled, resolved at
+   * claim time the way `policy` is. The daemon inlines them into the agent's
+   * brief and writes them under the run's directory. Absent from an older
+   * server: the run simply has none.
+   */
+  skills: z13.array(runSkillSchema).max(MAX_SKILLS_PER_RUN).optional(),
+  /** Server-minted assignment provenance; does not grant any policy permission. */
+  skillReceipt: skillAssignmentReceiptSchema.optional(),
+  /** Frozen by the server benchmark ledger; never extracted from model output. */
+  benchmark: runBenchmarkContext.optional()
+});
+var runPatchSchema = z13.object({
+  state: z13.enum([
+    "queued",
+    "preparing",
+    "running",
+    "waiting_input",
+    "finishing",
+    "succeeded",
+    "stopped",
+    "failed",
+    "cancelled"
+  ]),
+  sessionId: z13.string().max(500).nullable().optional(),
+  worktree: z13.string().max(4e3).nullable().optional(),
+  error: z13.string().max(1e4).nullable().optional(),
+  /** Set on every terminal state. */
+  stopReason: runStopReason.optional()
+});
+var runEventBatchSchema = z13.object({
+  fromSeq: z13.number().int().min(1),
+  chunks: z13.array(z13.looseObject({ type: z13.string() })).min(1).max(1e3)
+});
+var runEventsAccepted = z13.object({
+  /** Producer seq of the last chunk the server holds for this run. */
+  offset: z13.string()
+});
+var runCommandSchema = z13.discriminatedUnion("kind", [
+  z13.object({
+    kind: z13.literal("input"),
+    runId: id,
+    messageId: z13.uuid(),
+    text: z13.string().min(1).max(1e5)
+  }),
+  z13.object({ kind: z13.literal("stop"), runId: id })
+]);
+var runCommandsResponse = z13.object({
+  commands: z13.array(runCommandSchema).max(500)
+});
+var runCommandsAck = z13.object({
+  delivered: z13.array(z13.uuid()).max(500)
+});
+var FS_MAX_ENTRIES = 500;
+var fsBrowseRequest = z13.object({
+  /** Absolute path on the device; omitted: the device's home folder. */
+  path: z13.string().trim().min(1).max(4e3).optional(),
+  showHidden: z13.boolean().optional()
+});
+var fsPendingRequest = fsBrowseRequest.extend({ id: z13.uuid() });
+var fsRequestsResponse = z13.object({
+  requests: z13.array(fsPendingRequest).max(50)
+});
+var fsEntry = z13.object({
+  name: z13.string().max(1e3),
+  path: z13.string().max(4e3),
+  /** The folder is the top level of a git repo (it has a `.git`). */
+  isRepo: z13.boolean()
+});
+var fsListing = z13.object({
+  ok: z13.literal(true),
+  path: z13.string().max(4e3),
+  /** Null at the filesystem root. */
+  parent: z13.string().max(4e3).nullable(),
+  home: z13.string().max(4e3),
+  /** `darwin`, `linux`, `win32`: for path separators and wording. */
+  platform: z13.string().max(50),
+  entries: z13.array(fsEntry).max(FS_MAX_ENTRIES),
+  /** More folders existed than `FS_MAX_ENTRIES`. */
+  truncated: z13.boolean(),
+  /**
+   * The git repo `path` is in, if any: its top level and `origin` (or the
+   * first remote). This is what `device.addRepo` should be given.
+   */
+  repo: z13.object({
+    path: z13.string().max(4e3),
+    remoteUrl: z13.string().max(2e3).nullable()
+  }).nullable()
+});
+var FS_ERROR_CODES = [
+  "not_found",
+  "not_a_directory",
+  "denied",
+  "failed"
+];
+var fsFailure = z13.object({
+  ok: z13.literal(false),
+  code: z13.enum(FS_ERROR_CODES),
+  message: z13.string().max(1e3)
+});
+var fsResult = z13.discriminatedUnion("ok", [fsListing, fsFailure]);
+
+// ../protocol/src/orchestrator.ts
+import { z as z14 } from "zod";
+var minutes = (n) => n * 6e4;
+var orchestratorSettingsSchema = z14.object({
+  /** "Continue" prompts after a turn ended without a submit. */
+  maxContinuations: z14.number().int().min(0).max(20).default(3),
+  /** Resumes after the CLI crashed, before one fresh session. */
+  maxCrashRetries: z14.number().int().min(0).max(20).default(3),
+  /** Fix rounds after the daemon's verify failed. */
+  maxFixAttempts: z14.number().int().min(0).max(20).default(3),
+  /** "You seem stuck" prompts after a run stalled. */
+  maxStallRecoveries: z14.number().int().min(0).max(20).default(2),
+  /** No progress for this long while the lease is fresh = stalled. */
+  stalledAfterMs: z14.number().int().min(minutes(1)).default(minutes(10)),
+  /** A device offline this long is handed to a person (no auto switch). */
+  deviceOfflineEscalateMs: z14.number().int().min(0).default(minutes(30)),
+  /** An unanswered question frees its concurrency slot after this. */
+  questionSlotReleaseMs: z14.number().int().min(0).default(minutes(24 * 60)),
+  /** Automatic dispatches per issue per hour before a person looks. */
+  maxDispatchesPerHour: z14.number().int().min(1).max(100).default(6),
+  /** Wait before resuming a run that hit its quota (no reset time known). */
+  quotaBackoffMs: z14.number().int().min(0).default(minutes(15)),
+  /**
+   * How often an issue waiting on its pull request or CI asks GitHub again
+   * when no webhook arrived (ADR 0024).
+   */
+  ciRecheckMs: z14.number().int().min(3e4).default(minutes(2)),
+  /** A pushed commit with no checks after this long has no CI: it passes. */
+  ciNoChecksMs: z14.number().int().min(0).default(minutes(5)),
+  /** CI still running after this long goes to a person. */
+  ciTimeoutMs: z14.number().int().min(minutes(5)).default(minutes(120)),
+  /** Remote URL of the repo this project's issues run in. */
+  repoUrl: z14.string().max(2e3).optional()
+});
+var CRASH_BACKOFF_MS = [1e4, 6e4, minutes(5)];
+var UPSTREAM_RECHECK_MS = minutes(5);
+var PERSON_WAIT_DETAIL_CODES = [
+  "review",
+  // The planner wrote a spec; a person approves it, then its split (ADR ORV-205).
+  "plan_review",
+  "question",
+  "verify_failed",
+  "no_verify_command",
+  "no_submit",
+  "stalled",
+  "crashed",
+  "blocked",
+  "auth_expired",
+  "device_offline",
+  "agent_no_device",
+  "no_repo",
+  "repo_ambiguous",
+  "no_criteria",
+  "dispatch_loop",
+  "manual_advance",
+  "push_failed",
+  "pr_failed",
+  "pr_closed",
+  "ci_failed",
+  "ci_timeout",
+  "acceptance_failed"
+];
+var EXTERNAL_WAIT_DETAIL_CODES = [
+  "pr_opening",
+  "ci_pending",
+  "upstream",
+  "device_offline_recent",
+  "capacity",
+  "file_overlap",
+  "retry_backoff",
+  "quota"
+];
+var WAIT_DETAIL_CODES = [
+  ...PERSON_WAIT_DETAIL_CODES,
+  ...EXTERNAL_WAIT_DETAIL_CODES
+];
+var waitDetailSchema = z14.object({
+  code: z14.enum(WAIT_DETAIL_CODES),
+  params: z14.record(
+    z14.string(),
+    z14.union([
+      z14.string(),
+      z14.number(),
+      z14.array(z14.string()),
+      // `repo_ambiguous`: the repos a person can pick from.
+      z14.array(z14.record(z14.string(), z14.string()))
+    ])
+  ).optional()
+});
+var prChecksSchema = z14.object({
+  state: z14.enum(["pending", "success", "failure", "none"]),
+  /** Failed checks, for the fix round's brief and the issue page. */
+  failing: z14.array(
+    z14.object({
+      name: z14.string().max(500),
+      summary: z14.string().max(4e3).optional(),
+      url: z14.string().max(2e3).optional()
+    })
+  ).max(50),
+  total: z14.number().int().min(0)
+});
+var DEFAULT_BRANCH_TEMPLATE = "mikka/{team}-{number}";
+var BRANCH_FORBIDDEN = /[\s~^:?*[\\]|\.\.|@\{|\/\/|^\/|\/$/;
+var BRANCH_FORBIDDEN_HINT = "No spaces or ~ ^ : ? * [ \\ .. @{ //, and no leading or trailing /.";
+var hasControlCharacter = (value) => [...value].some((char) => {
+  const code = char.charCodeAt(0);
+  return code < 32 || code === 127;
+});
+var branchTemplateSchema = z14.string().trim().min(1).max(200).refine((value) => value.includes("{number}"), {
+  message: "The template must contain {number}."
+}).refine(
+  (value) => !BRANCH_FORBIDDEN.test(value) && !hasControlCharacter(value),
+  { message: BRANCH_FORBIDDEN_HINT }
+);
+var prBodyTemplateSchema = z14.string().max(2e4).nullable().optional();
+var REVIEW_CHECK_HARNESSES = [
+  "claude_code",
+  "codex",
+  "cursor"
+];
+var reviewRuleSchema = z14.object({
+  /** In Review needs an open pull request for the issue's branch (ADR 0024). */
+  requirePullRequest: z14.boolean().default(true),
+  /** ... and green CI on it. Ignored when no pull request is required. */
+  requireCi: z14.boolean().default(true),
+  /**
+   * The harness that must run the read-only check (ADR 0046). Null: any
+   * second agent on the device. A configured harness the device does not run
+   * means no check runs, exactly as if the device had no second agent.
+   */
+  checkHarness: z14.enum(REVIEW_CHECK_HARNESSES).nullable().default(null),
+  branchTemplate: branchTemplateSchema.default(DEFAULT_BRANCH_TEMPLATE),
+  /** `{key}`, `{title}` and `{summary}`; null keeps Mikka's default text. */
+  prBodyTemplate: prBodyTemplateSchema.default(null)
+});
+var DEFAULT_REVIEW_RULE = reviewRuleSchema.parse({});
+
+// ../protocol/src/platform.ts
+var NO_CAPABILITIES = Object.freeze({
+  "app.info": false,
+  "notifications.system": false,
+  "notifications.badge": false,
+  "device.localIdentity": false,
+  "device.pickRepo": false,
+  "quota.snapshot": false,
+  "preview.scheme": false,
+  "settings.local": false
+});
+var WEB_PLATFORM = Object.freeze({
+  runtime: "web",
+  bridge: null,
+  capabilities: NO_CAPABILITIES
+});
+
+// ../protocol/src/preview.ts
+import { z as z15 } from "zod";
+var PREVIEW_MAX_LENGTH = 5 * 1024 * 1024;
+var previewHtml = z15.string().max(PREVIEW_MAX_LENGTH);
+var DIRECTIVES = [
+  "default-src 'none'",
+  "script-src 'unsafe-inline'",
+  "style-src 'unsafe-inline'",
+  "img-src data: blob:",
+  "font-src data:",
+  "media-src data: blob:",
+  "base-uri 'none'",
+  "form-action 'none'"
+];
+var PREVIEW_CSP_HEADER = ["sandbox allow-scripts", ...DIRECTIVES].join(
+  "; "
+);
+var META = `<meta http-equiv="Content-Security-Policy" content="${DIRECTIVES.join("; ")}">`;
+
+// ../protocol/src/profile.ts
+import { z as z16 } from "zod";
+var usernameSchema = z16.string().trim().min(3, "At least 3 characters.").max(32, "At most 32 characters.").regex(
+  /^[a-z0-9][a-z0-9_-]*$/,
+  "Start with a letter or digit; lowercase letters, digits, - and _ only."
+);
+var displayNameSchema = z16.string().trim().min(1, "A name is required.").max(80, "At most 80 characters.");
+var avatarUrlSchema = z16.url().max(2048).refine((value) => /^https?:\/\//.test(value), "Use an http(s) URL.");
+var AVATAR_MAX_BYTES = 5 * 1024 * 1024;
+var AVATAR_CONTENT_TYPES = [
+  "image/png",
+  "image/jpeg",
+  "image/webp",
+  "image/gif"
+];
+var avatarPresignRequest = z16.object({
+  contentType: z16.enum(AVATAR_CONTENT_TYPES),
+  /** Bytes, checked against AVATAR_MAX_BYTES. */
+  size: z16.number().int().positive()
+});
+var avatarPresignResponse = z16.object({
+  uploadUrl: z16.url(),
+  /** What to store in `user.image` once the PUT has succeeded. */
+  publicUrl: avatarUrlSchema,
+  expiresIn: z16.number().int().positive()
+});
+
+// ../protocol/src/relay.ts
+import {
+  asSchema,
+  safeValidateUIMessages,
+  uiMessageChunkSchema
+} from "ai";
+import { z as z17 } from "zod";
+var RELAY_PROTOCOL_VERSION = 1;
+var MAX_INPUT_LENGTH = 2e4;
+var uuid = z17.uuid();
+var runEvent = z17.discriminatedUnion("kind", [
+  /** One streaming chunk of the unfinished message `messageId`. */
+  z17.object({
+    kind: z17.literal("chunk"),
+    messageId: uuid,
+    chunk: z17.looseObject({ type: z17.string() })
+  }),
+  /** A finished message; persisted as a `message` row, then fanned out. */
+  z17.object({
+    kind: z17.literal("message.final"),
+    /** Order of the message within the run. */
+    seq: z17.number().int().min(0),
+    message: z17.looseObject({
+      id: uuid,
+      role: z17.enum(["system", "user", "assistant"]),
+      parts: z17.array(z17.looseObject({ type: z17.string() }))
+    })
+  }),
+  z17.object({
+    kind: z17.literal("run.status"),
+    status: z17.enum([
+      "queued",
+      "preparing",
+      "running",
+      "waiting_input",
+      "finishing",
+      "succeeded",
+      "failed",
+      "cancelled"
+    ])
+  })
+]);
+var chunkSchema = asSchema(uiMessageChunkSchema);
+var v = z17.literal(RELAY_PROTOCOL_VERSION);
+var presenceView = z17.discriminatedUnion("type", [
+  z17.object({ type: z17.literal("issue"), id: uuid }),
+  z17.object({ type: z17.literal("project"), id: uuid })
+]);
+var relayClientMessage = z17.discriminatedUnion("type", [
+  z17.object({
+    v,
+    type: z17.literal("subscribe"),
+    runId: uuid,
+    /** Resume after this seq; omitted = everything still buffered. */
+    after: z17.number().int().min(0).optional()
+  }),
+  z17.object({ v, type: z17.literal("unsubscribe"), runId: uuid }),
+  z17.object({ v, type: z17.literal("publish"), runId: uuid, event: runEvent }),
+  /**
+   * A person's message to the running agent (ADR 0018). Saved as a `user`
+   * message row with this id (a re-send with the same id is applied once),
+   * then handed to the run's daemon, which marks it delivered.
+   */
+  z17.object({
+    v,
+    type: z17.literal("send"),
+    runId: uuid,
+    messageId: uuid,
+    text: z17.string().trim().min(1).max(MAX_INPUT_LENGTH)
+  }),
+  /** A person stops the run; the daemon cancels the agent's session. */
+  z17.object({ v, type: z17.literal("stop"), runId: uuid }),
+  /**
+   * Says where this connection is looking, in one workspace (ADR 0049). Sent
+   * once when a page opens and again every `PRESENCE_HEARTBEAT_MS`; `view`
+   * null keeps the member online without naming a page. Never persisted.
+   */
+  z17.object({
+    v,
+    type: z17.literal("presence"),
+    workspaceId: uuid,
+    view: presenceView.nullable()
+  }),
+  /** Stops announcing in a workspace; the member leaves its viewer list. */
+  z17.object({ v, type: z17.literal("presence.leave"), workspaceId: uuid })
+]);
+var RELAY_ERROR_CODES = [
+  "bad_message",
+  "unauthorized",
+  "forbidden",
+  "update_required",
+  "rate_limited",
+  "persist_failed",
+  /** `send` / `stop` to a run that is not active (queued or ended). */
+  "run_not_active",
+  /** `presence` for a workspace the caller is not a member of (ADR 0049). */
+  "not_a_member"
+];
+var relayErrorCode = z17.enum(RELAY_ERROR_CODES);
+var relayServerMessage = z17.discriminatedUnion("type", [
+  z17.object({
+    v,
+    type: z17.literal("subscribed"),
+    runId: uuid,
+    latestSeq: z17.number().int().min(0)
+  }),
+  z17.object({
+    v,
+    type: z17.literal("event"),
+    runId: uuid,
+    seq: z17.number().int().min(1),
+    event: runEvent
+  }),
+  /**
+   * `send` / `stop` was saved and is on its way to the run's device.
+   * `messageId` is set for `send`.
+   */
+  z17.object({
+    v,
+    type: z17.literal("accepted"),
+    runId: uuid,
+    request: z17.enum(["send", "stop"]),
+    messageId: uuid.optional()
+  }),
+  /** Publisher acknowledgment with the seq the hub assigned. */
+  z17.object({
+    v,
+    type: z17.literal("ack"),
+    runId: uuid,
+    seq: z17.number().int().min(1)
+  }),
+  /**
+   * Everyone the server sees online in this workspace, and where each is
+   * looking (ADR 0049). A snapshot after every change, so a client never has
+   * to merge deltas; `lastSeenAt` is the server's clock.
+   */
+  z17.object({
+    v,
+    type: z17.literal("presence"),
+    workspaceId: uuid,
+    members: z17.array(
+      z17.object({
+        userId: uuid,
+        view: presenceView.nullable(),
+        lastSeenAt: z17.number().int()
+      })
+    )
+  }),
+  z17.object({
+    v,
+    type: z17.literal("error"),
+    code: relayErrorCode,
+    message: z17.string(),
+    runId: uuid.optional(),
+    minVersion: z17.string().optional()
+  })
+]);
+
+// ../protocol/src/version.ts
+var import_semver = __toESM(require_semver2(), 1);
+import { z as z18 } from "zod";
+var CLIENT_VERSION_HEADER = "x-mikka-client-version";
+var CLIENT_KINDS = ["desktop", "mobile"];
+var clientKind = z18.enum(CLIENT_KINDS);
+var updateRequiredError = z18.object({
+  error: z18.literal("update_required"),
+  minVersion: z18.string(),
+  message: z18.string()
+});
+
+// ../protocol/src/coordinator.ts
+import { z as z19 } from "zod";
+var coordinatorRuntimeSchema = z19.discriminatedUnion("harness", [
+  z19.object({ harness: z19.literal("ai_sdk") }).strict(),
+  z19.object({ harness: z19.enum(["claude_code", "codex"]), deviceId: z19.uuid(), model: z19.string().trim().min(1).max(120).optional() }).strict()
+]);
+var coordinatorToolSpecSchema = z19.object({
+  name: z19.string().regex(/^[A-Za-z][A-Za-z0-9_]{0,63}$/),
+  description: z19.string().max(2e4),
+  inputSchema: z19.record(z19.string(), z19.unknown())
+});
+var nativeCoordinatorJobSchema = z19.object({
+  id: z19.uuid(),
+  harness: z19.enum(["claude_code", "codex"]),
+  model: z19.string().optional(),
+  instructions: z19.string().min(1).max(2e5),
+  context: z19.string().min(1).max(5e5),
+  tools: z19.array(coordinatorToolSpecSchema).max(100),
+  expiresAt: z19.iso.datetime()
+});
+var nativeCoordinatorClaimSchema = z19.object({ job: nativeCoordinatorJobSchema.nullable() });
+var nativeCoordinatorCommandSchema = z19.discriminatedUnion("type", [
+  z19.object({ type: z19.literal("tool"), callId: z19.string().min(1).max(200), name: z19.string().min(1).max(64), input: z19.record(z19.string(), z19.unknown()) }).strict(),
+  z19.object({ type: z19.literal("complete"), text: z19.string().min(1).max(2e5).refine((value) => value.trim().length > 0) }).strict(),
+  z19.object({ type: z19.literal("failed") }).strict()
+]);
+var nativeCoordinatorToolResultSchema = z19.discriminatedUnion("status", [
+  z19.object({ status: z19.literal("pending") }),
+  z19.object({ status: z19.literal("done"), output: z19.unknown() })
+]);
+
+// ../protocol/src/computer.ts
+import { z as z20 } from "zod";
+var machineStateSchema = z20.enum(["sleeping", "waking", "running", "error"]);
+var controlStateSchema = z20.enum(["agent", "user", "idle"]);
+var computerToolSchema = z20.enum(["click", "type", "key", "scroll", "screenshot"]);
+var screenRectSchema = z20.object({ x: z20.number(), y: z20.number(), w: z20.number().nonnegative(), h: z20.number().nonnegative() });
+var computerActionSchema = z20.object({ tool: computerToolSchema, x: z20.number().optional(), y: z20.number().optional(), text: z20.string().optional(), rect: screenRectSchema.optional() });
+var lastActionSchema = computerActionSchema.omit({ text: true }).extend({ at: z20.iso.datetime() });
+var approvalViewSchema = z20.object({
+  id: z20.string(),
+  digest: z20.string(),
+  runId: z20.string(),
+  botId: z20.string(),
+  action: computerActionSchema,
+  summary: z20.string(),
+  expiresAt: z20.iso.datetime()
+});
+var computerStateSchema = z20.object({
+  machine: machineStateSchema,
+  control: controlStateSchema,
+  controlledBy: z20.object({ userId: z20.string() }).optional(),
+  lastAction: lastActionSchema.optional(),
+  pendingApproval: approvalViewSchema.optional()
+});
+var viewerModeSchema = z20.enum(["view", "control"]);
+var viewerRequestSchema = z20.object({ mode: viewerModeSchema }).strict();
+var viewerGrantSchema = z20.object({ url: z20.url({ protocol: /^wss$/ }), expiresAt: z20.iso.datetime() });
+var createBotSchema = z20.object({ name: z20.string().trim().min(1).max(120) }).strict();
+var botViewSchema = z20.object({ id: z20.uuid(), name: z20.string().min(1).max(120) });
+var approvalDecisionSchema = z20.object({ digest: z20.string(), decision: z20.enum(["approve", "deny"]), scope: z20.enum(["once", "run"]) }).strict();
+var computerTaskStateSchema = z20.enum(["working", "approval", "done", "failed"]);
+var computerTaskSchema = z20.object({ botId: z20.string(), runId: z20.string(), task: z20.string(), state: computerTaskStateSchema, approvalId: z20.string().optional() });
+var computerEventSchema = z20.discriminatedUnion("type", [
+  z20.object({ type: z20.literal("computer.machine"), state: machineStateSchema }),
+  z20.object({ type: z20.literal("computer.control"), botId: z20.string(), control: controlStateSchema, controlledBy: z20.object({ userId: z20.string() }).optional() }),
+  z20.object({ type: z20.literal("computer.action"), botId: z20.string(), lastAction: lastActionSchema }),
+  z20.object({ type: z20.literal("computer.approval"), botId: z20.string(), approval: approvalViewSchema.nullable() })
+]);
+var reviewDigestSchema = z20.string().regex(/^[a-f0-9]{64}$/);
+var localComputerCall = z20.discriminatedUnion("name", [
+  z20.object({ name: z20.literal("get_desktop_state"), arguments: z20.object({}).strict() }).strict(),
+  z20.object({ name: z20.literal("click"), arguments: z20.object({ x: z20.number().int().min(0).max(1e5), y: z20.number().int().min(0).max(1e5) }).strict() }).strict(),
+  z20.object({ name: z20.literal("type_text"), arguments: z20.object({ text: z20.string().min(1).max(8e3) }).strict() }).strict(),
+  z20.object({ name: z20.literal("press_key"), arguments: z20.object({
+    key: z20.string().regex(/^(?:[\x20-\x7e]|enter|return|tab|escape|space|backspace|delete|insert|home|end|pageup|pagedown|up|down|left|right|f(?:[1-9]|1[0-2]))$/),
+    modifiers: z20.array(z20.enum(["ctrl", "shift", "alt", "super"])).max(4).refine((items) => new Set(items).size === items.length).optional()
+  }).strict() }).strict(),
+  z20.object({ name: z20.literal("scroll"), arguments: z20.object({ direction: z20.enum(["up", "down", "left", "right"]), amount: z20.number().int().min(1).max(50), x: z20.number().int().min(0).max(1e5), y: z20.number().int().min(0).max(1e5) }).strict() }).strict()
+]);
+var localComputerRequest = z20.object({
+  id: z20.uuid(),
+  runId: z20.uuid(),
+  target: reviewDigestSchema,
+  display: z20.string().regex(/^:[1-9][0-9]{0,2}$/).optional(),
+  call: localComputerCall,
+  expiresAt: z20.number().int().positive(),
+  digest: reviewDigestSchema
+}).strict();
+var localComputerDecision = z20.object({ id: z20.uuid(), digest: reviewDigestSchema, approve: z20.boolean() }).strict();
+var computerSyncBody = z20.object({ requests: z20.array(localComputerRequest).max(20) }).strict();
+var computerSyncResponse = z20.object({ decisions: z20.array(localComputerDecision).max(20) }).strict();
+
+// ../protocol/src/subscription.ts
+import { z as z21 } from "zod";
+var id2 = z21.string().min(1).max(128);
+var subscriptionRouteSchema = z21.enum([
+  "codex_cli",
+  "claude_code_cli",
+  "codex_cpa",
+  "claude_cpa",
+  "openai_siwc"
+]);
+var subscriptionConnectionSchema = z21.object({
+  id: id2,
+  ownerId: id2,
+  workspaceId: id2,
+  provider: z21.enum(["openai", "anthropic"]),
+  state: z21.enum([
+    "pending",
+    "connected",
+    "reconnect_required",
+    "disconnected"
+  ]),
+  // Increment on reconnect/disconnect. Old bindings cannot become valid again.
+  revision: z21.number().int().positive(),
+  quota: quotaSnapshotSchema
+}).strict();
+var subscriptionBindingSchema = z21.object({
+  id: id2,
+  ownerId: id2,
+  workspaceId: id2,
+  // An agent or assistant session selected explicitly by the owner.
+  consumerId: id2,
+  connectionId: id2,
+  connectionRevision: z21.number().int().positive(),
+  route: subscriptionRouteSchema
+}).strict();
+var nativeBrokerContextSchema = z21.object({
+  route: z21.enum(["codex_cli", "claude_code_cli"]),
+  modelId: z21.string().min(1).max(128),
+  revision: z21.number().int().positive(),
+  accountId: z21.string().min(1).max(512),
+  plan: z21.string().max(40).optional(),
+  expiresAt: z21.iso.datetime()
+}).strict();
+
+// src/login.ts
+import { z as z26 } from "zod";
+
+// src/errors.ts
+var DaemonError = class extends Error {
+  constructor(code, message, data) {
+    super(message);
+    this.code = code;
+    this.data = data;
+    this.name = "DaemonError";
+  }
+  code;
+  data;
+};
+var ServerUnreachableError = class extends DaemonError {
+  constructor(cause) {
+    super(DAEMON_RPC_ERRORS.serverUnreachable, "Server unreachable");
+    this.cause = cause;
+  }
+};
+
+// package.json
+var package_default = {
+  name: "@mikka/daemon",
+  version: "0.0.3",
+  description: "Local Mikka daemon: runs agents through the user's own CLIs",
+  type: "module",
+  private: true,
+  license: "AGPL-3.0-only",
+  bin: {
+    mikka: "./dist/mikka.js"
+  },
+  exports: {
+    ".": "./src/main.ts",
+    "./cli": "./src/cli.ts",
+    "./client": "./src/rpc/client.ts",
+    "./env": "./src/env.ts",
+    "./paths": "./src/paths.ts",
+    "./http-link": "./src/server-link-http.ts",
+    "./login": "./src/login.ts",
+    "./log": "./src/log.ts",
+    "./sandbox": "./src/agents/sandbox.ts",
+    "./coordinator": "./src/coordinator/index.ts"
+  },
+  scripts: {
+    daemon: "tsx bin/mikka.ts daemon",
+    dev: "tsx watch bin/mikka.ts daemon --dev --server memory",
+    typecheck: "tsgo --noEmit -p tsconfig.json",
+    test: "vitest run && pnpm test:mailbox-cli && pnpm test:repository-identity",
+    "test:mailbox-cli": "node --import tsx --test --test-timeout=60000 test/run-mailbox.node-test.ts",
+    "codex:types": 'codex app-server generate-ts --out "${TMPDIR:-/tmp}/mikka-codex-types" && echo "Generated; compare v2/ with src/adapters/codex-protocol.ts"',
+    "test:real": "MIKKA_REAL_AGENTS=${MIKKA_REAL_AGENTS:-claude_code,codex,cursor} vitest run test/real-agents.test.ts",
+    "test:changed": "vitest run --changed origin/main --passWithNoTests",
+    build: "node scripts/build.mjs",
+    "test:package": "node --test test/package.test.mjs",
+    "test:repository-identity": "node --experimental-strip-types --test test/repository-identity-pure.node-test.ts"
+  },
+  dependencies: {
+    "@agentclientprotocol/sdk": "1.9.0",
+    "@anthropic-ai/claude-agent-sdk": "^0.3.305",
+    "@anthropic-ai/sandbox-runtime": "0.0.80",
+    "@mikka/protocol": "workspace:*",
+    ai: "7.0.142",
+    execa: "10.1.1",
+    pino: "10.4.0",
+    "proper-lockfile": "4.1.2",
+    "rotating-file-stream": "3.2.10",
+    "simple-git": "4.0.2",
+    "vscode-jsonrpc": "9.0.3",
+    zod: "4.6.7"
+  },
+  devDependencies: {
+    "@mikka/config": "workspace:*",
+    "@types/node": "24.19.2",
+    "@types/proper-lockfile": "4.1.4",
+    tsx: "4.23.15",
+    esbuild: "0.28.2",
+    vitest: "5.0.5"
+  },
+  engines: {
+    node: ">=24"
+  },
+  gitHead: "4d1f09bda63e1b86a6cf08c4c7f4dc159b2938a2"
+};
+
+// src/paths.ts
+var DAEMON_VERSION = package_default.version;
+
+// src/server-link-http.ts
+import { z as z25 } from "zod";
+
+// ../protocol/src/capture.ts
+import { z as z22 } from "zod";
+var CAPTURE_CONTENT_TYPES = [
+  "image/png",
+  "image/jpeg",
+  "image/webp",
+  "video/mp4",
+  "video/webm"
+];
+var CAPTURE_KINDS = ["image", "video"];
+var CAPTURE_SOURCES = ["cloud_computer", "local"];
+var CAPTURE_MAX_BYTES = {
+  image: 1e7,
+  video: 1e8
+};
+var RECORDING_MAX_SECONDS = 300;
+var CAPTURE_TITLE_MAX = 200;
+var sha256 = z22.string().regex(/^[a-f0-9]{64}$/);
+var title = z22.string().trim().min(1).max(CAPTURE_TITLE_MAX);
+var captureUploadRequest = z22.object({
+  /** Stable client id, persisted before the first network attempt. */
+  captureId: z22.uuid().optional(),
+  title,
+  contentType: z22.enum(CAPTURE_CONTENT_TYPES),
+  size: z22.number().int().min(1).max(CAPTURE_MAX_BYTES.video),
+  sha256
+}).strict();
+var captureUploadTarget = z22.discriminatedUnion("target", [
+  z22.object({ target: z22.literal("storage"), url: z22.url({ protocol: /^https$/ }), headers: z22.record(z22.string(), z22.string()) }),
+  z22.object({ target: z22.literal("server") })
+]);
+var captureUploadResponse = z22.object({
+  captureId: z22.uuid(),
+  upload: captureUploadTarget
+});
+var captureView = z22.object({
+  id: z22.uuid(),
+  kind: z22.enum(CAPTURE_KINDS),
+  contentType: z22.enum(CAPTURE_CONTENT_TYPES),
+  title: z22.string(),
+  size: z22.number().int().nonnegative(),
+  durationMs: z22.number().int().nonnegative().nullable(),
+  source: z22.enum(CAPTURE_SOURCES),
+  createdAt: z22.iso.datetime()
+});
+var captureCompleteResponse = z22.object({ capture: captureView });
+var screenCaptureRequest = z22.discriminatedUnion("action", [
+  z22.object({ action: z22.literal("screenshot"), title }).strict(),
+  z22.object({ action: z22.literal("start_recording"), title, maxSeconds: z22.number().int().min(5).max(RECORDING_MAX_SECONDS).optional() }).strict(),
+  z22.object({ action: z22.literal("stop_recording") }).strict()
+]);
+var screenCaptureResponse = z22.discriminatedUnion("action", [
+  z22.object({ action: z22.literal("screenshot"), capture: captureView }),
+  z22.object({ action: z22.literal("start_recording"), recordingId: z22.uuid(), stopsAt: z22.iso.datetime() }),
+  z22.object({ action: z22.literal("stop_recording"), capture: captureView })
+]);
+
+// src/run-mailbox.ts
+import { z as z24 } from "zod";
+
+// ../protocol/src/mailbox.ts
+import { z as z23 } from "zod";
+var mailboxSend = z23.object({ to: z23.uuid(), key: z23.uuid().describe("Stable idempotency key; reuse only to retry this exact envelope."), text: z23.string().trim().min(1).max(4e3), replyTo: z23.uuid().optional() }).strict();
+var mailboxAck = z23.object({ ids: z23.array(z23.uuid()).max(50) }).strict();
+var mailboxInputs = {
+  mailbox_recipients: z23.object({}).strict(),
+  mailbox_send: mailboxSend,
+  mailbox_inbox: z23.object({}).strict(),
+  mailbox_ack: mailboxAck,
+  mailbox_sent: z23.object({}).strict()
+};
+
+// src/run-mailbox.ts
+var requestSchema = z24.union([
+  z24.object({ operation: z24.literal("list") }).strict(),
+  z24.object({ operation: z24.literal("call"), name: z24.enum(Object.keys(mailboxInputs)), arguments: z24.unknown() }).strict()
+]);
+
+// src/server-link-http.ts
+var deviceSessionRejection = z25.object({ error: z25.enum(["Unauthorized", "authRequired"]) }).strict();
+function serverUrl(base, path) {
+  return new URL(`${base.replace(/\/+$/, "")}${path}`);
+}
+
+// src/login.ts
+var DEVICE_CODE_PATH = `${AUTH_BASE_PATH}/device/code`;
+var DEVICE_TOKEN_PATH = `${AUTH_BASE_PATH}/device/token`;
+var DEVICE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
+var deviceCodeResponse = z26.object({
+  device_code: z26.string().min(1),
+  user_code: z26.string().min(1),
+  verification_uri: z26.string(),
+  verification_uri_complete: z26.string().optional(),
+  expires_in: z26.number().positive(),
+  interval: z26.number().positive().default(5)
+});
+var tokenResponse = z26.object({ access_token: z26.string().regex(/^orv_[A-Za-z0-9_-]{43}$/) });
+var errorResponse = z26.object({ error: z26.string() });
+var LoginError = class extends DaemonError {
+  constructor(reason, message) {
+    super(4003, message);
+    this.reason = reason;
+  }
+  reason;
+};
+async function post(options, path, body) {
+  const fetchImpl = options.fetchImpl ?? fetch;
+  let response;
+  try {
+    response = await fetchImpl(serverUrl(options.serverUrl, path), {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        [CLIENT_VERSION_HEADER]: DAEMON_VERSION
+      },
+      body: JSON.stringify(body),
+      signal: options.signal
+    });
+  } catch (error) {
+    throw new ServerUnreachableError(error);
+  }
+  return {
+    status: response.status,
+    json: await response.json().catch(() => null)
+  };
+}
+async function deviceLogin(options) {
+  const sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+  const started = await post(options, DEVICE_CODE_PATH, {
+    client_id: DAEMON_CLIENT_ID
+  });
+  const code = deviceCodeResponse.safeParse(started.json);
+  if (started.status !== 200 || !code.success)
+    throw new LoginError(
+      "failed",
+      `The server did not start a device login (${started.status}).`
+    );
+  options.prompt(code.data);
+  let intervalMs = code.data.interval * 1e3;
+  const deadline = Date.now() + code.data.expires_in * 1e3;
+  while (Date.now() < deadline) {
+    await sleep(intervalMs);
+    if (options.signal?.aborted)
+      throw new LoginError("failed", "Login cancelled.");
+    const polled = await post(options, DEVICE_TOKEN_PATH, {
+      grant_type: DEVICE_GRANT_TYPE,
+      device_code: code.data.device_code,
+      client_id: DAEMON_CLIENT_ID
+    });
+    const token = tokenResponse.safeParse(polled.json);
+    if (polled.status === 200 && token.success) return token.data.access_token;
+    const error = errorResponse.safeParse(polled.json);
+    switch (error.success ? error.data.error : "") {
+      case "authorization_pending":
+        continue;
+      case "slow_down":
+        intervalMs += 5e3;
+        continue;
+      case "access_denied":
+        throw new LoginError("access_denied", "The login was denied.");
+      case "expired_token":
+        throw new LoginError("expired_token", "The code expired; try again.");
+      default:
+        throw new LoginError(
+          "failed",
+          `Device login failed (${polled.status}${error.success ? `, ${error.data.error}` : ""}).`
+        );
+    }
+  }
+  throw new LoginError("expired_token", "The code expired; try again.");
+}
+async function registrationLogin(options) {
+  if (!/^orv_[A-Za-z0-9_-]{43}$/.test(options.token)) throw new LoginError("failed", "Invalid registration token.");
+  const response = await (options.fetchImpl ?? fetch)(serverUrl(options.serverUrl, "/v1/devices/enroll"), {
+    method: "POST",
+    headers: { authorization: `Bearer ${options.token}` },
+    redirect: "error",
+    signal: AbortSignal.timeout(3e4)
+  });
+  const body = await response.json().catch(() => null);
+  const parsed = tokenResponse.safeParse({ access_token: body?.credential });
+  if (!response.ok || !parsed.success) throw new LoginError("failed", "Device registration token expired or already used.");
+  return parsed.data.access_token;
+}
+export {
+  DEVICE_CODE_PATH,
+  DEVICE_GRANT_TYPE,
+  DEVICE_TOKEN_PATH,
+  LoginError,
+  deviceLogin,
+  registrationLogin
+};