@cybedefend/vibedefend 1.4.2 → 1.4.4

package/dist/hook-runner.js

@@ -39,475 +39,880 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// node_modules/.pnpm/re2-wasm@1.0.2/node_modules/re2-wasm/build/wasm/re2.js
-var require_re2 = __commonJS({
-  "node_modules/.pnpm/re2-wasm@1.0.2/node_modules/re2-wasm/build/wasm/re2.js"(exports, module) {
-    var Module = typeof Module !== "undefined" ? Module : {};
-    var moduleOverrides = {};
-    var key;
-    for (key in Module) {
-      if (Module.hasOwnProperty(key)) {
-        moduleOverrides[key] = Module[key];
-      }
-    }
-    var arguments_ = [];
-    var thisProgram = "./this.program";
-    var quit_ = function(status, toThrow) {
-      throw toThrow;
+// node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/quote.js
+var require_quote = __commonJS({
+  "node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/quote.js"(exports, module) {
+    "use strict";
+    var OPS = (
+      /** @type {const} */
+      [
+        "||",
+        "&&",
+        ";;",
+        "|&",
+        "<(",
+        "<<<",
+        ">>",
+        ">&",
+        "<&",
+        "&",
+        ";",
+        "(",
+        ")",
+        "|",
+        "<",
+        ">"
+      ]
+    );
+    var LINE_TERMINATORS = /[\n\r\u2028\u2029]/;
+    var GLOB_SHELL_SPECIAL = /[\s#!"$&'():;<=>@\\^`|]/g;
+    module.exports = function quote(xs) {
+      return xs.map(function(s) {
+        if (s === "") {
+          return (
+            /** @type {const} */
+            "''"
+          );
+        }
+        if (s && typeof s === "object") {
+          if ("op" in s && s.op === "glob") {
+            if (typeof s.pattern !== "string") {
+              throw new TypeError("glob token requires a string `pattern`");
+            }
+            if (LINE_TERMINATORS.test(s.pattern)) {
+              throw new TypeError("glob `pattern` must not contain line terminators");
+            }
+            return s.pattern.replace(GLOB_SHELL_SPECIAL, "\\$&");
+          }
+          if ("op" in s && typeof s.op === "string") {
+            if (OPS.indexOf(s.op) < 0) {
+              throw new TypeError("invalid `op` value: " + JSON.stringify(s.op));
+            }
+            return s.op.replace(/[\s\S]/g, "\\$&");
+          }
+          if ("comment" in s && typeof s.comment === "string") {
+            if (LINE_TERMINATORS.test(s.comment)) {
+              throw new TypeError("`comment` must not contain line terminators");
+            }
+            return "#" + s.comment;
+          }
+          throw new TypeError("unrecognized object token shape");
+        }
+        if (/["\s\\]/.test(s) && !/'/.test(s)) {
+          return "'" + s.replace(/(['])/g, "\\$1") + "'";
+        }
+        if (/["'\s]/.test(s)) {
+          return '"' + s.replace(/(["\\$`!])/g, "\\$1") + '"';
+        }
+        return String(s).replace(/([A-Za-z]:)?([#!"$&'()*,:;<=>?@[\\\]^`{|}~])/g, "$1\\$2");
+      }).join(" ");
     };
-    var ENVIRONMENT_IS_WEB = false;
-    var ENVIRONMENT_IS_WORKER = false;
-    var ENVIRONMENT_IS_NODE = false;
-    var ENVIRONMENT_IS_SHELL = false;
-    ENVIRONMENT_IS_WEB = typeof window === "object";
-    ENVIRONMENT_IS_WORKER = typeof importScripts === "function";
-    ENVIRONMENT_IS_NODE = typeof process === "object" && typeof process.versions === "object" && typeof process.versions.node === "string";
-    ENVIRONMENT_IS_SHELL = !ENVIRONMENT_IS_WEB && !ENVIRONMENT_IS_NODE && !ENVIRONMENT_IS_WORKER;
-    if (Module["ENVIRONMENT"]) {
-      throw new Error("Module.ENVIRONMENT has been deprecated. To force the environment, use the ENVIRONMENT compile-time option (for example, -s ENVIRONMENT=web or -s ENVIRONMENT=node)");
+  }
+});
+
+// node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/parse.js
+var require_parse = __commonJS({
+  "node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/parse.js"(exports, module) {
+    "use strict";
+    var CONTROL = (
+      /** @type {const} */
+      "(?:" + /** @type {const} */
+      [
+        "\\|\\|",
+        "\\&\\&",
+        ";;",
+        "\\|\\&",
+        "\\<\\(",
+        "\\<\\<\\<",
+        ">>",
+        ">\\&",
+        "<\\&",
+        "[&;()|<>]"
+      ].join(
+        /** @type {const} */
+        "|"
+      ) + /** @type {const} */
+      ")"
+    );
+    var controlRE = new RegExp("^" + CONTROL + "$");
+    var META = (
+      /** @type {const} */
+      "|&;()<> \\t"
+    );
+    var SINGLE_QUOTE = (
+      /** @type {const} */
+      "'([^']*?)'"
+    );
+    var DOUBLE_QUOTE = (
+      /** @type {const} */
+      '"((\\\\"|[^"])*?)"'
+    );
+    var hash = /^#$/;
+    var SQ = (
+      /** @type {const} */
+      "'"
+    );
+    var DQ = (
+      /** @type {const} */
+      '"'
+    );
+    var DS = (
+      /** @type {const} */
+      "$"
+    );
+    var TOKEN = "";
+    var mult = (
+      /** @type {const} */
+      4294967296
+    );
+    for (i = 0; i < 4; i++) {
+      TOKEN += (mult * Math.random()).toString(16);
     }
-    var scriptDirectory = "";
-    function locateFile(path) {
-      if (Module["locateFile"]) {
-        return Module["locateFile"](path, scriptDirectory);
+    var i;
+    var startsWithToken = new RegExp("^" + TOKEN);
+    function matchAll(s, r) {
+      var origIndex = r.lastIndex;
+      var matches = [];
+      var matchObj;
+      while (matchObj = r.exec(s)) {
+        matches[matches.length] = matchObj;
+        if (r.lastIndex === matchObj.index) {
+          r.lastIndex += 1;
+        }
       }
-      return scriptDirectory + path;
+      r.lastIndex = origIndex;
+      return matches;
     }
-    var read_;
-    var readAsync;
-    var readBinary;
-    var setWindowTitle;
-    var nodeFS;
-    var nodePath;
-    if (ENVIRONMENT_IS_NODE) {
-      if (ENVIRONMENT_IS_WORKER) {
-        scriptDirectory = __require("path").dirname(scriptDirectory) + "/";
-      } else {
-        scriptDirectory = __dirname + "/";
-      }
-      read_ = function shell_read(filename, binary) {
-        if (!nodeFS) nodeFS = __require("fs");
-        if (!nodePath) nodePath = __require("path");
-        filename = nodePath["normalize"](filename);
-        return nodeFS["readFileSync"](filename, binary ? null : "utf8");
-      };
-      readBinary = function readBinary2(filename) {
-        var ret = read_(filename, true);
-        if (!ret.buffer) {
-          ret = new Uint8Array(ret);
-        }
-        assert(ret.buffer);
-        return ret;
-      };
-      if (process["argv"].length > 1) {
-        thisProgram = process["argv"][1].replace(/\\/g, "/");
+    function getVar(env, pre, key) {
+      var r = typeof env === "function" ? env(key) : env[key];
+      if (typeof r === "undefined" && key != "") {
+        r = "";
+      } else if (typeof r === "undefined") {
+        r = "$";
       }
-      arguments_ = process["argv"].slice(2);
-      if (typeof module !== "undefined") {
-        module["exports"] = Module;
+      if (typeof r === "object") {
+        return pre + TOKEN + JSON.stringify(r) + TOKEN;
       }
-      quit_ = function(status) {
-        process["exit"](status);
-      };
-      Module["inspect"] = function() {
-        return "[Emscripten Module object]";
-      };
-    } else if (ENVIRONMENT_IS_SHELL) {
-      if (typeof read != "undefined") {
-        read_ = function shell_read(f) {
-          return read(f);
-        };
+      return pre + r;
+    }
+    function parseInternal(string, env, opts) {
+      if (!opts) {
+        opts = {};
       }
-      readBinary = function readBinary2(f) {
-        var data;
-        if (typeof readbuffer === "function") {
-          return new Uint8Array(readbuffer(f));
-        }
-        data = read(f, "binary");
-        assert(typeof data === "object");
-        return data;
-      };
-      if (typeof scriptArgs != "undefined") {
-        arguments_ = scriptArgs;
-      } else if (typeof arguments != "undefined") {
-        arguments_ = arguments;
+      var BS = opts.escape || "\\";
+      var ifs = opts.splitUnquoted === true ? " 	\n" : typeof opts.splitUnquoted === "string" ? opts.splitUnquoted : "";
+      var BAREWORD = "(\\" + BS + `['"` + META + `]|[^\\s'"` + META + "])+";
+      var chunker = new RegExp([
+        "(" + CONTROL + ")",
+        // control chars
+        "(" + BAREWORD + "|" + DOUBLE_QUOTE + "|" + SINGLE_QUOTE + ")+"
+      ].join("|"), "g");
+      var matches = matchAll(string, chunker);
+      if (matches.length === 0) {
+        return [];
       }
-      if (typeof quit === "function") {
-        quit_ = function(status) {
-          quit(status);
-        };
+      if (!env) {
+        env = {};
       }
-      if (typeof print !== "undefined") {
-        if (typeof console === "undefined") console = /** @type{!Console} */
-        {};
-        console.log = /** @type{!function(this:Console, ...*): undefined} */
-        print;
-        console.warn = console.error = /** @type{!function(this:Console, ...*): undefined} */
-        typeof printErr !== "undefined" ? printErr : print;
-      }
-    } else if (ENVIRONMENT_IS_WEB || ENVIRONMENT_IS_WORKER) {
-      if (ENVIRONMENT_IS_WORKER) {
-        scriptDirectory = self.location.href;
-      } else if (typeof document !== "undefined" && document.currentScript) {
-        scriptDirectory = document.currentScript.src;
-      }
-      if (scriptDirectory.indexOf("blob:") !== 0) {
-        scriptDirectory = scriptDirectory.substr(0, scriptDirectory.lastIndexOf("/") + 1);
-      } else {
-        scriptDirectory = "";
-      }
-      {
-        read_ = function shell_read(url) {
-          var xhr = new XMLHttpRequest();
-          xhr.open("GET", url, false);
-          xhr.send(null);
-          return xhr.responseText;
-        };
-        if (ENVIRONMENT_IS_WORKER) {
-          readBinary = function readBinary2(url) {
-            var xhr = new XMLHttpRequest();
-            xhr.open("GET", url, false);
-            xhr.responseType = "arraybuffer";
-            xhr.send(null);
-            return new Uint8Array(
-              /** @type{!ArrayBuffer} */
-              xhr.response
-            );
-          };
+      var commented = false;
+      return matches.map(function(match) {
+        var s = match[0];
+        if (!s || commented) {
+          return void 0;
         }
-        readAsync = function readAsync2(url, onload, onerror) {
-          var xhr = new XMLHttpRequest();
-          xhr.open("GET", url, true);
-          xhr.responseType = "arraybuffer";
-          xhr.onload = function xhr_onload() {
-            if (xhr.status == 200 || xhr.status == 0 && xhr.response) {
-              onload(xhr.response);
-              return;
+        if (controlRE.test(s)) {
+          return (
+            /** @type {ControlOperator} */
+            { op: s }
+          );
+        }
+        var quote = false;
+        var esc = false;
+        var out = "";
+        var words = [];
+        var sawQuote = false;
+        var pendingNw = null;
+        var isGlob = false;
+        var i2;
+        function parseEnvVar() {
+          i2 += 1;
+          var varend;
+          var varname;
+          var char = s.charAt(i2);
+          if (char === "{") {
+            i2 += 1;
+            if (s.charAt(i2) === "}") {
+              throw new Error("Bad substitution: " + s.slice(i2 - 2, i2 + 1));
             }
-            onerror();
-          };
-          xhr.onerror = onerror;
-          xhr.send(null);
-        };
-      }
-      setWindowTitle = function(title) {
-        document.title = title;
-      };
-    } else {
-      throw new Error("environment detection error");
-    }
-    var out = Module["print"] || console.log.bind(console);
-    var err = Module["printErr"] || console.warn.bind(console);
-    for (key in moduleOverrides) {
-      if (moduleOverrides.hasOwnProperty(key)) {
-        Module[key] = moduleOverrides[key];
-      }
-    }
-    moduleOverrides = null;
-    if (Module["arguments"]) arguments_ = Module["arguments"];
-    if (!Object.getOwnPropertyDescriptor(Module, "arguments")) Object.defineProperty(Module, "arguments", { configurable: true, get: function() {
-      abort("Module.arguments has been replaced with plain arguments_ (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
-    } });
-    if (Module["thisProgram"]) thisProgram = Module["thisProgram"];
-    if (!Object.getOwnPropertyDescriptor(Module, "thisProgram")) Object.defineProperty(Module, "thisProgram", { configurable: true, get: function() {
-      abort("Module.thisProgram has been replaced with plain thisProgram (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
-    } });
-    if (Module["quit"]) quit_ = Module["quit"];
-    if (!Object.getOwnPropertyDescriptor(Module, "quit")) Object.defineProperty(Module, "quit", { configurable: true, get: function() {
-      abort("Module.quit has been replaced with plain quit_ (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
-    } });
-    assert(typeof Module["memoryInitializerPrefixURL"] === "undefined", "Module.memoryInitializerPrefixURL option was removed, use Module.locateFile instead");
-    assert(typeof Module["pthreadMainPrefixURL"] === "undefined", "Module.pthreadMainPrefixURL option was removed, use Module.locateFile instead");
-    assert(typeof Module["cdInitializerPrefixURL"] === "undefined", "Module.cdInitializerPrefixURL option was removed, use Module.locateFile instead");
-    assert(typeof Module["filePackagePrefixURL"] === "undefined", "Module.filePackagePrefixURL option was removed, use Module.locateFile instead");
-    assert(typeof Module["read"] === "undefined", "Module.read option was removed (modify read_ in JS)");
-    assert(typeof Module["readAsync"] === "undefined", "Module.readAsync option was removed (modify readAsync in JS)");
-    assert(typeof Module["readBinary"] === "undefined", "Module.readBinary option was removed (modify readBinary in JS)");
-    assert(typeof Module["setWindowTitle"] === "undefined", "Module.setWindowTitle option was removed (modify setWindowTitle in JS)");
-    assert(typeof Module["TOTAL_MEMORY"] === "undefined", "Module.TOTAL_MEMORY has been renamed Module.INITIAL_MEMORY");
-    if (!Object.getOwnPropertyDescriptor(Module, "read")) Object.defineProperty(Module, "read", { configurable: true, get: function() {
-      abort("Module.read has been replaced with plain read_ (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
-    } });
-    if (!Object.getOwnPropertyDescriptor(Module, "readAsync")) Object.defineProperty(Module, "readAsync", { configurable: true, get: function() {
-      abort("Module.readAsync has been replaced with plain readAsync (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
-    } });
-    if (!Object.getOwnPropertyDescriptor(Module, "readBinary")) Object.defineProperty(Module, "readBinary", { configurable: true, get: function() {
-      abort("Module.readBinary has been replaced with plain readBinary (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
-    } });
-    if (!Object.getOwnPropertyDescriptor(Module, "setWindowTitle")) Object.defineProperty(Module, "setWindowTitle", { configurable: true, get: function() {
-      abort("Module.setWindowTitle has been replaced with plain setWindowTitle (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
-    } });
-    function warnOnce(text) {
-      if (!warnOnce.shown) warnOnce.shown = {};
-      if (!warnOnce.shown[text]) {
-        warnOnce.shown[text] = 1;
-        err(text);
-      }
-    }
-    var tempRet0 = 0;
-    var setTempRet0 = function(value) {
-      tempRet0 = value;
-    };
-    var wasmBinary;
-    if (Module["wasmBinary"]) wasmBinary = Module["wasmBinary"];
-    if (!Object.getOwnPropertyDescriptor(Module, "wasmBinary")) Object.defineProperty(Module, "wasmBinary", { configurable: true, get: function() {
-      abort("Module.wasmBinary has been replaced with plain wasmBinary (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
-    } });
-    var noExitRuntime;
-    if (Module["noExitRuntime"]) noExitRuntime = Module["noExitRuntime"];
-    if (!Object.getOwnPropertyDescriptor(Module, "noExitRuntime")) Object.defineProperty(Module, "noExitRuntime", { configurable: true, get: function() {
-      abort("Module.noExitRuntime has been replaced with plain noExitRuntime (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
-    } });
-    if (typeof WebAssembly !== "object") {
-      abort("no native wasm support detected");
-    }
-    var wasmMemory;
-    var ABORT = false;
-    var EXITSTATUS = 0;
-    function assert(condition, text) {
-      if (!condition) {
-        abort("Assertion failed: " + text);
-      }
-    }
-    var UTF8Decoder = typeof TextDecoder !== "undefined" ? new TextDecoder("utf8") : void 0;
-    function UTF8ArrayToString(heap, idx, maxBytesToRead) {
-      var endIdx = idx + maxBytesToRead;
-      var endPtr = idx;
-      while (heap[endPtr] && !(endPtr >= endIdx)) ++endPtr;
-      if (endPtr - idx > 16 && heap.subarray && UTF8Decoder) {
-        return UTF8Decoder.decode(heap.subarray(idx, endPtr));
-      } else {
-        var str3 = "";
-        while (idx < endPtr) {
-          var u0 = heap[idx++];
-          if (!(u0 & 128)) {
-            str3 += String.fromCharCode(u0);
-            continue;
-          }
-          var u1 = heap[idx++] & 63;
-          if ((u0 & 224) == 192) {
-            str3 += String.fromCharCode((u0 & 31) << 6 | u1);
-            continue;
-          }
-          var u2 = heap[idx++] & 63;
-          if ((u0 & 240) == 224) {
-            u0 = (u0 & 15) << 12 | u1 << 6 | u2;
+            var depth = 1;
+            varend = i2;
+            while (depth > 0 && varend < s.length) {
+              if (s.charAt(varend) === "{" && s.charAt(varend - 1) === "$") {
+                depth += 1;
+              } else if (s.charAt(varend) === "}") {
+                depth -= 1;
+              }
+              varend += 1;
+            }
+            if (depth !== 0) {
+              throw new Error("Bad substitution: " + s.slice(i2));
+            }
+            varend -= 1;
+            varname = s.slice(i2, varend);
+            i2 = varend;
+          } else if (/[*@#?$!_-]/.test(char)) {
+            varname = char;
+            i2 += 1;
           } else {
-            if ((u0 & 248) != 240) warnOnce("Invalid UTF-8 leading byte 0x" + u0.toString(16) + " encountered when deserializing a UTF-8 string on the asm.js/wasm heap to a JS string!");
-            u0 = (u0 & 7) << 18 | u1 << 12 | u2 << 6 | heap[idx++] & 63;
+            var slicedFromI = s.slice(i2);
+            varend = slicedFromI.match(/[^\w\d_]/);
+            if (!varend) {
+              varname = slicedFromI;
+              i2 = s.length;
+            } else {
+              varname = slicedFromI.slice(0, varend.index);
+              i2 += /** @type {number} */
+              varend.index - 1;
+            }
           }
-          if (u0 < 65536) {
-            str3 += String.fromCharCode(u0);
+          return getVar(
+            /** @type {NonNullable<typeof env>} */
+            env,
+            "",
+            varname
+          );
+        }
+        function flushRun() {
+          if (pendingNw === null) {
+            return;
+          }
+          if (pendingNw === 0) {
+            if (out !== "") {
+              words[words.length] = out;
+              out = "";
+            }
           } else {
-            var ch = u0 - 65536;
-            str3 += String.fromCharCode(55296 | ch >> 10, 56320 | ch & 1023);
+            words[words.length] = out;
+            out = "";
+            for (var fe = 1; fe < pendingNw; fe += 1) {
+              words[words.length] = "";
+            }
           }
+          pendingNw = null;
         }
-      }
-      return str3;
-    }
-    function UTF8ToString(ptr, maxBytesToRead) {
-      return ptr ? UTF8ArrayToString(HEAPU8, ptr, maxBytesToRead) : "";
-    }
-    function stringToUTF8Array(str3, heap, outIdx, maxBytesToWrite) {
-      if (!(maxBytesToWrite > 0))
-        return 0;
-      var startIdx = outIdx;
-      var endIdx = outIdx + maxBytesToWrite - 1;
-      for (var i = 0; i < str3.length; ++i) {
-        var u = str3.charCodeAt(i);
-        if (u >= 55296 && u <= 57343) {
-          var u1 = str3.charCodeAt(++i);
-          u = 65536 + ((u & 1023) << 10) | u1 & 1023;
-        }
-        if (u <= 127) {
-          if (outIdx >= endIdx) break;
-          heap[outIdx++] = u;
-        } else if (u <= 2047) {
-          if (outIdx + 1 >= endIdx) break;
-          heap[outIdx++] = 192 | u >> 6;
-          heap[outIdx++] = 128 | u & 63;
-        } else if (u <= 65535) {
-          if (outIdx + 2 >= endIdx) break;
-          heap[outIdx++] = 224 | u >> 12;
-          heap[outIdx++] = 128 | u >> 6 & 63;
-          heap[outIdx++] = 128 | u & 63;
-        } else {
-          if (outIdx + 3 >= endIdx) break;
-          if (u >= 2097152) warnOnce("Invalid Unicode code point 0x" + u.toString(16) + " encountered when serializing a JS string to an UTF-8 string on the asm.js/wasm heap! (Valid unicode code points should be in range 0-0x1FFFFF).");
-          heap[outIdx++] = 240 | u >> 18;
-          heap[outIdx++] = 128 | u >> 12 & 63;
-          heap[outIdx++] = 128 | u >> 6 & 63;
-          heap[outIdx++] = 128 | u & 63;
+        for (i2 = 0; i2 < s.length; i2++) {
+          var c = s.charAt(i2);
+          if (ifs && c !== DS) {
+            flushRun();
+          }
+          isGlob = isGlob || !quote && (c === "*" || c === "?");
+          if (esc) {
+            out += c;
+            esc = false;
+          } else if (quote) {
+            if (c === quote) {
+              quote = false;
+            } else if (quote == SQ) {
+              out += c;
+            } else {
+              if (c === BS) {
+                i2 += 1;
+                c = s.charAt(i2);
+                if (c === DQ || c === BS || c === DS) {
+                  out += c;
+                } else {
+                  out += BS + c;
+                }
+              } else if (c === DS) {
+                out += parseEnvVar();
+              } else {
+                out += c;
+              }
+            }
+          } else if (c === DQ || c === SQ) {
+            quote = c;
+            sawQuote = true;
+          } else if (controlRE.test(c)) {
+            return (
+              /** @type {ControlOperator} */
+              { op: s }
+            );
+          } else if (hash.test(c)) {
+            commented = true;
+            var commentObj = { comment: string.slice(match.index + i2 + 1) };
+            if (out.length) {
+              return (
+                /** @type {const} */
+                [out, commentObj]
+              );
+            }
+            return (
+              /** @type {const} */
+              [commentObj]
+            );
+          } else if (c === BS) {
+            esc = true;
+          } else if (c === DS) {
+            var value = parseEnvVar();
+            if (!ifs) {
+              out += value;
+            } else {
+              for (var vi = 0; vi < value.length; vi += 1) {
+                var vc = value.charAt(vi);
+                if (ifs.indexOf(vc) < 0) {
+                  flushRun();
+                  out += vc;
+                } else if (pendingNw === null) {
+                  pendingNw = vc === " " || vc === "	" || vc === "\n" ? 0 : 1;
+                } else if (vc !== " " && vc !== "	" && vc !== "\n") {
+                  pendingNw += 1;
+                }
+              }
+            }
+          } else {
+            out += c;
+          }
+        }
+        if (isGlob) {
+          return (
+            /** @type {GlobPattern} */
+            { op: "glob", pattern: out }
+          );
+        }
+        if (ifs) {
+          if (pendingNw !== null && pendingNw > 0) {
+            words[words.length] = out;
+            out = "";
+            for (var te = 1; te < pendingNw; te += 1) {
+              words[words.length] = "";
+            }
+          }
+          if (out !== "" || sawQuote && words.length === 0) {
+            words[words.length] = out;
+          }
+          return words;
         }
+        return out;
+      }).reduce(
+        function(prev, arg) {
+          if (typeof arg === "undefined") {
+            return prev;
+          }
+          [].concat(arg).forEach(function(entry) {
+            prev[prev.length] = entry;
+          });
+          return prev;
+        },
+        /** @type {ParseEntry[]} */
+        []
+      );
+    }
+    module.exports = function parse(s, env, opts) {
+      var mapped = parseInternal(s, env, opts);
+      if (typeof env !== "function") {
+        return mapped;
+      }
+      return mapped.reduce(
+        function(acc, s2) {
+          if (typeof s2 === "object") {
+            acc[acc.length] = s2;
+            return acc;
+          }
+          var xs = s2.split(RegExp("(" + TOKEN + ".*?" + TOKEN + ")", "g"));
+          if (xs.length === 1) {
+            acc[acc.length] = xs[0];
+            return acc;
+          }
+          xs.filter(Boolean).forEach(function(x) {
+            acc[acc.length] = startsWithToken.test(x) ? JSON.parse(x.split(TOKEN)[1]) : x;
+          });
+          return acc;
+        },
+        /** @type {ParseEntry[]} */
+        []
+      );
+    };
+  }
+});
+
+// node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/index.js
+var require_shell_quote = __commonJS({
+  "node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/index.js"(exports) {
+    "use strict";
+    exports.quote = require_quote();
+    exports.parse = require_parse();
+  }
+});
+
+// node_modules/.pnpm/re2-wasm@1.0.2/node_modules/re2-wasm/build/wasm/re2.js
+var require_re2 = __commonJS({
+  "node_modules/.pnpm/re2-wasm@1.0.2/node_modules/re2-wasm/build/wasm/re2.js"(exports, module) {
+    var Module = typeof Module !== "undefined" ? Module : {};
+    var moduleOverrides = {};
+    var key;
+    for (key in Module) {
+      if (Module.hasOwnProperty(key)) {
+        moduleOverrides[key] = Module[key];
       }
-      heap[outIdx] = 0;
-      return outIdx - startIdx;
     }
-    function stringToUTF8(str3, outPtr, maxBytesToWrite) {
-      assert(typeof maxBytesToWrite == "number", "stringToUTF8(str, outPtr, maxBytesToWrite) is missing the third parameter that specifies the length of the output buffer!");
-      return stringToUTF8Array(str3, HEAPU8, outPtr, maxBytesToWrite);
+    var arguments_ = [];
+    var thisProgram = "./this.program";
+    var quit_ = function(status, toThrow) {
+      throw toThrow;
+    };
+    var ENVIRONMENT_IS_WEB = false;
+    var ENVIRONMENT_IS_WORKER = false;
+    var ENVIRONMENT_IS_NODE = false;
+    var ENVIRONMENT_IS_SHELL = false;
+    ENVIRONMENT_IS_WEB = typeof window === "object";
+    ENVIRONMENT_IS_WORKER = typeof importScripts === "function";
+    ENVIRONMENT_IS_NODE = typeof process === "object" && typeof process.versions === "object" && typeof process.versions.node === "string";
+    ENVIRONMENT_IS_SHELL = !ENVIRONMENT_IS_WEB && !ENVIRONMENT_IS_NODE && !ENVIRONMENT_IS_WORKER;
+    if (Module["ENVIRONMENT"]) {
+      throw new Error("Module.ENVIRONMENT has been deprecated. To force the environment, use the ENVIRONMENT compile-time option (for example, -s ENVIRONMENT=web or -s ENVIRONMENT=node)");
     }
-    function lengthBytesUTF8(str3) {
-      var len = 0;
-      for (var i = 0; i < str3.length; ++i) {
-        var u = str3.charCodeAt(i);
-        if (u >= 55296 && u <= 57343) u = 65536 + ((u & 1023) << 10) | str3.charCodeAt(++i) & 1023;
-        if (u <= 127) ++len;
-        else if (u <= 2047) len += 2;
-        else if (u <= 65535) len += 3;
-        else len += 4;
+    var scriptDirectory = "";
+    function locateFile(path) {
+      if (Module["locateFile"]) {
+        return Module["locateFile"](path, scriptDirectory);
       }
-      return len;
+      return scriptDirectory + path;
     }
-    var UTF16Decoder = typeof TextDecoder !== "undefined" ? new TextDecoder("utf-16le") : void 0;
-    function UTF16ToString(ptr, maxBytesToRead) {
-      assert(ptr % 2 == 0, "Pointer passed to UTF16ToString must be aligned to two bytes!");
-      var endPtr = ptr;
-      var idx = endPtr >> 1;
-      var maxIdx = idx + maxBytesToRead / 2;
-      while (!(idx >= maxIdx) && HEAPU16[idx]) ++idx;
-      endPtr = idx << 1;
-      if (endPtr - ptr > 32 && UTF16Decoder) {
-        return UTF16Decoder.decode(HEAPU8.subarray(ptr, endPtr));
+    var read_;
+    var readAsync;
+    var readBinary;
+    var setWindowTitle;
+    var nodeFS;
+    var nodePath;
+    if (ENVIRONMENT_IS_NODE) {
+      if (ENVIRONMENT_IS_WORKER) {
+        scriptDirectory = __require("path").dirname(scriptDirectory) + "/";
       } else {
-        var str3 = "";
-        for (var i = 0; !(i >= maxBytesToRead / 2); ++i) {
-          var codeUnit = HEAP16[ptr + i * 2 >> 1];
-          if (codeUnit == 0) break;
-          str3 += String.fromCharCode(codeUnit);
+        scriptDirectory = __dirname + "/";
+      }
+      read_ = function shell_read(filename, binary) {
+        if (!nodeFS) nodeFS = __require("fs");
+        if (!nodePath) nodePath = __require("path");
+        filename = nodePath["normalize"](filename);
+        return nodeFS["readFileSync"](filename, binary ? null : "utf8");
+      };
+      readBinary = function readBinary2(filename) {
+        var ret = read_(filename, true);
+        if (!ret.buffer) {
+          ret = new Uint8Array(ret);
         }
-        return str3;
+        assert(ret.buffer);
+        return ret;
+      };
+      if (process["argv"].length > 1) {
+        thisProgram = process["argv"][1].replace(/\\/g, "/");
       }
-    }
-    function stringToUTF16(str3, outPtr, maxBytesToWrite) {
-      assert(outPtr % 2 == 0, "Pointer passed to stringToUTF16 must be aligned to two bytes!");
-      assert(typeof maxBytesToWrite == "number", "stringToUTF16(str, outPtr, maxBytesToWrite) is missing the third parameter that specifies the length of the output buffer!");
-      if (maxBytesToWrite === void 0) {
-        maxBytesToWrite = 2147483647;
+      arguments_ = process["argv"].slice(2);
+      if (typeof module !== "undefined") {
+        module["exports"] = Module;
       }
-      if (maxBytesToWrite < 2) return 0;
-      maxBytesToWrite -= 2;
-      var startPtr = outPtr;
-      var numCharsToWrite = maxBytesToWrite < str3.length * 2 ? maxBytesToWrite / 2 : str3.length;
-      for (var i = 0; i < numCharsToWrite; ++i) {
-        var codeUnit = str3.charCodeAt(i);
-        HEAP16[outPtr >> 1] = codeUnit;
-        outPtr += 2;
+      quit_ = function(status) {
+        process["exit"](status);
+      };
+      Module["inspect"] = function() {
+        return "[Emscripten Module object]";
+      };
+    } else if (ENVIRONMENT_IS_SHELL) {
+      if (typeof read != "undefined") {
+        read_ = function shell_read(f) {
+          return read(f);
+        };
       }
-      HEAP16[outPtr >> 1] = 0;
-      return outPtr - startPtr;
-    }
-    function lengthBytesUTF16(str3) {
-      return str3.length * 2;
-    }
-    function UTF32ToString(ptr, maxBytesToRead) {
-      assert(ptr % 4 == 0, "Pointer passed to UTF32ToString must be aligned to four bytes!");
-      var i = 0;
-      var str3 = "";
-      while (!(i >= maxBytesToRead / 4)) {
-        var utf32 = HEAP32[ptr + i * 4 >> 2];
-        if (utf32 == 0) break;
-        ++i;
-        if (utf32 >= 65536) {
-          var ch = utf32 - 65536;
-          str3 += String.fromCharCode(55296 | ch >> 10, 56320 | ch & 1023);
-        } else {
-          str3 += String.fromCharCode(utf32);
+      readBinary = function readBinary2(f) {
+        var data;
+        if (typeof readbuffer === "function") {
+          return new Uint8Array(readbuffer(f));
         }
+        data = read(f, "binary");
+        assert(typeof data === "object");
+        return data;
+      };
+      if (typeof scriptArgs != "undefined") {
+        arguments_ = scriptArgs;
+      } else if (typeof arguments != "undefined") {
+        arguments_ = arguments;
       }
-      return str3;
-    }
-    function stringToUTF32(str3, outPtr, maxBytesToWrite) {
-      assert(outPtr % 4 == 0, "Pointer passed to stringToUTF32 must be aligned to four bytes!");
-      assert(typeof maxBytesToWrite == "number", "stringToUTF32(str, outPtr, maxBytesToWrite) is missing the third parameter that specifies the length of the output buffer!");
-      if (maxBytesToWrite === void 0) {
-        maxBytesToWrite = 2147483647;
+      if (typeof quit === "function") {
+        quit_ = function(status) {
+          quit(status);
+        };
       }
-      if (maxBytesToWrite < 4) return 0;
-      var startPtr = outPtr;
-      var endPtr = startPtr + maxBytesToWrite - 4;
-      for (var i = 0; i < str3.length; ++i) {
-        var codeUnit = str3.charCodeAt(i);
-        if (codeUnit >= 55296 && codeUnit <= 57343) {
-          var trailSurrogate = str3.charCodeAt(++i);
-          codeUnit = 65536 + ((codeUnit & 1023) << 10) | trailSurrogate & 1023;
+      if (typeof print !== "undefined") {
+        if (typeof console === "undefined") console = /** @type{!Console} */
+        {};
+        console.log = /** @type{!function(this:Console, ...*): undefined} */
+        print;
+        console.warn = console.error = /** @type{!function(this:Console, ...*): undefined} */
+        typeof printErr !== "undefined" ? printErr : print;
+      }
+    } else if (ENVIRONMENT_IS_WEB || ENVIRONMENT_IS_WORKER) {
+      if (ENVIRONMENT_IS_WORKER) {
+        scriptDirectory = self.location.href;
+      } else if (typeof document !== "undefined" && document.currentScript) {
+        scriptDirectory = document.currentScript.src;
+      }
+      if (scriptDirectory.indexOf("blob:") !== 0) {
+        scriptDirectory = scriptDirectory.substr(0, scriptDirectory.lastIndexOf("/") + 1);
+      } else {
+        scriptDirectory = "";
+      }
+      {
+        read_ = function shell_read(url) {
+          var xhr = new XMLHttpRequest();
+          xhr.open("GET", url, false);
+          xhr.send(null);
+          return xhr.responseText;
+        };
+        if (ENVIRONMENT_IS_WORKER) {
+          readBinary = function readBinary2(url) {
+            var xhr = new XMLHttpRequest();
+            xhr.open("GET", url, false);
+            xhr.responseType = "arraybuffer";
+            xhr.send(null);
+            return new Uint8Array(
+              /** @type{!ArrayBuffer} */
+              xhr.response
+            );
+          };
         }
-        HEAP32[outPtr >> 2] = codeUnit;
-        outPtr += 4;
-        if (outPtr + 4 > endPtr) break;
+        readAsync = function readAsync2(url, onload, onerror) {
+          var xhr = new XMLHttpRequest();
+          xhr.open("GET", url, true);
+          xhr.responseType = "arraybuffer";
+          xhr.onload = function xhr_onload() {
+            if (xhr.status == 200 || xhr.status == 0 && xhr.response) {
+              onload(xhr.response);
+              return;
+            }
+            onerror();
+          };
+          xhr.onerror = onerror;
+          xhr.send(null);
+        };
       }
-      HEAP32[outPtr >> 2] = 0;
-      return outPtr - startPtr;
+      setWindowTitle = function(title) {
+        document.title = title;
+      };
+    } else {
+      throw new Error("environment detection error");
     }
-    function lengthBytesUTF32(str3) {
-      var len = 0;
-      for (var i = 0; i < str3.length; ++i) {
-        var codeUnit = str3.charCodeAt(i);
-        if (codeUnit >= 55296 && codeUnit <= 57343) ++i;
-        len += 4;
+    var out = Module["print"] || console.log.bind(console);
+    var err = Module["printErr"] || console.warn.bind(console);
+    for (key in moduleOverrides) {
+      if (moduleOverrides.hasOwnProperty(key)) {
+        Module[key] = moduleOverrides[key];
       }
-      return len;
-    }
-    function writeArrayToMemory(array, buffer2) {
-      assert(array.length >= 0, "writeArrayToMemory array must have a length (should be an array or typed array)");
-      HEAP8.set(array, buffer2);
     }
-    function writeAsciiToMemory(str3, buffer2, dontAddNull) {
-      for (var i = 0; i < str3.length; ++i) {
-        assert(str3.charCodeAt(i) === str3.charCodeAt(i) & 255);
-        HEAP8[buffer2++ >> 0] = str3.charCodeAt(i);
+    moduleOverrides = null;
+    if (Module["arguments"]) arguments_ = Module["arguments"];
+    if (!Object.getOwnPropertyDescriptor(Module, "arguments")) Object.defineProperty(Module, "arguments", { configurable: true, get: function() {
+      abort("Module.arguments has been replaced with plain arguments_ (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
+    } });
+    if (Module["thisProgram"]) thisProgram = Module["thisProgram"];
+    if (!Object.getOwnPropertyDescriptor(Module, "thisProgram")) Object.defineProperty(Module, "thisProgram", { configurable: true, get: function() {
+      abort("Module.thisProgram has been replaced with plain thisProgram (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
+    } });
+    if (Module["quit"]) quit_ = Module["quit"];
+    if (!Object.getOwnPropertyDescriptor(Module, "quit")) Object.defineProperty(Module, "quit", { configurable: true, get: function() {
+      abort("Module.quit has been replaced with plain quit_ (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
+    } });
+    assert(typeof Module["memoryInitializerPrefixURL"] === "undefined", "Module.memoryInitializerPrefixURL option was removed, use Module.locateFile instead");
+    assert(typeof Module["pthreadMainPrefixURL"] === "undefined", "Module.pthreadMainPrefixURL option was removed, use Module.locateFile instead");
+    assert(typeof Module["cdInitializerPrefixURL"] === "undefined", "Module.cdInitializerPrefixURL option was removed, use Module.locateFile instead");
+    assert(typeof Module["filePackagePrefixURL"] === "undefined", "Module.filePackagePrefixURL option was removed, use Module.locateFile instead");
+    assert(typeof Module["read"] === "undefined", "Module.read option was removed (modify read_ in JS)");
+    assert(typeof Module["readAsync"] === "undefined", "Module.readAsync option was removed (modify readAsync in JS)");
+    assert(typeof Module["readBinary"] === "undefined", "Module.readBinary option was removed (modify readBinary in JS)");
+    assert(typeof Module["setWindowTitle"] === "undefined", "Module.setWindowTitle option was removed (modify setWindowTitle in JS)");
+    assert(typeof Module["TOTAL_MEMORY"] === "undefined", "Module.TOTAL_MEMORY has been renamed Module.INITIAL_MEMORY");
+    if (!Object.getOwnPropertyDescriptor(Module, "read")) Object.defineProperty(Module, "read", { configurable: true, get: function() {
+      abort("Module.read has been replaced with plain read_ (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
+    } });
+    if (!Object.getOwnPropertyDescriptor(Module, "readAsync")) Object.defineProperty(Module, "readAsync", { configurable: true, get: function() {
+      abort("Module.readAsync has been replaced with plain readAsync (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
+    } });
+    if (!Object.getOwnPropertyDescriptor(Module, "readBinary")) Object.defineProperty(Module, "readBinary", { configurable: true, get: function() {
+      abort("Module.readBinary has been replaced with plain readBinary (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
+    } });
+    if (!Object.getOwnPropertyDescriptor(Module, "setWindowTitle")) Object.defineProperty(Module, "setWindowTitle", { configurable: true, get: function() {
+      abort("Module.setWindowTitle has been replaced with plain setWindowTitle (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
+    } });
+    function warnOnce(text) {
+      if (!warnOnce.shown) warnOnce.shown = {};
+      if (!warnOnce.shown[text]) {
+        warnOnce.shown[text] = 1;
+        err(text);
       }
-      if (!dontAddNull) HEAP8[buffer2 >> 0] = 0;
-    }
-    var buffer;
-    var HEAP8;
-    var HEAPU8;
-    var HEAP16;
-    var HEAPU16;
-    var HEAP32;
-    var HEAPU32;
-    var HEAPF32;
-    var HEAPF64;
-    function updateGlobalBufferAndViews(buf) {
-      buffer = buf;
-      Module["HEAP8"] = HEAP8 = new Int8Array(buf);
-      Module["HEAP16"] = HEAP16 = new Int16Array(buf);
-      Module["HEAP32"] = HEAP32 = new Int32Array(buf);
-      Module["HEAPU8"] = HEAPU8 = new Uint8Array(buf);
-      Module["HEAPU16"] = HEAPU16 = new Uint16Array(buf);
-      Module["HEAPU32"] = HEAPU32 = new Uint32Array(buf);
-      Module["HEAPF32"] = HEAPF32 = new Float32Array(buf);
-      Module["HEAPF64"] = HEAPF64 = new Float64Array(buf);
     }
-    var TOTAL_STACK = 5242880;
-    if (Module["TOTAL_STACK"]) assert(TOTAL_STACK === Module["TOTAL_STACK"], "the stack size can no longer be determined at runtime");
-    var INITIAL_MEMORY = Module["INITIAL_MEMORY"] || 16777216;
-    if (!Object.getOwnPropertyDescriptor(Module, "INITIAL_MEMORY")) Object.defineProperty(Module, "INITIAL_MEMORY", { configurable: true, get: function() {
-      abort("Module.INITIAL_MEMORY has been replaced with plain INITIAL_MEMORY (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
+    var tempRet0 = 0;
+    var setTempRet0 = function(value) {
+      tempRet0 = value;
+    };
+    var wasmBinary;
+    if (Module["wasmBinary"]) wasmBinary = Module["wasmBinary"];
+    if (!Object.getOwnPropertyDescriptor(Module, "wasmBinary")) Object.defineProperty(Module, "wasmBinary", { configurable: true, get: function() {
+      abort("Module.wasmBinary has been replaced with plain wasmBinary (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
     } });
-    assert(INITIAL_MEMORY >= TOTAL_STACK, "INITIAL_MEMORY should be larger than TOTAL_STACK, was " + INITIAL_MEMORY + "! (TOTAL_STACK=" + TOTAL_STACK + ")");
-    assert(
-      typeof Int32Array !== "undefined" && typeof Float64Array !== "undefined" && Int32Array.prototype.subarray !== void 0 && Int32Array.prototype.set !== void 0,
-      "JS engine does not provide full typed array support"
-    );
-    if (Module["wasmMemory"]) {
-      wasmMemory = Module["wasmMemory"];
-    } else {
-      wasmMemory = new WebAssembly.Memory({
-        "initial": INITIAL_MEMORY / 65536,
-        "maximum": INITIAL_MEMORY / 65536
-      });
+    var noExitRuntime;
+    if (Module["noExitRuntime"]) noExitRuntime = Module["noExitRuntime"];
+    if (!Object.getOwnPropertyDescriptor(Module, "noExitRuntime")) Object.defineProperty(Module, "noExitRuntime", { configurable: true, get: function() {
+      abort("Module.noExitRuntime has been replaced with plain noExitRuntime (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
+    } });
+    if (typeof WebAssembly !== "object") {
+      abort("no native wasm support detected");
     }
-    if (wasmMemory) {
-      buffer = wasmMemory.buffer;
+    var wasmMemory;
+    var ABORT = false;
+    var EXITSTATUS = 0;
+    function assert(condition, text) {
+      if (!condition) {
+        abort("Assertion failed: " + text);
+      }
     }
-    INITIAL_MEMORY = buffer.byteLength;
-    assert(INITIAL_MEMORY % 65536 === 0);
-    updateGlobalBufferAndViews(buffer);
-    var wasmTable;
-    function writeStackCookie() {
-      var max = _emscripten_stack_get_end();
+    var UTF8Decoder = typeof TextDecoder !== "undefined" ? new TextDecoder("utf8") : void 0;
+    function UTF8ArrayToString(heap, idx, maxBytesToRead) {
+      var endIdx = idx + maxBytesToRead;
+      var endPtr = idx;
+      while (heap[endPtr] && !(endPtr >= endIdx)) ++endPtr;
+      if (endPtr - idx > 16 && heap.subarray && UTF8Decoder) {
+        return UTF8Decoder.decode(heap.subarray(idx, endPtr));
+      } else {
+        var str3 = "";
+        while (idx < endPtr) {
+          var u0 = heap[idx++];
+          if (!(u0 & 128)) {
+            str3 += String.fromCharCode(u0);
+            continue;
+          }
+          var u1 = heap[idx++] & 63;
+          if ((u0 & 224) == 192) {
+            str3 += String.fromCharCode((u0 & 31) << 6 | u1);
+            continue;
+          }
+          var u2 = heap[idx++] & 63;
+          if ((u0 & 240) == 224) {
+            u0 = (u0 & 15) << 12 | u1 << 6 | u2;
+          } else {
+            if ((u0 & 248) != 240) warnOnce("Invalid UTF-8 leading byte 0x" + u0.toString(16) + " encountered when deserializing a UTF-8 string on the asm.js/wasm heap to a JS string!");
+            u0 = (u0 & 7) << 18 | u1 << 12 | u2 << 6 | heap[idx++] & 63;
+          }
+          if (u0 < 65536) {
+            str3 += String.fromCharCode(u0);
+          } else {
+            var ch = u0 - 65536;
+            str3 += String.fromCharCode(55296 | ch >> 10, 56320 | ch & 1023);
+          }
+        }
+      }
+      return str3;
+    }
+    function UTF8ToString(ptr, maxBytesToRead) {
+      return ptr ? UTF8ArrayToString(HEAPU8, ptr, maxBytesToRead) : "";
+    }
+    function stringToUTF8Array(str3, heap, outIdx, maxBytesToWrite) {
+      if (!(maxBytesToWrite > 0))
+        return 0;
+      var startIdx = outIdx;
+      var endIdx = outIdx + maxBytesToWrite - 1;
+      for (var i = 0; i < str3.length; ++i) {
+        var u = str3.charCodeAt(i);
+        if (u >= 55296 && u <= 57343) {
+          var u1 = str3.charCodeAt(++i);
+          u = 65536 + ((u & 1023) << 10) | u1 & 1023;
+        }
+        if (u <= 127) {
+          if (outIdx >= endIdx) break;
+          heap[outIdx++] = u;
+        } else if (u <= 2047) {
+          if (outIdx + 1 >= endIdx) break;
+          heap[outIdx++] = 192 | u >> 6;
+          heap[outIdx++] = 128 | u & 63;
+        } else if (u <= 65535) {
+          if (outIdx + 2 >= endIdx) break;
+          heap[outIdx++] = 224 | u >> 12;
+          heap[outIdx++] = 128 | u >> 6 & 63;
+          heap[outIdx++] = 128 | u & 63;
+        } else {
+          if (outIdx + 3 >= endIdx) break;
+          if (u >= 2097152) warnOnce("Invalid Unicode code point 0x" + u.toString(16) + " encountered when serializing a JS string to an UTF-8 string on the asm.js/wasm heap! (Valid unicode code points should be in range 0-0x1FFFFF).");
+          heap[outIdx++] = 240 | u >> 18;
+          heap[outIdx++] = 128 | u >> 12 & 63;
+          heap[outIdx++] = 128 | u >> 6 & 63;
+          heap[outIdx++] = 128 | u & 63;
+        }
+      }
+      heap[outIdx] = 0;
+      return outIdx - startIdx;
+    }
+    function stringToUTF8(str3, outPtr, maxBytesToWrite) {
+      assert(typeof maxBytesToWrite == "number", "stringToUTF8(str, outPtr, maxBytesToWrite) is missing the third parameter that specifies the length of the output buffer!");
+      return stringToUTF8Array(str3, HEAPU8, outPtr, maxBytesToWrite);
+    }
+    function lengthBytesUTF8(str3) {
+      var len = 0;
+      for (var i = 0; i < str3.length; ++i) {
+        var u = str3.charCodeAt(i);
+        if (u >= 55296 && u <= 57343) u = 65536 + ((u & 1023) << 10) | str3.charCodeAt(++i) & 1023;
+        if (u <= 127) ++len;
+        else if (u <= 2047) len += 2;
+        else if (u <= 65535) len += 3;
+        else len += 4;
+      }
+      return len;
+    }
+    var UTF16Decoder = typeof TextDecoder !== "undefined" ? new TextDecoder("utf-16le") : void 0;
+    function UTF16ToString(ptr, maxBytesToRead) {
+      assert(ptr % 2 == 0, "Pointer passed to UTF16ToString must be aligned to two bytes!");
+      var endPtr = ptr;
+      var idx = endPtr >> 1;
+      var maxIdx = idx + maxBytesToRead / 2;
+      while (!(idx >= maxIdx) && HEAPU16[idx]) ++idx;
+      endPtr = idx << 1;
+      if (endPtr - ptr > 32 && UTF16Decoder) {
+        return UTF16Decoder.decode(HEAPU8.subarray(ptr, endPtr));
+      } else {
+        var str3 = "";
+        for (var i = 0; !(i >= maxBytesToRead / 2); ++i) {
+          var codeUnit = HEAP16[ptr + i * 2 >> 1];
+          if (codeUnit == 0) break;
+          str3 += String.fromCharCode(codeUnit);
+        }
+        return str3;
+      }
+    }
+    function stringToUTF16(str3, outPtr, maxBytesToWrite) {
+      assert(outPtr % 2 == 0, "Pointer passed to stringToUTF16 must be aligned to two bytes!");
+      assert(typeof maxBytesToWrite == "number", "stringToUTF16(str, outPtr, maxBytesToWrite) is missing the third parameter that specifies the length of the output buffer!");
+      if (maxBytesToWrite === void 0) {
+        maxBytesToWrite = 2147483647;
+      }
+      if (maxBytesToWrite < 2) return 0;
+      maxBytesToWrite -= 2;
+      var startPtr = outPtr;
+      var numCharsToWrite = maxBytesToWrite < str3.length * 2 ? maxBytesToWrite / 2 : str3.length;
+      for (var i = 0; i < numCharsToWrite; ++i) {
+        var codeUnit = str3.charCodeAt(i);
+        HEAP16[outPtr >> 1] = codeUnit;
+        outPtr += 2;
+      }
+      HEAP16[outPtr >> 1] = 0;
+      return outPtr - startPtr;
+    }
+    function lengthBytesUTF16(str3) {
+      return str3.length * 2;
+    }
+    function UTF32ToString(ptr, maxBytesToRead) {
+      assert(ptr % 4 == 0, "Pointer passed to UTF32ToString must be aligned to four bytes!");
+      var i = 0;
+      var str3 = "";
+      while (!(i >= maxBytesToRead / 4)) {
+        var utf32 = HEAP32[ptr + i * 4 >> 2];
+        if (utf32 == 0) break;
+        ++i;
+        if (utf32 >= 65536) {
+          var ch = utf32 - 65536;
+          str3 += String.fromCharCode(55296 | ch >> 10, 56320 | ch & 1023);
+        } else {
+          str3 += String.fromCharCode(utf32);
+        }
+      }
+      return str3;
+    }
+    function stringToUTF32(str3, outPtr, maxBytesToWrite) {
+      assert(outPtr % 4 == 0, "Pointer passed to stringToUTF32 must be aligned to four bytes!");
+      assert(typeof maxBytesToWrite == "number", "stringToUTF32(str, outPtr, maxBytesToWrite) is missing the third parameter that specifies the length of the output buffer!");
+      if (maxBytesToWrite === void 0) {
+        maxBytesToWrite = 2147483647;
+      }
+      if (maxBytesToWrite < 4) return 0;
+      var startPtr = outPtr;
+      var endPtr = startPtr + maxBytesToWrite - 4;
+      for (var i = 0; i < str3.length; ++i) {
+        var codeUnit = str3.charCodeAt(i);
+        if (codeUnit >= 55296 && codeUnit <= 57343) {
+          var trailSurrogate = str3.charCodeAt(++i);
+          codeUnit = 65536 + ((codeUnit & 1023) << 10) | trailSurrogate & 1023;
+        }
+        HEAP32[outPtr >> 2] = codeUnit;
+        outPtr += 4;
+        if (outPtr + 4 > endPtr) break;
+      }
+      HEAP32[outPtr >> 2] = 0;
+      return outPtr - startPtr;
+    }
+    function lengthBytesUTF32(str3) {
+      var len = 0;
+      for (var i = 0; i < str3.length; ++i) {
+        var codeUnit = str3.charCodeAt(i);
+        if (codeUnit >= 55296 && codeUnit <= 57343) ++i;
+        len += 4;
+      }
+      return len;
+    }
+    function writeArrayToMemory(array, buffer2) {
+      assert(array.length >= 0, "writeArrayToMemory array must have a length (should be an array or typed array)");
+      HEAP8.set(array, buffer2);
+    }
+    function writeAsciiToMemory(str3, buffer2, dontAddNull) {
+      for (var i = 0; i < str3.length; ++i) {
+        assert(str3.charCodeAt(i) === str3.charCodeAt(i) & 255);
+        HEAP8[buffer2++ >> 0] = str3.charCodeAt(i);
+      }
+      if (!dontAddNull) HEAP8[buffer2 >> 0] = 0;
+    }
+    var buffer;
+    var HEAP8;
+    var HEAPU8;
+    var HEAP16;
+    var HEAPU16;
+    var HEAP32;
+    var HEAPU32;
+    var HEAPF32;
+    var HEAPF64;
+    function updateGlobalBufferAndViews(buf) {
+      buffer = buf;
+      Module["HEAP8"] = HEAP8 = new Int8Array(buf);
+      Module["HEAP16"] = HEAP16 = new Int16Array(buf);
+      Module["HEAP32"] = HEAP32 = new Int32Array(buf);
+      Module["HEAPU8"] = HEAPU8 = new Uint8Array(buf);
+      Module["HEAPU16"] = HEAPU16 = new Uint16Array(buf);
+      Module["HEAPU32"] = HEAPU32 = new Uint32Array(buf);
+      Module["HEAPF32"] = HEAPF32 = new Float32Array(buf);
+      Module["HEAPF64"] = HEAPF64 = new Float64Array(buf);
+    }
+    var TOTAL_STACK = 5242880;
+    if (Module["TOTAL_STACK"]) assert(TOTAL_STACK === Module["TOTAL_STACK"], "the stack size can no longer be determined at runtime");
+    var INITIAL_MEMORY = Module["INITIAL_MEMORY"] || 16777216;
+    if (!Object.getOwnPropertyDescriptor(Module, "INITIAL_MEMORY")) Object.defineProperty(Module, "INITIAL_MEMORY", { configurable: true, get: function() {
+      abort("Module.INITIAL_MEMORY has been replaced with plain INITIAL_MEMORY (the initial value can be provided on Module, but after startup the value is only looked for on a local variable of that name)");
+    } });
+    assert(INITIAL_MEMORY >= TOTAL_STACK, "INITIAL_MEMORY should be larger than TOTAL_STACK, was " + INITIAL_MEMORY + "! (TOTAL_STACK=" + TOTAL_STACK + ")");
+    assert(
+      typeof Int32Array !== "undefined" && typeof Float64Array !== "undefined" && Int32Array.prototype.subarray !== void 0 && Int32Array.prototype.set !== void 0,
+      "JS engine does not provide full typed array support"
+    );
+    if (Module["wasmMemory"]) {
+      wasmMemory = Module["wasmMemory"];
+    } else {
+      wasmMemory = new WebAssembly.Memory({
+        "initial": INITIAL_MEMORY / 65536,
+        "maximum": INITIAL_MEMORY / 65536
+      });
+    }
+    if (wasmMemory) {
+      buffer = wasmMemory.buffer;
+    }
+    INITIAL_MEMORY = buffer.byteLength;
+    assert(INITIAL_MEMORY % 65536 === 0);
+    updateGlobalBufferAndViews(buffer);
+    var wasmTable;
+    function writeStackCookie() {
+      var max = _emscripten_stack_get_end();
       assert((max & 3) == 0);
       HEAPU32[(max >> 2) + 1] = 34821223;
       HEAPU32[(max >> 2) + 2] = 2310721022;
@@ -3738,828 +4143,651 @@ var require_re22 = __commonJS({
                 i += 2;
                 break;
               case "c":
-                if (i + 2 < pattern.length) {
-                  const alphaIndex = ALPHA_UPPER.indexOf(pattern[i + 2]) + 1;
-                  if (alphaIndex >= 0) {
-                    result.push("\\x", HEX[Math.floor(alphaIndex / 16)], HEX[alphaIndex % 16]);
-                    i += 3;
-                    break;
-                  }
-                }
-                result.push("\\c");
-                i += 2;
-                break;
-              case "u":
-                if (i + 2 < pattern.length) {
-                  const ch2 = pattern[i + 2];
-                  if (isHexadecimal(ch2)) {
-                    result.push("\\x{");
-                    result.push(ch2);
-                    i += 3;
-                    for (let j = 0; j < 3 && i < pattern.length && isHexadecimal(pattern[i]); i++, j++) {
-                      result.push(pattern[i]);
-                    }
-                    result.push("}");
-                    break;
-                  } else if (ch2 === "{") {
-                    result.push("\\x");
-                    i += 2;
-                    break;
-                  }
-                }
-                result.push("\\u");
-                i += 2;
-                break;
-              default:
-                result.push("\\", pattern[i + 1]);
-                i += 2;
-            }
-            continue;
-          }
-        } else if (pattern[i] === "/") {
-          result.push("\\/");
-          i += 1;
-          continue;
-        } else if (pattern.substring(i, i + 3) === "(?<") {
-          if (pattern[i + 3] !== "=" && pattern[i + 3] !== "!") {
-            result.push("(?P<");
-            i += 3;
-            continue;
-          }
-        }
-        result.push(pattern[i]);
-        i += 1;
-      }
-      return result.join("");
-    }
-    function escapeRegExp(pattern) {
-      return pattern.replace(/(^|[^\\])((?:\\\\)*)\//g, "$1$2\\/");
-    }
-    var RE2 = class _RE2 {
-      constructor(pattern, flags) {
-        this._global = false;
-        this._ignoreCase = false;
-        this._multiline = false;
-        this._dotAll = false;
-        this._unicode = false;
-        this._sticky = false;
-        this.lastIndex = 0;
-        this.pattern = "(?:)";
-        this.groupNames = {};
-        this.namedGroups = {};
-        if (typeof pattern !== "string") {
-          if (pattern instanceof RegExp || pattern instanceof _RE2) {
-            flags = flags !== null && flags !== void 0 ? flags : pattern.flags;
-            pattern = pattern.source;
-          } else {
-            if (pattern === void 0) {
-              pattern = "(?:)";
-            } else {
-              pattern = pattern + "";
-            }
-          }
-        }
-        if (pattern === "") {
-          pattern = "(?:)";
-        }
-        pattern = escapeRegExp(pattern);
-        flags = flags !== null && flags !== void 0 ? flags : "";
-        for (const flag of flags) {
-          switch (flag) {
-            case "g":
-              this._global = true;
-              break;
-            case "i":
-              this._ignoreCase = true;
-              break;
-            case "m":
-              this._multiline = true;
-              break;
-            case "s":
-              this._dotAll = true;
-              break;
-            case "u":
-              this._unicode = true;
-              break;
-            case "y":
-              this._sticky = true;
-              break;
-          }
-        }
-        if (!this._unicode) {
-          throw new Error('RE2 only works in unicode mode. The "u" flag must be passed when constructing a RE2 instance');
-        }
-        this.pattern = pattern;
-        this.wrapper = new re2_1.WrappedRE2(translateRegExp(pattern, this._multiline), this._ignoreCase, this._multiline, this._dotAll);
-        if (!this.wrapper.ok()) {
-          throw new SyntaxError(`Invalid regular expression: /${pattern}/${flags}: ${this.wrapper.error()}`);
-        }
-        const groupNames = this.wrapper.capturingGroupNames();
-        const groupNumbers = groupNames.keys();
-        for (let i = 0; i < groupNumbers.size(); i++) {
-          const num2 = groupNumbers.get(i);
-          const name = groupNames.get(num2);
-          if (name in this.namedGroups) {
-            throw new SyntaxError(`Invalid regular expression: /${pattern}/${flags}: Duplicate capture group name`);
-          }
-          this.groupNames[num2] = name;
-          this.namedGroups[name] = num2;
-        }
-      }
-      get source() {
-        return this.pattern;
-      }
-      get internalSource() {
-        return this.wrapper.pattern();
-      }
-      get flags() {
-        return (this._global ? "g" : "") + (this._ignoreCase ? "i" : "") + (this._multiline ? "m" : "") + (this._dotAll ? "s" : "") + (this._unicode ? "u" : "") + (this._sticky ? "y" : "");
-      }
-      get global() {
-        return this._global;
-      }
-      get ignoreCase() {
-        return this._ignoreCase;
-      }
-      get multiline() {
-        return this._multiline;
-      }
-      get dotAll() {
-        return this._dotAll;
-      }
-      get unicode() {
-        return this._unicode;
-      }
-      get sticky() {
-        return this._sticky;
-      }
-      toString() {
-        return `/${this.pattern}/${this.flags}`;
-      }
-      getMaybeStickyIndex() {
-        if (this._global || this._sticky) {
-          return this.lastIndex;
-        } else {
-          return 0;
-        }
-      }
-      isMatchSuccessful(match, searchStart) {
-        return match.index === searchStart || !this._sticky && match.index >= 0;
-      }
-      maybeUpdateLastIndex(match, start) {
-        if (this._global || this._sticky) {
-          if (this.isMatchSuccessful(match, start)) {
-            this.lastIndex = match.index + match.match.length;
-          } else {
-            this.lastIndex = 0;
-          }
-        }
-      }
-      getNamedGroups(match) {
-        const groups = {};
-        for (const [groupName, groupNum] of Object.entries(this.namedGroups)) {
-          if (match.groups[groupNum - 1] !== void 0) {
-            groups[groupName] = match.groups[groupNum - 1];
-          }
-        }
-        return groups;
-      }
-      exec(input) {
-        if (typeof input !== "string") {
-          input = input + "";
-        }
-        const startIndex = this.getMaybeStickyIndex();
-        const match = this.wrapper.match(input, startIndex, true);
-        this.maybeUpdateLastIndex(match, startIndex);
-        if (!this.isMatchSuccessful(match, startIndex)) {
-          return null;
-        }
-        const result = [match.match, ...match.groups];
-        result.index = match.index;
-        result.input = input;
-        const groups = this.getNamedGroups(match);
-        if (Object.keys(groups).length > 0) {
-          result.groups = groups;
-        }
-        return result;
-      }
-      test(input) {
-        if (typeof input !== "string") {
-          input = input + "";
-        }
-        const startIndex = this.getMaybeStickyIndex();
-        const match = this.wrapper.match(input, this.getMaybeStickyIndex(), false);
-        this.maybeUpdateLastIndex(match, startIndex);
-        return this.isMatchSuccessful(match, startIndex);
-      }
-      compile() {
-        throw new Error("Deprecated RegExp method compile is not implemented in RE2.");
-      }
-      [Symbol.match](input) {
-        if (typeof input !== "string") {
-          input = input + "";
-        }
-        if (this._global) {
-          const result = [];
-          let nextIndex = 0;
-          let success;
-          do {
-            const match = this.wrapper.match(input, nextIndex, false);
-            success = match.index === nextIndex || !this._sticky && match.index >= 0;
-            if (success) {
-              result.push(match.match);
-              nextIndex = match.index + match.match.length;
-            }
-          } while (success);
-          if (result.length === 0) {
-            return null;
-          } else {
-            return result;
-          }
-        } else {
-          const startIndex = this.getMaybeStickyIndex();
-          const match = this.wrapper.match(input, startIndex, true);
-          this.maybeUpdateLastIndex(match, startIndex);
-          if (!this.isMatchSuccessful(match, startIndex)) {
-            return null;
-          }
-          const result = [match.match, ...match.groups];
-          result.index = match.index;
-          result.input = input;
-          const groups = this.getNamedGroups(match);
-          if (Object.keys(groups).length > 0) {
-            result.groups = groups;
-          }
-          return result;
-        }
-      }
-      match(input) {
-        return this[Symbol.match](input);
-      }
-      /**
-       * Outputs the replacement for the matched part of the string
-       * @param input
-       * @param match
-       * @param replacer
-       */
-      replaceMatch(input, match, replacer) {
-        var _a, _b;
-        if (typeof replacer === "string") {
-          let result = "";
-          for (let i = 0; i < replacer.length; i++) {
-            if (replacer[i] === "$") {
-              switch (replacer[i + 1]) {
-                case "$":
-                  result += "$";
-                  i++;
-                  break;
-                case "&":
-                  result += match.match;
-                  i++;
-                  break;
-                case "`":
-                  result += input.substring(0, match.index);
-                  i++;
-                  break;
-                case "'":
-                  result += input.substring(match.index + match.match.length);
-                  i++;
-                  break;
-                case "<": {
-                  const endCaret = replacer.indexOf(">", i);
-                  if (endCaret < 0) {
-                    throw new Error("Invalid named group replacement");
-                  }
-                  const groupName = replacer.substring(i + 2, endCaret);
-                  if (groupName in this.namedGroups) {
-                    result += (_a = match.groups[this.namedGroups[groupName] - 1]) !== null && _a !== void 0 ? _a : "";
-                  }
-                  i = endCaret;
-                  break;
-                }
-                default: {
-                  let groupNum;
-                  if ("123456789".includes(replacer[i + 1])) {
-                    if ("0123456789".includes(replacer[i + 2])) {
-                      groupNum = Number.parseInt(replacer.substring(i + 1, i + 3)) - 1;
-                      i += 2;
-                    } else {
-                      groupNum = Number.parseInt(replacer[i + 1]) - 1;
-                      i++;
-                    }
-                  } else {
-                    throw new Error("Invalid replacement string");
+                if (i + 2 < pattern.length) {
+                  const alphaIndex = ALPHA_UPPER.indexOf(pattern[i + 2]) + 1;
+                  if (alphaIndex >= 0) {
+                    result.push("\\x", HEX[Math.floor(alphaIndex / 16)], HEX[alphaIndex % 16]);
+                    i += 3;
+                    break;
                   }
-                  if (groupNum < match.groups.length) {
-                    result += (_b = match.groups[groupNum]) !== null && _b !== void 0 ? _b : "";
-                  } else {
-                    result += "$" + groupNum;
+                }
+                result.push("\\c");
+                i += 2;
+                break;
+              case "u":
+                if (i + 2 < pattern.length) {
+                  const ch2 = pattern[i + 2];
+                  if (isHexadecimal(ch2)) {
+                    result.push("\\x{");
+                    result.push(ch2);
+                    i += 3;
+                    for (let j = 0; j < 3 && i < pattern.length && isHexadecimal(pattern[i]); i++, j++) {
+                      result.push(pattern[i]);
+                    }
+                    result.push("}");
+                    break;
+                  } else if (ch2 === "{") {
+                    result.push("\\x");
+                    i += 2;
+                    break;
                   }
                 }
-              }
-            } else {
-              result += replacer[i];
+                result.push("\\u");
+                i += 2;
+                break;
+              default:
+                result.push("\\", pattern[i + 1]);
+                i += 2;
             }
+            continue;
+          }
+        } else if (pattern[i] === "/") {
+          result.push("\\/");
+          i += 1;
+          continue;
+        } else if (pattern.substring(i, i + 3) === "(?<") {
+          if (pattern[i + 3] !== "=" && pattern[i + 3] !== "!") {
+            result.push("(?P<");
+            i += 3;
+            continue;
           }
-          return result;
-        } else {
-          return replacer(match.match, ...match.groups, match.index, input, this.getNamedGroups(match));
         }
+        result.push(pattern[i]);
+        i += 1;
       }
-      [Symbol.replace](input, replacer) {
-        if (typeof input !== "string") {
-          input = input + "";
-        }
-        if (typeof replacer !== "function") {
-          replacer = replacer + "";
-        }
-        if (this._global) {
-          let result = "";
-          let nextIndex = 0;
-          let success;
-          do {
-            const match = this.wrapper.match(input, nextIndex, true);
-            success = match.index === nextIndex || !this._sticky && match.index >= 0;
-            if (success) {
-              result += input.substring(nextIndex, match.index) + this.replaceMatch(input, match, replacer);
-              nextIndex = match.index + match.match.length;
-            }
-          } while (success);
-          result += input.substring(nextIndex);
-          this.lastIndex = 0;
-          return result;
-        } else {
-          const startIndex = this.getMaybeStickyIndex();
-          const match = this.wrapper.match(input, startIndex, true);
-          this.maybeUpdateLastIndex(match, startIndex);
-          if (this.isMatchSuccessful(match, startIndex)) {
-            return input.substring(0, match.index) + this.replaceMatch(input, match, replacer) + input.substring(match.index + match.match.length);
+      return result.join("");
+    }
+    function escapeRegExp(pattern) {
+      return pattern.replace(/(^|[^\\])((?:\\\\)*)\//g, "$1$2\\/");
+    }
+    var RE2 = class _RE2 {
+      constructor(pattern, flags) {
+        this._global = false;
+        this._ignoreCase = false;
+        this._multiline = false;
+        this._dotAll = false;
+        this._unicode = false;
+        this._sticky = false;
+        this.lastIndex = 0;
+        this.pattern = "(?:)";
+        this.groupNames = {};
+        this.namedGroups = {};
+        if (typeof pattern !== "string") {
+          if (pattern instanceof RegExp || pattern instanceof _RE2) {
+            flags = flags !== null && flags !== void 0 ? flags : pattern.flags;
+            pattern = pattern.source;
           } else {
-            return input;
+            if (pattern === void 0) {
+              pattern = "(?:)";
+            } else {
+              pattern = pattern + "";
+            }
           }
         }
-      }
-      replace(input, replacer) {
-        return this[Symbol.replace](input, replacer);
-      }
-      [Symbol.search](input) {
-        if (typeof input !== "string") {
-          input = input + "";
+        if (pattern === "") {
+          pattern = "(?:)";
         }
-        const result = this.wrapper.match(input, 0, false).index;
-        if (this._sticky && result !== 0) {
-          return -1;
-        } else {
-          return result;
+        pattern = escapeRegExp(pattern);
+        flags = flags !== null && flags !== void 0 ? flags : "";
+        for (const flag of flags) {
+          switch (flag) {
+            case "g":
+              this._global = true;
+              break;
+            case "i":
+              this._ignoreCase = true;
+              break;
+            case "m":
+              this._multiline = true;
+              break;
+            case "s":
+              this._dotAll = true;
+              break;
+            case "u":
+              this._unicode = true;
+              break;
+            case "y":
+              this._sticky = true;
+              break;
+          }
         }
-      }
-      search(input) {
-        return this[Symbol.search](input);
-      }
-      [Symbol.split](input, limit) {
-        if (typeof input !== "string") {
-          input = input + "";
+        if (!this._unicode) {
+          throw new Error('RE2 only works in unicode mode. The "u" flag must be passed when constructing a RE2 instance');
         }
-        const output = [];
-        let nextIndex = 0;
-        limit = limit !== null && limit !== void 0 ? limit : Infinity;
-        while (output.length < limit) {
-          const nextMatch = this.wrapper.match(input, nextIndex, true);
-          if (nextMatch.index >= 0) {
-            if (nextMatch.match.length === 0) {
-              output.push(input.substring(nextIndex, nextIndex + 1));
-              nextIndex = nextIndex + 1;
-            } else {
-              output.push(input.substring(nextIndex, nextMatch.index));
-              nextIndex = nextMatch.index + nextMatch.match.length;
-            }
-            for (const group of nextMatch.groups) {
-              if (output.length >= limit) {
-                break;
-              }
-              output.push(group);
-            }
-          } else {
-            output.push(input.substring(nextIndex));
-            break;
+        this.pattern = pattern;
+        this.wrapper = new re2_1.WrappedRE2(translateRegExp(pattern, this._multiline), this._ignoreCase, this._multiline, this._dotAll);
+        if (!this.wrapper.ok()) {
+          throw new SyntaxError(`Invalid regular expression: /${pattern}/${flags}: ${this.wrapper.error()}`);
+        }
+        const groupNames = this.wrapper.capturingGroupNames();
+        const groupNumbers = groupNames.keys();
+        for (let i = 0; i < groupNumbers.size(); i++) {
+          const num2 = groupNumbers.get(i);
+          const name = groupNames.get(num2);
+          if (name in this.namedGroups) {
+            throw new SyntaxError(`Invalid regular expression: /${pattern}/${flags}: Duplicate capture group name`);
           }
+          this.groupNames[num2] = name;
+          this.namedGroups[name] = num2;
         }
-        return output;
       }
-      split(input, limit) {
-        return this[Symbol.split](input, limit);
+      get source() {
+        return this.pattern;
       }
-    };
-    exports.RE2 = RE2;
-  }
-});
-
-// node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/quote.js
-var require_quote = __commonJS({
-  "node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/quote.js"(exports, module) {
-    "use strict";
-    var OPS = (
-      /** @type {const} */
-      [
-        "||",
-        "&&",
-        ";;",
-        "|&",
-        "<(",
-        "<<<",
-        ">>",
-        ">&",
-        "<&",
-        "&",
-        ";",
-        "(",
-        ")",
-        "|",
-        "<",
-        ">"
-      ]
-    );
-    var LINE_TERMINATORS = /[\n\r\u2028\u2029]/;
-    var GLOB_SHELL_SPECIAL = /[\s#!"$&'():;<=>@\\^`|]/g;
-    module.exports = function quote(xs) {
-      return xs.map(function(s) {
-        if (s === "") {
-          return (
-            /** @type {const} */
-            "''"
-          );
+      get internalSource() {
+        return this.wrapper.pattern();
+      }
+      get flags() {
+        return (this._global ? "g" : "") + (this._ignoreCase ? "i" : "") + (this._multiline ? "m" : "") + (this._dotAll ? "s" : "") + (this._unicode ? "u" : "") + (this._sticky ? "y" : "");
+      }
+      get global() {
+        return this._global;
+      }
+      get ignoreCase() {
+        return this._ignoreCase;
+      }
+      get multiline() {
+        return this._multiline;
+      }
+      get dotAll() {
+        return this._dotAll;
+      }
+      get unicode() {
+        return this._unicode;
+      }
+      get sticky() {
+        return this._sticky;
+      }
+      toString() {
+        return `/${this.pattern}/${this.flags}`;
+      }
+      getMaybeStickyIndex() {
+        if (this._global || this._sticky) {
+          return this.lastIndex;
+        } else {
+          return 0;
         }
-        if (s && typeof s === "object") {
-          if ("op" in s && s.op === "glob") {
-            if (typeof s.pattern !== "string") {
-              throw new TypeError("glob token requires a string `pattern`");
-            }
-            if (LINE_TERMINATORS.test(s.pattern)) {
-              throw new TypeError("glob `pattern` must not contain line terminators");
-            }
-            return s.pattern.replace(GLOB_SHELL_SPECIAL, "\\$&");
-          }
-          if ("op" in s && typeof s.op === "string") {
-            if (OPS.indexOf(s.op) < 0) {
-              throw new TypeError("invalid `op` value: " + JSON.stringify(s.op));
-            }
-            return s.op.replace(/[\s\S]/g, "\\$&");
+      }
+      isMatchSuccessful(match, searchStart) {
+        return match.index === searchStart || !this._sticky && match.index >= 0;
+      }
+      maybeUpdateLastIndex(match, start) {
+        if (this._global || this._sticky) {
+          if (this.isMatchSuccessful(match, start)) {
+            this.lastIndex = match.index + match.match.length;
+          } else {
+            this.lastIndex = 0;
           }
-          if ("comment" in s && typeof s.comment === "string") {
-            if (LINE_TERMINATORS.test(s.comment)) {
-              throw new TypeError("`comment` must not contain line terminators");
-            }
-            return "#" + s.comment;
+        }
+      }
+      getNamedGroups(match) {
+        const groups = {};
+        for (const [groupName, groupNum] of Object.entries(this.namedGroups)) {
+          if (match.groups[groupNum - 1] !== void 0) {
+            groups[groupName] = match.groups[groupNum - 1];
           }
-          throw new TypeError("unrecognized object token shape");
         }
-        if (/["\s\\]/.test(s) && !/'/.test(s)) {
-          return "'" + s.replace(/(['])/g, "\\$1") + "'";
+        return groups;
+      }
+      exec(input) {
+        if (typeof input !== "string") {
+          input = input + "";
         }
-        if (/["'\s]/.test(s)) {
-          return '"' + s.replace(/(["\\$`!])/g, "\\$1") + '"';
+        const startIndex = this.getMaybeStickyIndex();
+        const match = this.wrapper.match(input, startIndex, true);
+        this.maybeUpdateLastIndex(match, startIndex);
+        if (!this.isMatchSuccessful(match, startIndex)) {
+          return null;
         }
-        return String(s).replace(/([A-Za-z]:)?([#!"$&'()*,:;<=>?@[\\\]^`{|}~])/g, "$1\\$2");
-      }).join(" ");
-    };
-  }
-});
-
-// node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/parse.js
-var require_parse = __commonJS({
-  "node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/parse.js"(exports, module) {
-    "use strict";
-    var CONTROL = (
-      /** @type {const} */
-      "(?:" + /** @type {const} */
-      [
-        "\\|\\|",
-        "\\&\\&",
-        ";;",
-        "\\|\\&",
-        "\\<\\(",
-        "\\<\\<\\<",
-        ">>",
-        ">\\&",
-        "<\\&",
-        "[&;()|<>]"
-      ].join(
-        /** @type {const} */
-        "|"
-      ) + /** @type {const} */
-      ")"
-    );
-    var controlRE = new RegExp("^" + CONTROL + "$");
-    var META = (
-      /** @type {const} */
-      "|&;()<> \\t"
-    );
-    var SINGLE_QUOTE = (
-      /** @type {const} */
-      "'([^']*?)'"
-    );
-    var DOUBLE_QUOTE = (
-      /** @type {const} */
-      '"((\\\\"|[^"])*?)"'
-    );
-    var hash = /^#$/;
-    var SQ = (
-      /** @type {const} */
-      "'"
-    );
-    var DQ = (
-      /** @type {const} */
-      '"'
-    );
-    var DS = (
-      /** @type {const} */
-      "$"
-    );
-    var TOKEN = "";
-    var mult = (
-      /** @type {const} */
-      4294967296
-    );
-    for (i = 0; i < 4; i++) {
-      TOKEN += (mult * Math.random()).toString(16);
-    }
-    var i;
-    var startsWithToken = new RegExp("^" + TOKEN);
-    function matchAll(s, r) {
-      var origIndex = r.lastIndex;
-      var matches = [];
-      var matchObj;
-      while (matchObj = r.exec(s)) {
-        matches[matches.length] = matchObj;
-        if (r.lastIndex === matchObj.index) {
-          r.lastIndex += 1;
+        const result = [match.match, ...match.groups];
+        result.index = match.index;
+        result.input = input;
+        const groups = this.getNamedGroups(match);
+        if (Object.keys(groups).length > 0) {
+          result.groups = groups;
         }
+        return result;
       }
-      r.lastIndex = origIndex;
-      return matches;
-    }
-    function getVar(env, pre, key) {
-      var r = typeof env === "function" ? env(key) : env[key];
-      if (typeof r === "undefined" && key != "") {
-        r = "";
-      } else if (typeof r === "undefined") {
-        r = "$";
-      }
-      if (typeof r === "object") {
-        return pre + TOKEN + JSON.stringify(r) + TOKEN;
-      }
-      return pre + r;
-    }
-    function parseInternal(string, env, opts) {
-      if (!opts) {
-        opts = {};
-      }
-      var BS = opts.escape || "\\";
-      var ifs = opts.splitUnquoted === true ? " 	\n" : typeof opts.splitUnquoted === "string" ? opts.splitUnquoted : "";
-      var BAREWORD = "(\\" + BS + `['"` + META + `]|[^\\s'"` + META + "])+";
-      var chunker = new RegExp([
-        "(" + CONTROL + ")",
-        // control chars
-        "(" + BAREWORD + "|" + DOUBLE_QUOTE + "|" + SINGLE_QUOTE + ")+"
-      ].join("|"), "g");
-      var matches = matchAll(string, chunker);
-      if (matches.length === 0) {
-        return [];
+      test(input) {
+        if (typeof input !== "string") {
+          input = input + "";
+        }
+        const startIndex = this.getMaybeStickyIndex();
+        const match = this.wrapper.match(input, this.getMaybeStickyIndex(), false);
+        this.maybeUpdateLastIndex(match, startIndex);
+        return this.isMatchSuccessful(match, startIndex);
       }
-      if (!env) {
-        env = {};
+      compile() {
+        throw new Error("Deprecated RegExp method compile is not implemented in RE2.");
       }
-      var commented = false;
-      return matches.map(function(match) {
-        var s = match[0];
-        if (!s || commented) {
-          return void 0;
-        }
-        if (controlRE.test(s)) {
-          return (
-            /** @type {ControlOperator} */
-            { op: s }
-          );
+      [Symbol.match](input) {
+        if (typeof input !== "string") {
+          input = input + "";
         }
-        var quote = false;
-        var esc = false;
-        var out = "";
-        var words = [];
-        var sawQuote = false;
-        var pendingNw = null;
-        var isGlob = false;
-        var i2;
-        function parseEnvVar() {
-          i2 += 1;
-          var varend;
-          var varname;
-          var char = s.charAt(i2);
-          if (char === "{") {
-            i2 += 1;
-            if (s.charAt(i2) === "}") {
-              throw new Error("Bad substitution: " + s.slice(i2 - 2, i2 + 1));
-            }
-            var depth = 1;
-            varend = i2;
-            while (depth > 0 && varend < s.length) {
-              if (s.charAt(varend) === "{" && s.charAt(varend - 1) === "$") {
-                depth += 1;
-              } else if (s.charAt(varend) === "}") {
-                depth -= 1;
-              }
-              varend += 1;
-            }
-            if (depth !== 0) {
-              throw new Error("Bad substitution: " + s.slice(i2));
-            }
-            varend -= 1;
-            varname = s.slice(i2, varend);
-            i2 = varend;
-          } else if (/[*@#?$!_-]/.test(char)) {
-            varname = char;
-            i2 += 1;
-          } else {
-            var slicedFromI = s.slice(i2);
-            varend = slicedFromI.match(/[^\w\d_]/);
-            if (!varend) {
-              varname = slicedFromI;
-              i2 = s.length;
-            } else {
-              varname = slicedFromI.slice(0, varend.index);
-              i2 += /** @type {number} */
-              varend.index - 1;
+        if (this._global) {
+          const result = [];
+          let nextIndex = 0;
+          let success;
+          do {
+            const match = this.wrapper.match(input, nextIndex, false);
+            success = match.index === nextIndex || !this._sticky && match.index >= 0;
+            if (success) {
+              result.push(match.match);
+              nextIndex = match.index + match.match.length;
             }
+          } while (success);
+          if (result.length === 0) {
+            return null;
+          } else {
+            return result;
           }
-          return getVar(
-            /** @type {NonNullable<typeof env>} */
-            env,
-            "",
-            varname
-          );
-        }
-        function flushRun() {
-          if (pendingNw === null) {
-            return;
+        } else {
+          const startIndex = this.getMaybeStickyIndex();
+          const match = this.wrapper.match(input, startIndex, true);
+          this.maybeUpdateLastIndex(match, startIndex);
+          if (!this.isMatchSuccessful(match, startIndex)) {
+            return null;
           }
-          if (pendingNw === 0) {
-            if (out !== "") {
-              words[words.length] = out;
-              out = "";
-            }
-          } else {
-            words[words.length] = out;
-            out = "";
-            for (var fe = 1; fe < pendingNw; fe += 1) {
-              words[words.length] = "";
-            }
+          const result = [match.match, ...match.groups];
+          result.index = match.index;
+          result.input = input;
+          const groups = this.getNamedGroups(match);
+          if (Object.keys(groups).length > 0) {
+            result.groups = groups;
           }
-          pendingNw = null;
+          return result;
         }
-        for (i2 = 0; i2 < s.length; i2++) {
-          var c = s.charAt(i2);
-          if (ifs && c !== DS) {
-            flushRun();
-          }
-          isGlob = isGlob || !quote && (c === "*" || c === "?");
-          if (esc) {
-            out += c;
-            esc = false;
-          } else if (quote) {
-            if (c === quote) {
-              quote = false;
-            } else if (quote == SQ) {
-              out += c;
-            } else {
-              if (c === BS) {
-                i2 += 1;
-                c = s.charAt(i2);
-                if (c === DQ || c === BS || c === DS) {
-                  out += c;
-                } else {
-                  out += BS + c;
+      }
+      match(input) {
+        return this[Symbol.match](input);
+      }
+      /**
+       * Outputs the replacement for the matched part of the string
+       * @param input
+       * @param match
+       * @param replacer
+       */
+      replaceMatch(input, match, replacer) {
+        var _a, _b;
+        if (typeof replacer === "string") {
+          let result = "";
+          for (let i = 0; i < replacer.length; i++) {
+            if (replacer[i] === "$") {
+              switch (replacer[i + 1]) {
+                case "$":
+                  result += "$";
+                  i++;
+                  break;
+                case "&":
+                  result += match.match;
+                  i++;
+                  break;
+                case "`":
+                  result += input.substring(0, match.index);
+                  i++;
+                  break;
+                case "'":
+                  result += input.substring(match.index + match.match.length);
+                  i++;
+                  break;
+                case "<": {
+                  const endCaret = replacer.indexOf(">", i);
+                  if (endCaret < 0) {
+                    throw new Error("Invalid named group replacement");
+                  }
+                  const groupName = replacer.substring(i + 2, endCaret);
+                  if (groupName in this.namedGroups) {
+                    result += (_a = match.groups[this.namedGroups[groupName] - 1]) !== null && _a !== void 0 ? _a : "";
+                  }
+                  i = endCaret;
+                  break;
                 }
-              } else if (c === DS) {
-                out += parseEnvVar();
-              } else {
-                out += c;
-              }
-            }
-          } else if (c === DQ || c === SQ) {
-            quote = c;
-            sawQuote = true;
-          } else if (controlRE.test(c)) {
-            return (
-              /** @type {ControlOperator} */
-              { op: s }
-            );
-          } else if (hash.test(c)) {
-            commented = true;
-            var commentObj = { comment: string.slice(match.index + i2 + 1) };
-            if (out.length) {
-              return (
-                /** @type {const} */
-                [out, commentObj]
-              );
-            }
-            return (
-              /** @type {const} */
-              [commentObj]
-            );
-          } else if (c === BS) {
-            esc = true;
-          } else if (c === DS) {
-            var value = parseEnvVar();
-            if (!ifs) {
-              out += value;
-            } else {
-              for (var vi = 0; vi < value.length; vi += 1) {
-                var vc = value.charAt(vi);
-                if (ifs.indexOf(vc) < 0) {
-                  flushRun();
-                  out += vc;
-                } else if (pendingNw === null) {
-                  pendingNw = vc === " " || vc === "	" || vc === "\n" ? 0 : 1;
-                } else if (vc !== " " && vc !== "	" && vc !== "\n") {
-                  pendingNw += 1;
+                default: {
+                  let groupNum;
+                  if ("123456789".includes(replacer[i + 1])) {
+                    if ("0123456789".includes(replacer[i + 2])) {
+                      groupNum = Number.parseInt(replacer.substring(i + 1, i + 3)) - 1;
+                      i += 2;
+                    } else {
+                      groupNum = Number.parseInt(replacer[i + 1]) - 1;
+                      i++;
+                    }
+                  } else {
+                    throw new Error("Invalid replacement string");
+                  }
+                  if (groupNum < match.groups.length) {
+                    result += (_b = match.groups[groupNum]) !== null && _b !== void 0 ? _b : "";
+                  } else {
+                    result += "$" + groupNum;
+                  }
                 }
               }
+            } else {
+              result += replacer[i];
+            }
+          }
+          return result;
+        } else {
+          return replacer(match.match, ...match.groups, match.index, input, this.getNamedGroups(match));
+        }
+      }
+      [Symbol.replace](input, replacer) {
+        if (typeof input !== "string") {
+          input = input + "";
+        }
+        if (typeof replacer !== "function") {
+          replacer = replacer + "";
+        }
+        if (this._global) {
+          let result = "";
+          let nextIndex = 0;
+          let success;
+          do {
+            const match = this.wrapper.match(input, nextIndex, true);
+            success = match.index === nextIndex || !this._sticky && match.index >= 0;
+            if (success) {
+              result += input.substring(nextIndex, match.index) + this.replaceMatch(input, match, replacer);
+              nextIndex = match.index + match.match.length;
             }
+          } while (success);
+          result += input.substring(nextIndex);
+          this.lastIndex = 0;
+          return result;
+        } else {
+          const startIndex = this.getMaybeStickyIndex();
+          const match = this.wrapper.match(input, startIndex, true);
+          this.maybeUpdateLastIndex(match, startIndex);
+          if (this.isMatchSuccessful(match, startIndex)) {
+            return input.substring(0, match.index) + this.replaceMatch(input, match, replacer) + input.substring(match.index + match.match.length);
           } else {
-            out += c;
+            return input;
           }
         }
-        if (isGlob) {
-          return (
-            /** @type {GlobPattern} */
-            { op: "glob", pattern: out }
-          );
+      }
+      replace(input, replacer) {
+        return this[Symbol.replace](input, replacer);
+      }
+      [Symbol.search](input) {
+        if (typeof input !== "string") {
+          input = input + "";
         }
-        if (ifs) {
-          if (pendingNw !== null && pendingNw > 0) {
-            words[words.length] = out;
-            out = "";
-            for (var te = 1; te < pendingNw; te += 1) {
-              words[words.length] = "";
+        const result = this.wrapper.match(input, 0, false).index;
+        if (this._sticky && result !== 0) {
+          return -1;
+        } else {
+          return result;
+        }
+      }
+      search(input) {
+        return this[Symbol.search](input);
+      }
+      [Symbol.split](input, limit) {
+        if (typeof input !== "string") {
+          input = input + "";
+        }
+        const output = [];
+        let nextIndex = 0;
+        limit = limit !== null && limit !== void 0 ? limit : Infinity;
+        while (output.length < limit) {
+          const nextMatch = this.wrapper.match(input, nextIndex, true);
+          if (nextMatch.index >= 0) {
+            if (nextMatch.match.length === 0) {
+              output.push(input.substring(nextIndex, nextIndex + 1));
+              nextIndex = nextIndex + 1;
+            } else {
+              output.push(input.substring(nextIndex, nextMatch.index));
+              nextIndex = nextMatch.index + nextMatch.match.length;
+            }
+            for (const group of nextMatch.groups) {
+              if (output.length >= limit) {
+                break;
+              }
+              output.push(group);
             }
+          } else {
+            output.push(input.substring(nextIndex));
+            break;
           }
-          if (out !== "" || sawQuote && words.length === 0) {
-            words[words.length] = out;
-          }
-          return words;
         }
-        return out;
-      }).reduce(
-        function(prev, arg) {
-          if (typeof arg === "undefined") {
-            return prev;
-          }
-          [].concat(arg).forEach(function(entry) {
-            prev[prev.length] = entry;
-          });
-          return prev;
-        },
-        /** @type {ParseEntry[]} */
-        []
-      );
-    }
-    module.exports = function parse(s, env, opts) {
-      var mapped = parseInternal(s, env, opts);
-      if (typeof env !== "function") {
-        return mapped;
+        return output;
+      }
+      split(input, limit) {
+        return this[Symbol.split](input, limit);
       }
-      return mapped.reduce(
-        function(acc, s2) {
-          if (typeof s2 === "object") {
-            acc[acc.length] = s2;
-            return acc;
-          }
-          var xs = s2.split(RegExp("(" + TOKEN + ".*?" + TOKEN + ")", "g"));
-          if (xs.length === 1) {
-            acc[acc.length] = xs[0];
-            return acc;
-          }
-          xs.filter(Boolean).forEach(function(x) {
-            acc[acc.length] = startsWithToken.test(x) ? JSON.parse(x.split(TOKEN)[1]) : x;
-          });
-          return acc;
-        },
-        /** @type {ParseEntry[]} */
-        []
-      );
     };
+    exports.RE2 = RE2;
   }
 });
 
-// node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/index.js
-var require_shell_quote = __commonJS({
-  "node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/index.js"(exports) {
-    "use strict";
-    exports.quote = require_quote();
-    exports.parse = require_parse();
+// src/hooks/runtime/sniff.ts
+import { homedir } from "node:os";
+import { isAbsolute, resolve as resolvePath } from "node:path";
+
+// src/hooks/runtime/shell-writes.ts
+var import_shell_quote = __toESM(require_shell_quote(), 1);
+var SEGMENT_OPS = /* @__PURE__ */ new Set([";", "&&", "||", "|", "|&", "&", "(", ")"]);
+var SHELL_INTERPRETERS = /* @__PURE__ */ new Set(["bash", "sh", "zsh", "dash", "ksh"]);
+var TRANSPARENT_PREFIXES = /* @__PURE__ */ new Set(["sudo", "doas", "nohup", "command", "time", "nice", "env"]);
+var HEREDOC_OPEN = /<<-?\s*(['"]?)([A-Za-z_][A-Za-z0-9_]*)\1/;
+function isOp(tok, op) {
+  return typeof tok === "object" && "op" in tok && (op === void 0 || tok.op === op);
+}
+function tokenText(tok) {
+  if (typeof tok === "string") return tok;
+  if (typeof tok === "object" && "pattern" in tok) return tok.pattern;
+  return null;
+}
+function stripHeredocBodies(command) {
+  const lines = command.split("\n");
+  const out = [];
+  let i = 0;
+  while (i < lines.length) {
+    const line = lines[i];
+    out.push(line);
+    const m = HEREDOC_OPEN.exec(line);
+    i++;
+    if (!m) continue;
+    const delimiter = m[2];
+    while (i < lines.length) {
+      const body = lines[i];
+      i++;
+      if (body.trim() === delimiter) break;
+    }
   }
-});
+  return out.join("\n");
+}
+function isNoiseTarget(target) {
+  if (target.length === 0) return true;
+  if (target === "-") return true;
+  if (target.startsWith("/dev/")) return true;
+  if (/^&?\d+$/.test(target)) return true;
+  return false;
+}
+function targetsFromArgv(argv, depth) {
+  let i = 0;
+  while (i < argv.length) {
+    const tok = argv[i];
+    if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(tok)) {
+      i++;
+      continue;
+    }
+    if (TRANSPARENT_PREFIXES.has(tok)) {
+      i++;
+      if (tok === "env") {
+        while (i < argv.length && (argv[i].startsWith("-") || /^[A-Za-z_][A-Za-z0-9_]*=/.test(argv[i]))) {
+          if (argv[i] === "-u" || argv[i] === "--unset") i++;
+          i++;
+        }
+      }
+      continue;
+    }
+    break;
+  }
+  const cmd = argv[i] ?? "";
+  const args = argv.slice(i + 1);
+  const base = cmd.split("/").pop() ?? cmd;
+  if (SHELL_INTERPRETERS.has(base)) {
+    const c = args.indexOf("-c");
+    if (c >= 0 && typeof args[c + 1] === "string" && depth < 1) {
+      return extractShellWriteTargetsAt(args[c + 1], depth + 1);
+    }
+    return [];
+  }
+  if (base === "tee") {
+    return args.filter((a) => !a.startsWith("-") && !isNoiseTarget(a));
+  }
+  if (base === "sed" || base === "gsed") {
+    return sedTargets(args);
+  }
+  if (base === "perl") {
+    return perlTargets(args);
+  }
+  if (base === "cp" || base === "mv" || base === "install") {
+    const positional = args.filter((a) => !a.startsWith("-") || a === "-");
+    if (positional.length >= 2) {
+      const tFlag = args.findIndex((a) => a === "-t" || a === "--target-directory");
+      if (tFlag >= 0 && args[tFlag + 1]) return [args[tFlag + 1]];
+      return [positional[positional.length - 1]];
+    }
+    return [];
+  }
+  if (base === "dd") {
+    return args.filter((a) => a.startsWith("of=")).map((a) => a.slice(3)).filter((a) => !isNoiseTarget(a));
+  }
+  return [];
+}
+function sedTargets(args) {
+  let inPlace = false;
+  let scriptGiven = false;
+  const files = [];
+  let i = 0;
+  while (i < args.length) {
+    const a = args[i];
+    if (a === "--") {
+      files.push(...args.slice(i + 1).filter((f) => f.length > 0));
+      break;
+    }
+    if (a === "-i" || a === "--in-place") {
+      inPlace = true;
+      const next = args[i + 1];
+      if (typeof next === "string" && (next === "" || /^\.[A-Za-z0-9_-]+$/.test(next))) i++;
+      i++;
+      continue;
+    }
+    if (/^-i/.test(a) || a.startsWith("--in-place=")) {
+      inPlace = true;
+      i++;
+      continue;
+    }
+    if (a === "-e" || a === "--expression" || a === "-f" || a === "--file") {
+      scriptGiven = true;
+      i += 2;
+      continue;
+    }
+    if (a.startsWith("--expression=") || a.startsWith("--file=")) {
+      scriptGiven = true;
+      i++;
+      continue;
+    }
+    if (a.startsWith("-") && a.length > 1) {
+      if (/^-[A-Za-z]*i/.test(a)) inPlace = true;
+      i++;
+      continue;
+    }
+    if (!scriptGiven) {
+      scriptGiven = true;
+      i++;
+      continue;
+    }
+    if (a.length > 0) files.push(a);
+    i++;
+  }
+  return inPlace ? files : [];
+}
+function perlTargets(args) {
+  let inPlace = false;
+  const files = [];
+  let i = 0;
+  while (i < args.length) {
+    const a = args[i];
+    if (a === "-e" || a === "-E") {
+      i += 2;
+      continue;
+    }
+    if (a.startsWith("-")) {
+      if (/^-[A-Za-z0-9]*i/.test(a)) inPlace = true;
+      if (/e$/.test(a) && !/^-i/.test(a)) i++;
+      i++;
+      continue;
+    }
+    files.push(a);
+    i++;
+  }
+  return inPlace ? files : [];
+}
+function extractShellWriteTargetsAt(command, depth) {
+  let tokens;
+  try {
+    tokens = (0, import_shell_quote.parse)(stripHeredocBodies(command), (key) => `$${key}`);
+  } catch {
+    return [];
+  }
+  const targets = [];
+  let argv = [];
+  const flush = () => {
+    if (argv.length > 0) targets.push(...targetsFromArgv(argv, depth));
+    argv = [];
+  };
+  for (let i = 0; i < tokens.length; i++) {
+    const tok = tokens[i];
+    if (isOp(tok)) {
+      if (tok.op === "&" && isOp(tokens[i + 1], ">")) continue;
+      if (tok.op === ">" || tok.op === ">>") {
+        const next = tokens[i + 1];
+        const text2 = next === void 0 ? null : tokenText(next);
+        if (text2 !== null) {
+          if (!isNoiseTarget(text2)) targets.push(text2);
+          i++;
+        }
+        if (/^\d+$/.test(argv[argv.length - 1] ?? "")) argv.pop();
+        continue;
+      }
+      if (tok.op === ">&") {
+        i++;
+        if (/^\d+$/.test(argv[argv.length - 1] ?? "")) argv.pop();
+        continue;
+      }
+      if (tok.op === "<") {
+        const next = tokens[i + 1];
+        if (!isOp(next, "<") && !isOp(tokens[i - 1], "<")) i++;
+        else if (isOp(tokens[i - 1], "<")) i++;
+        continue;
+      }
+      if (SEGMENT_OPS.has(tok.op)) {
+        flush();
+        continue;
+      }
+      continue;
+    }
+    const text = tokenText(tok);
+    if (text !== null) argv.push(text);
+  }
+  flush();
+  return Array.from(new Set(targets));
+}
+function extractShellWriteTargets(command) {
+  if (typeof command !== "string" || command.trim().length === 0) return [];
+  return extractShellWriteTargetsAt(command, 0);
+}
 
 // src/hooks/runtime/sniff.ts
+function resolveWriteTarget(cwd, target) {
+  if (target.includes("$")) return target;
+  if (target === "~" || target.startsWith("~/")) {
+    return resolvePath(homedir(), target.slice(2));
+  }
+  return isAbsolute(target) ? resolvePath(target) : resolvePath(cwd, target);
+}
 function filePathFromPatch(patch) {
   const lines = patch.split("\n");
   for (const line of lines) {
@@ -4591,7 +4819,14 @@ function sniff(input) {
     } else if (action === "pre_read_code" || action === "post_read_code") {
       toolName = "Read";
     }
-    return { client: "windsurf", toolName, filePath, newContent, raw: input };
+    return {
+      client: "windsurf",
+      toolName,
+      filePath,
+      filePaths: filePath ? [filePath] : [],
+      newContent,
+      raw: input
+    };
   }
   if ("hookEventName" in input) {
     return extractToolInputShape(input, "vscode");
@@ -4603,7 +4838,7 @@ function sniff(input) {
       client = "cursor";
     } else {
       const toolName = typeof input.tool_name === "string" ? input.tool_name : "";
-      client = toolName === "apply_patch" ? "codex" : "claude-code";
+      client = toolName === "apply_patch" || "turn_id" in input ? "codex" : "claude-code";
     }
     return extractToolInputShape(input, client);
   }
@@ -4611,6 +4846,7 @@ function sniff(input) {
     client: "unknown",
     toolName: "",
     filePath: "",
+    filePaths: [],
     newContent: "",
     raw: input
   };
@@ -4619,8 +4855,19 @@ function extractToolInputShape(input, client) {
   const toolName = typeof input.tool_name === "string" ? input.tool_name : "";
   const toolInput = input.tool_input ?? {};
   let filePath = typeof toolInput.file_path === "string" ? toolInput.file_path : "";
+  let filePaths = [];
   let newContent = "";
   switch (toolName) {
+    case "Bash": {
+      const command = typeof toolInput.command === "string" ? toolInput.command : "";
+      newContent = command;
+      const cwd = typeof input.cwd === "string" && input.cwd.length > 0 ? input.cwd : process.cwd();
+      filePaths = extractShellWriteTargets(command).map(
+        (t) => resolveWriteTarget(cwd, t)
+      );
+      filePath = filePaths[0] ?? "";
+      break;
+    }
     case "Write":
       newContent = typeof toolInput.content === "string" ? toolInput.content : "";
       break;
@@ -4633,22 +4880,28 @@ function extractToolInputShape(input, client) {
       );
       break;
     case "apply_patch": {
-      const patch = typeof toolInput.patch === "string" ? toolInput.patch : "";
+      const patch = typeof toolInput.patch === "string" ? toolInput.patch : typeof toolInput.command === "string" ? toolInput.command : "";
       newContent = patch;
       if (!filePath) filePath = filePathFromPatch(patch);
       break;
     }
   }
-  return { client, toolName, filePath, newContent, raw: input };
+  if (typeof input.cwd === "string" && input.cwd.length > 0) {
+    if (filePath) filePath = resolveWriteTarget(input.cwd, filePath);
+    filePaths = filePaths.map((f) => resolveWriteTarget(input.cwd, f));
+  }
+  if (filePaths.length === 0 && filePath) filePaths = [filePath];
+  return { client, toolName, filePath, filePaths, newContent, raw: input };
 }
 
 // src/hooks/runtime/resolve.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
+import { createHash } from "node:crypto";
 import { existsSync as existsSync6, readFileSync as readFileSync6 } from "node:fs";
 
 // src/auth/auth-store.ts
 import { execFileSync } from "node:child_process";
-import { homedir } from "node:os";
+import { homedir as homedir2 } from "node:os";
 import { join } from "node:path";
 import {
   existsSync,
@@ -4764,10 +5017,10 @@ function readMacOSKeychain(mcpName) {
   }
 }
 function fileFallbackPath() {
-  return join(homedir(), ".cybedefend", "auth.json");
+  return join(homedir2(), ".cybedefend", "auth.json");
 }
 function storeFileFallback(blob) {
-  const dir = join(homedir(), ".cybedefend");
+  const dir = join(homedir2(), ".cybedefend");
   mkdirSync(dir, { recursive: true });
   const p = fileFallbackPath();
   writeFileSync(p, blob, { mode: 384 });
@@ -4995,7 +5248,7 @@ import { dirname as dirname2 } from "node:path";
 // src/utils.ts
 import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname, join as join2 } from "node:path";
-import { homedir as homedir2, platform } from "node:os";
+import { homedir as homedir3, platform } from "node:os";
 
 // node_modules/.pnpm/kleur@4.1.5/node_modules/kleur/index.mjs
 var FORCE_COLOR;
@@ -5098,7 +5351,7 @@ function init(open, close) {
 
 // src/utils.ts
 function home(...parts) {
-  return join2(homedir2(), ...parts);
+  return join2(homedir3(), ...parts);
 }
 function ensureDirFor(filePath) {
   const dir = dirname(filePath);
@@ -5173,10 +5426,10 @@ function writeCachedRepoLink(key, entry, deps = {}) {
 
 // src/hooks/runtime/config.ts
 import { existsSync as existsSync4, readFileSync as readFileSync4 } from "node:fs";
-import { homedir as homedir3 } from "node:os";
+import { homedir as homedir4 } from "node:os";
 import { join as join3 } from "node:path";
 function runtimeConfigPath() {
-  return join3(homedir3(), ".cybedefend", "runtime-config.json");
+  return join3(homedir4(), ".cybedefend", "runtime-config.json");
 }
 function loadRuntimeConfig(path) {
   const p = path ?? runtimeConfigPath();
@@ -5205,7 +5458,7 @@ async function readStdinJson() {
 
 // src/hooks/runtime/trusted-api-base.ts
 import { existsSync as existsSync5, readFileSync as readFileSync5 } from "node:fs";
-import { homedir as homedir4 } from "node:os";
+import { homedir as homedir5 } from "node:os";
 import { join as join4 } from "node:path";
 
 // src/config.ts
@@ -5234,7 +5487,7 @@ var REGIONS = [
 
 // src/hooks/runtime/trusted-api-base.ts
 function userRegionsPath() {
-  return join4(homedir4(), ".cybedefend", "regions.json");
+  return join4(homedir5(), ".cybedefend", "regions.json");
 }
 function normalizeOrigin(candidate) {
   if (typeof candidate !== "string") return null;
@@ -5333,30 +5586,50 @@ function resolveProjectId(cwd = process.cwd(), deps = {}) {
   }
   return { projectId: null, apiBase: null };
 }
-function resolveToken(mcpName) {
+function resolveToken(mcpName, opts = {}) {
   const envToken = process.env.CYBEDEFEND_TOKEN;
   if (envToken && envToken.length > 0) return envToken;
-  if (process.platform === "darwin") {
-    return resolveTokenMacOS(mcpName) ?? resolveTokenCodexMacOS(mcpName);
+  const stored = (opts.loadStoredAuth ?? loadAuth)(mcpName);
+  if (stored && (opts.now ?? Date.now)() < stored.expiresAt) {
+    return stored.accessToken;
+  }
+  const platform2 = opts.platform ?? process.platform;
+  const readKeychain = opts.readKeychain ?? readMacOSKeychain2;
+  if (platform2 === "darwin") {
+    return resolveTokenMacOS(mcpName, readKeychain) ?? resolveTokenCodexMacOS(mcpName, opts.mcpUrl, readKeychain);
   }
-  if (process.platform === "linux") return resolveTokenLinux(mcpName);
+  if (platform2 === "linux") return resolveTokenLinux(mcpName);
   return null;
 }
-function resolveTokenMacOS(mcpName) {
-  let blob;
+function codexCredentialAccount(mcpName, mcpUrl) {
+  const digest = createHash("sha256").update(JSON.stringify({ type: "http", url: mcpUrl, headers: {} })).digest("hex");
+  return `${mcpName}|${digest.slice(0, 16)}`;
+}
+function readMacOSKeychain2(service, account) {
   try {
-    blob = execFileSync2(
+    const blob = execFileSync2(
       "security",
-      ["find-generic-password", "-s", "Claude Code-credentials", "-w"],
+      [
+        "find-generic-password",
+        "-s",
+        service,
+        ...account === void 0 ? [] : ["-a", account],
+        "-w"
+      ],
       {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         timeout: 2e3
       }
     ).trim();
+    return blob.length > 0 ? blob : null;
   } catch {
     return null;
   }
+}
+function resolveTokenMacOS(mcpName, readKeychain) {
+  const blob = readKeychain("Claude Code-credentials");
+  if (!blob) return null;
   try {
     const data = JSON.parse(blob);
     const oauth = data.mcpOAuth ?? {};
@@ -5370,37 +5643,20 @@ function resolveTokenMacOS(mcpName) {
   }
   return null;
 }
-function resolveTokenCodexMacOS(mcpName) {
-  let blob;
-  try {
-    blob = execFileSync2(
-      "security",
-      ["find-generic-password", "-s", "Codex MCP Credentials", "-a", mcpName, "-w"],
-      {
-        encoding: "utf8",
-        stdio: ["ignore", "pipe", "ignore"],
-        timeout: 2e3
-      }
-    ).trim();
-  } catch {
-    try {
-      blob = execFileSync2(
-        "security",
-        ["find-generic-password", "-s", "Codex MCP Credentials", "-w"],
-        {
-          encoding: "utf8",
-          stdio: ["ignore", "pipe", "ignore"],
-          timeout: 2e3
-        }
-      ).trim();
-    } catch {
-      return null;
-    }
+function resolveTokenCodexMacOS(mcpName, mcpUrl, readKeychain) {
+  const accounts = mcpUrl ? [codexCredentialAccount(mcpName, mcpUrl), mcpName] : [mcpName];
+  for (const account of accounts) {
+    const blob = readKeychain("Codex MCP Credentials", account);
+    if (!blob) continue;
+    const token = parseCodexCredential(blob);
+    if (token) return token;
   }
-  if (!blob) return null;
+  return null;
+}
+function parseCodexCredential(blob) {
   try {
     const data = JSON.parse(blob);
-    return data.access_token ?? data.accessToken ?? data.token ?? null;
+    return data.token_response?.access_token ?? data.access_token ?? data.accessToken ?? data.token ?? null;
   } catch {
     return blob || null;
   }
@@ -5421,7 +5677,7 @@ function resolveTokenLinux(mcpName) {
     return null;
   }
 }
-async function resolveTokenWithRefresh(mcpName, deps = {}) {
+async function resolveTokenWithRefresh(mcpName, deps = {}, opts = {}) {
   const getValidAccessTokenFn = deps.getValidAccessToken ?? getValidAccessToken;
   const resolveTokenFn = deps.resolveTokenFn ?? resolveToken;
   const envToken = process.env.CYBEDEFEND_TOKEN;
@@ -5431,10 +5687,10 @@ async function resolveTokenWithRefresh(mcpName, deps = {}) {
     if (token) return token;
   } catch (e) {
     if (e instanceof LoginRequiredError) {
-      return resolveTokenFn(mcpName);
+      return resolveTokenFn(mcpName, opts);
     }
   }
-  return resolveTokenFn(mcpName);
+  return resolveTokenFn(mcpName, opts);
 }
 var RESOLVE_API_TIMEOUT_MS = 4e3;
 async function resolveProjectIdWithApi(cwd = process.cwd(), deps = {}) {
@@ -5584,6 +5840,10 @@ async function fetchProposalsCount(opts) {
 }
 
 // src/hooks/runtime/emit.ts
+var ENVELOPE_CLIENTS = {
+  SessionStart: /* @__PURE__ */ new Set(["codex"]),
+  PreToolUse: /* @__PURE__ */ new Set(["claude-code", "codex"])
+};
 function emit(body, client) {
   if (!body) return;
   if (client === "cursor") {
@@ -5597,16 +5857,16 @@ function emit(body, client) {
   process.stdout.write(body);
   if (!body.endsWith("\n")) process.stdout.write("\n");
 }
-function emitContext(body, client) {
+function emitContext(body, client, hookEventName) {
   if (!body) return;
-  if (client === "codex") {
+  if (ENVELOPE_CLIENTS[hookEventName].has(client)) {
     const payload = JSON.stringify({
       hookSpecificOutput: {
-        hookEventName: "SessionStart",
+        hookEventName,
         additionalContext: body
       }
     });
-    process.stdout.write(payload);
+    process.stdout.write(payload + "\n");
     return;
   }
   emit(body, client);
@@ -5626,11 +5886,15 @@ function emitStop(body, client, reason) {
 }
 
 // src/hooks/runtime/fetch-rules.ts
+function emitPreToolUseContext(body, client) {
+  emitContext(body, client, "PreToolUse");
+}
 var INTERESTED_TOOLS = /* @__PURE__ */ new Set([
   "Edit",
   "Write",
   "MultiEdit",
-  "apply_patch"
+  "apply_patch",
+  "Bash"
 ]);
 async function fetchRulesHook(deps = {}) {
   const readStdin = deps.readStdin ?? readStdinJson;
@@ -5639,7 +5903,7 @@ async function fetchRulesHook(deps = {}) {
   const resolveTok = deps.resolveTokenFn ?? resolveToken;
   const fetchRules = deps.fetchRulesFn ?? fetchBusinessRules;
   const fetchSecRules = deps.fetchSecurityRulesFn ?? fetchSecurityRules;
-  const emitFn = deps.emitFn ?? emit;
+  const emitFn = deps.emitFn ?? emitPreToolUseContext;
   const stdin = await readStdin();
   const event = sniff(stdin);
   if (!INTERESTED_TOOLS.has(event.toolName)) return;
@@ -5649,14 +5913,18 @@ async function fetchRulesHook(deps = {}) {
   const { projectId, apiBase: configApiBase } = await resolveProject();
   if (!projectId) return;
   const apiBase = process.env.CYBEDEFEND_API_BASE ?? configApiBase ?? config.region.apiBase;
-  const token = resolveTok(config.region.mcpName);
+  const token = resolveTok(config.region.mcpName, {
+    mcpUrl: config.region.mcpUrl
+  });
   if (!token) return;
   const intent = buildIntent(event);
+  const files = event.filePaths.length > 0 ? event.filePaths : [event.filePath];
+  const fileLabel = files.join(", ");
   const fetchOpts = {
     apiBase,
     projectId,
     token,
-    files: [event.filePath],
+    files,
     intent,
     topK: 5
   };
@@ -5664,24 +5932,25 @@ async function fetchRulesHook(deps = {}) {
     fetchRules(fetchOpts),
     fetchSecRules(fetchOpts)
   ]);
+  const blocks = [];
   if (businessResult) {
     const body = composeBody(
       businessResult.markdown,
       businessResult.total,
-      event.filePath
+      fileLabel
     );
-    if (body) emitFn(body, event.client);
+    if (body) blocks.push(body);
   }
   if (securityResult && securityResult.total > 0 && securityResult.markdown && securityResult.markdown.length > 0) {
-    emitFn(
+    blocks.push(
       composeSecurityBody(
         securityResult.markdown,
         securityResult.total,
-        event.filePath
-      ),
-      event.client
+        fileLabel
+      )
     );
   }
+  if (blocks.length > 0) emitFn(blocks.join("\n"), event.client);
 }
 function buildIntent(event) {
   const limit = parseInt(process.env.CYBEDEFEND_INTENT_BYTES ?? "800", 10);
@@ -5693,7 +5962,7 @@ function visibleCalloutTemplate(kind, total, filePath) {
   return [
     "---",
     "",
-    `**\u{1F6E1}\uFE0F REQUIRED USER-VISIBLE MARKER** \u2014 you MUST include this exact block as the FIRST paragraph of your next assistant reply, BEFORE the Edit/Write tool call. Do not paraphrase, do not skip \u2014 without it, the user cannot see CybeDefend is influencing the change.`,
+    `**\u{1F6E1}\uFE0F REQUIRED USER-VISIBLE MARKER** \u2014 you MUST include this exact block as the FIRST paragraph of your next assistant reply, BEFORE the tool call that writes the file. Do not paraphrase, do not skip \u2014 without it, the user cannot see CybeDefend is influencing the change.`,
     "",
     `> \u{1F6E1}\uFE0F **CybeDefend ${kind} Rules** \u2014 ${total} rule${total === 1 ? "" : "s"} for \`${filePath}\``,
     `> - **<rule-title>** [<severity> \xB7 <category>] \u2014 applies because <one-sentence reason>`,
@@ -5740,7 +6009,7 @@ function composeSecurityBody(markdown, total, filePath) {
 // src/hooks/runtime/self-update-check.ts
 import { spawn } from "node:child_process";
 import { existsSync as existsSync8, readFileSync as readFileSync7, rmSync, writeFileSync as writeFileSync4 } from "node:fs";
-import { homedir as homedir5 } from "node:os";
+import { homedir as homedir6 } from "node:os";
 import { join as join5 } from "node:path";
 
 // src/hooks/runtime/semver.ts
@@ -5818,7 +6087,7 @@ function isValidRegistryVersion(value) {
 }
 async function selfUpdateCheck(deps) {
   const now = deps.now ?? (() => Date.now());
-  const dir = deps.cybeDir ?? join5(process.env.CYBEDEFEND_HOME ?? homedir5(), ".cybedefend");
+  const dir = deps.cybeDir ?? join5(process.env.CYBEDEFEND_HOME ?? homedir6(), ".cybedefend");
   const throttlePath = join5(dir, "update-check.json");
   const logPath = join5(dir, "last-update.log");
   const installMode = deps.installMode ?? (deps.runnerSource ? detectInstallMode(deps.runnerSource) : detectInstallMode(resolveScriptPath()));
@@ -5946,19 +6215,66 @@ function pmCommand(mode, spec) {
   }
 }
 
+// src/hooks/runtime/hook-refresh-trigger.ts
+import { spawn as spawn2 } from "node:child_process";
+import { existsSync as existsSync9, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "node:fs";
+import { homedir as homedir7 } from "node:os";
+import { dirname as dirname3, join as join6 } from "node:path";
+function maybeRefreshStaleWiring(deps) {
+  try {
+    const { config, runnerVersion } = deps;
+    if (!config.runnerSource || config.installedVersion === runnerVersion) {
+      return false;
+    }
+    const cliEntry = join6(dirname3(dirname3(config.runnerSource)), "bin", "vibedefend.js");
+    if (!(deps.exists ?? existsSync9)(cliEntry)) return false;
+    const markerPath = deps.markerPath ?? join6(process.env.CYBEDEFEND_HOME ?? homedir7(), ".cybedefend", "hook-refresh.json");
+    if (readMarkerVersion(markerPath) === runnerVersion) return false;
+    (deps.spawnRefresh ?? defaultSpawnRefresh)(cliEntry);
+    writeMarker(markerPath, runnerVersion);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function readMarkerVersion(path) {
+  try {
+    if (!existsSync9(path)) return null;
+    const data = JSON.parse(readFileSync8(path, "utf8"));
+    return typeof data.version === "string" ? data.version : null;
+  } catch {
+    return null;
+  }
+}
+function writeMarker(path, version) {
+  try {
+    ensureDirFor(path);
+    writeFileSync5(path, JSON.stringify({ version, spawnedAt: Date.now() }) + "\n");
+  } catch {
+  }
+}
+function defaultSpawnRefresh(cliEntry) {
+  const child = spawn2(process.execPath, [cliEntry, "update", "--refresh-hooks"], {
+    detached: true,
+    stdio: "ignore",
+    windowsHide: true
+  });
+  child.unref();
+}
+
 // src/version.ts
-import { readFileSync as readFileSync8 } from "node:fs";
+import { readFileSync as readFileSync9 } from "node:fs";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-import { dirname as dirname3, join as join6 } from "node:path";
+import { dirname as dirname4, join as join7 } from "node:path";
 var PKG_NAME = "@cybedefend/vibedefend";
 function defaultPkgPath() {
-  return join6(dirname3(fileURLToPath2(import.meta.url)), "..", "package.json");
+  return join7(dirname4(fileURLToPath2(import.meta.url)), "..", "package.json");
 }
 function readPackageMeta(opts = {}) {
   if (typeof opts.bakedVersion === "string" && opts.bakedVersion.length > 0) {
     return { name: PKG_NAME, version: opts.bakedVersion };
   }
-  const readFile = opts.readFile ?? ((p) => readFileSync8(p, "utf8"));
+  const readFile = opts.readFile ?? ((p) => readFileSync9(p, "utf8"));
   const pkgPath = opts.pkgPath ?? defaultPkgPath();
   try {
     return JSON.parse(readFile(pkgPath));
@@ -5967,10 +6283,13 @@ function readPackageMeta(opts = {}) {
   }
 }
 var pkg = readPackageMeta({
-  bakedVersion: true ? "1.4.2" : void 0
+  bakedVersion: true ? "1.4.4" : void 0
 });
 
 // src/hooks/runtime/session-start.ts
+function emitSessionStartContext(body, client) {
+  emitContext(body, client, "SessionStart");
+}
 async function sessionStartHook(deps = {}) {
   const readStdin = deps.readStdin ?? readStdinJson;
   const loadConfig = deps.loadConfig ?? loadRuntimeConfig;
@@ -5978,11 +6297,15 @@ async function sessionStartHook(deps = {}) {
   const resolveTok = deps.resolveTokenFn ?? resolveToken;
   const fetchProposals = deps.fetchProposalsFn ?? fetchProposalsCount;
   const selfUpdateCheckFn = deps.selfUpdateCheckFn ?? selfUpdateCheck;
-  const emitFn = deps.emitFn ?? emitContext;
+  const emitFn = deps.emitFn ?? emitSessionStartContext;
   const stdin = await readStdin();
   const event = sniff(stdin);
   const config = loadConfig();
   if (!config) return;
+  (deps.refreshStaleWiringFn ?? maybeRefreshStaleWiring)({
+    config,
+    runnerVersion: pkg.version
+  });
   const { projectId, apiBase: configApiBase } = await resolveProject();
   if (!projectId) return;
   const apiBase = process.env.CYBEDEFEND_API_BASE ?? configApiBase ?? config.region.apiBase;
@@ -5995,7 +6318,9 @@ async function sessionStartHook(deps = {}) {
     );
     return;
   }
-  const token = resolveTok(config.region.mcpName);
+  const token = resolveTok(config.region.mcpName, {
+    mcpUrl: config.region.mcpUrl
+  });
   let total = null;
   if (token) {
     const result = await fetchProposals({ apiBase, projectId, token });
@@ -6069,7 +6394,7 @@ async function sessionStartHook(deps = {}) {
 }
 
 // src/hooks/runtime/session-review.ts
-import { existsSync as existsSync9, readFileSync as readFileSync9 } from "node:fs";
+import { existsSync as existsSync10, readFileSync as readFileSync10 } from "node:fs";
 var COUNTED_TOOLS = /* @__PURE__ */ new Set([
   "Edit",
   "Write",
@@ -6147,9 +6472,9 @@ function loadTranscript(stdin, readFile) {
   return out;
 }
 function defaultReadTranscript(path) {
-  if (!existsSync9(path)) return null;
+  if (!existsSync10(path)) return null;
   try {
-    return readFileSync9(path, "utf8");
+    return readFileSync10(path, "utf8");
   } catch {
     return null;
   }
@@ -6407,19 +6732,19 @@ async function preCompactHook(deps = {}) {
 }
 
 // src/hooks/runtime/user-prompt-submit.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync4, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { join as join7 } from "node:path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync4, readFileSync as readFileSync11, writeFileSync as writeFileSync6 } from "node:fs";
+import { homedir as homedir8 } from "node:os";
+import { join as join8 } from "node:path";
 var SESSIONS_CAP = 100;
 function defaultSessionsFile() {
-  const dir = process.env.CYBEDEFEND_BASELINE_DIR ?? join7(homedir6(), ".cybedefend");
-  return join7(dir, "user-prompt-seen-sessions.json");
+  const dir = process.env.CYBEDEFEND_BASELINE_DIR ?? join8(homedir8(), ".cybedefend");
+  return join8(dir, "user-prompt-seen-sessions.json");
 }
 function defaultSessionTracker(file = defaultSessionsFile()) {
   function load() {
-    if (!existsSync10(file)) return [];
+    if (!existsSync11(file)) return [];
     try {
-      const raw = readFileSync10(file, "utf8");
+      const raw = readFileSync11(file, "utf8");
       const data = JSON.parse(raw);
       if (!Array.isArray(data.sessions)) return [];
       return data.sessions.filter((s) => typeof s === "string");
@@ -6436,8 +6761,8 @@ function defaultSessionTracker(file = defaultSessionsFile()) {
       if (existing.includes(sessionId)) return;
       const next = [...existing, sessionId].slice(-SESSIONS_CAP);
       try {
-        mkdirSync4(join7(file, ".."), { recursive: true });
-        writeFileSync5(file, JSON.stringify({ sessions: next }), "utf8");
+        mkdirSync4(join8(file, ".."), { recursive: true });
+        writeFileSync6(file, JSON.stringify({ sessions: next }), "utf8");
       } catch {
       }
     }
@@ -6462,7 +6787,9 @@ async function userPromptSubmitHook(deps = {}) {
   const { projectId, apiBase: configApiBase } = await resolveProject();
   if (!projectId) return;
   const apiBase = process.env.CYBEDEFEND_API_BASE ?? configApiBase ?? config.region.apiBase;
-  const token = resolveTok(config.region.mcpName);
+  const token = resolveTok(config.region.mcpName, {
+    mcpUrl: config.region.mcpUrl
+  });
   let total = null;
   if (token) {
     const result = await fetchProposals({ apiBase, projectId, token });
@@ -6719,7 +7046,7 @@ function bucketRules(rules) {
 }
 
 // src/guards-evaluator/preprocess.ts
-var import_shell_quote = __toESM(require_shell_quote(), 1);
+var import_shell_quote2 = __toESM(require_shell_quote(), 1);
 var PLACEHOLDER = "<DATA>";
 var DATA_BEARING_CONTEXTS = {
   git: /* @__PURE__ */ new Set(["commit", "tag", "notes", "stash", "merge", "cherry-pick", "revert"]),
@@ -6738,7 +7065,7 @@ var DATA_FLAGS_VALUE = /* @__PURE__ */ new Set([
 ]);
 var DATA_FLAGS_EQUAL = ["--message=", "--file=", "--body=", "--body-file="];
 var SHELL_OPS = /* @__PURE__ */ new Set([";", "&&", "||", "|", "|&", "&", ">", ">>", "<", "(", ")"]);
-var HEREDOC_OPEN = /^<<-?\s*(['"]?)([A-Za-z_][A-Za-z0-9_]*)\1/;
+var HEREDOC_OPEN2 = /^<<-?\s*(['"]?)([A-Za-z_][A-Za-z0-9_]*)\1/;
 function isExecutableValue(tok) {
   return tok.startsWith("$(") || tok.startsWith("<(") || tok.startsWith(">(") || tok.includes("`");
 }
@@ -6751,7 +7078,7 @@ function stripDataArgs(command) {
     tokens = command.slice();
   } else {
     try {
-      tokens = (0, import_shell_quote.parse)(command, (key) => "$" + key);
+      tokens = (0, import_shell_quote2.parse)(command, (key) => "$" + key);
     } catch {
       return command;
     }
@@ -6792,7 +7119,7 @@ function stripDataArgs(command) {
     const contextSubcommands = segmentTopCmd ? DATA_BEARING_CONTEXTS[segmentTopCmd] : void 0;
     const inDataBearingContext = contextSubcommands === null || contextSubcommands !== void 0 && segmentSubCmd !== null && contextSubcommands.has(segmentSubCmd);
     if (inDataBearingContext) {
-      const heredoc = HEREDOC_OPEN.exec(tok);
+      const heredoc = HEREDOC_OPEN2.exec(tok);
       if (heredoc) {
         const delim = heredoc[2];
         const closes = (t) => t === delim || t.endsWith("\n" + delim);
@@ -7120,7 +7447,7 @@ function validateRule(rule) {
 }
 
 // src/guards-evaluator/redact.ts
-import { createHash } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 var REDACTED = "[REDACTED]";
 var PATTERNS = [
   // 1. JWT — three base64url segments separated by dots
@@ -7222,7 +7549,7 @@ function redactTarget(text, maxLen = 256) {
   return result;
 }
 function hashTarget(text) {
-  return createHash("sha256").update(text, "utf8").digest("hex");
+  return createHash2("sha256").update(text, "utf8").digest("hex");
 }
 
 // src/hooks/runtime/near-miss.ts
@@ -7500,10 +7827,10 @@ function nearMiss(req, rule) {
 }
 
 // src/hooks/runtime/guard-rules-cache.ts
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync6, existsSync as existsSync11, mkdirSync as mkdirSync5 } from "node:fs";
-import { dirname as dirname4 } from "node:path";
-import { homedir as homedir7 } from "node:os";
-import { join as join8 } from "node:path";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, existsSync as existsSync12, mkdirSync as mkdirSync5 } from "node:fs";
+import { dirname as dirname5 } from "node:path";
+import { homedir as homedir9 } from "node:os";
+import { join as join9 } from "node:path";
 
 // node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
@@ -11615,8 +11942,8 @@ function parseRuleFields(raw) {
 }
 
 // src/hooks/runtime/guard-rules-cache.ts
-var DEFAULT_CACHE_FILE = join8(
-  homedir7(),
+var DEFAULT_CACHE_FILE = join9(
+  homedir9(),
   ".cybedefend",
   "guards-cache.json"
 );
@@ -11740,9 +12067,9 @@ function makeGuardRulesCache(opts) {
     }
   }
   function readCache(projectId) {
-    if (!existsSync11(cacheFile)) return null;
+    if (!existsSync12(cacheFile)) return null;
     try {
-      const raw = readFileSync11(cacheFile, "utf8");
+      const raw = readFileSync12(cacheFile, "utf8");
       const data = JSON.parse(raw);
       if (data.projectId !== projectId) return null;
       return data;
@@ -11753,15 +12080,15 @@ function makeGuardRulesCache(opts) {
   function writeCache(entry) {
     try {
       ensureDirFor2(cacheFile);
-      writeFileSync6(cacheFile, JSON.stringify(entry), "utf8");
+      writeFileSync7(cacheFile, JSON.stringify(entry), "utf8");
     } catch {
     }
   }
   return { refreshIfStale };
 }
 function ensureDirFor2(filePath) {
-  const dir = dirname4(filePath);
-  if (!existsSync11(dir)) {
+  const dir = dirname5(filePath);
+  if (!existsSync12(dir)) {
     mkdirSync5(dir, { recursive: true });
   }
 }
@@ -11883,11 +12210,11 @@ function detectPromptInjection(text) {
 }
 
 // src/hooks/runtime/judge-cache.ts
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, existsSync as existsSync12, mkdirSync as mkdirSync6 } from "node:fs";
-import { dirname as dirname5, join as join9 } from "node:path";
-import { homedir as homedir8 } from "node:os";
-var DEFAULT_JUDGE_CACHE_FILE = join9(
-  homedir8(),
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync8, existsSync as existsSync13, mkdirSync as mkdirSync6 } from "node:fs";
+import { dirname as dirname6, join as join10 } from "node:path";
+import { homedir as homedir10 } from "node:os";
+var DEFAULT_JUDGE_CACHE_FILE = join10(
+  homedir10(),
   ".cybedefend",
   "guards-judge-cache.json"
 );
@@ -11897,9 +12224,9 @@ function makeJudgeCache(opts = {}) {
   const ttlMs = opts.ttlMs ?? DEFAULT_JUDGE_TTL_MS;
   const now = opts.now ?? (() => Date.now());
   function readAll() {
-    if (!existsSync12(cacheFile)) return {};
+    if (!existsSync13(cacheFile)) return {};
     try {
-      return JSON.parse(readFileSync12(cacheFile, "utf8"));
+      return JSON.parse(readFileSync13(cacheFile, "utf8"));
     } catch {
       return {};
     }
@@ -11919,36 +12246,36 @@ function makeJudgeCache(opts = {}) {
       }
       all[key] = { res, at: t };
       ensureDirFor3(cacheFile);
-      writeFileSync7(cacheFile, JSON.stringify(all), "utf8");
+      writeFileSync8(cacheFile, JSON.stringify(all), "utf8");
     } catch {
     }
   }
   return { get, set };
 }
 function ensureDirFor3(filePath) {
-  const dir = dirname5(filePath);
-  if (!existsSync12(dir)) {
+  const dir = dirname6(filePath);
+  if (!existsSync13(dir)) {
     mkdirSync6(dir, { recursive: true });
   }
 }
 
 // src/hooks/runtime/guard-check.ts
-import { homedir as homedir10 } from "node:os";
-import { join as join11 } from "node:path";
+import { homedir as homedir12 } from "node:os";
+import { join as join12 } from "node:path";
 
 // src/hooks/runtime/guard-violations-buffer.ts
 import {
   appendFileSync,
-  existsSync as existsSync13,
-  readFileSync as readFileSync13,
-  writeFileSync as writeFileSync8,
+  existsSync as existsSync14,
+  readFileSync as readFileSync14,
+  writeFileSync as writeFileSync9,
   mkdirSync as mkdirSync7
 } from "node:fs";
-import { dirname as dirname6 } from "node:path";
-import { homedir as homedir9 } from "node:os";
-import { join as join10 } from "node:path";
-var DEFAULT_BUFFER_FILE = join10(
-  homedir9(),
+import { dirname as dirname7 } from "node:path";
+import { homedir as homedir11 } from "node:os";
+import { join as join11 } from "node:path";
+var DEFAULT_BUFFER_FILE = join11(
+  homedir11(),
   ".cybedefend",
   "guards-violations-buffer.jsonl"
 );
@@ -11967,10 +12294,10 @@ function makeViolationsBuffer(opts = {}) {
     }
   }
   async function flushViolations2(ctx, postFn) {
-    if (!existsSync13(bufferFile)) return;
+    if (!existsSync14(bufferFile)) return;
     let content;
     try {
-      content = readFileSync13(bufferFile, "utf8").trim();
+      content = readFileSync14(bufferFile, "utf8").trim();
     } catch {
       return;
     }
@@ -11989,7 +12316,7 @@ function makeViolationsBuffer(opts = {}) {
     }
     if (records.length === 0) {
       try {
-        writeFileSync8(bufferFile, "", "utf8");
+        writeFileSync9(bufferFile, "", "utf8");
       } catch {
       }
       return;
@@ -12019,10 +12346,10 @@ function makeViolationsBuffer(opts = {}) {
     }
     try {
       if (failed.length === 0) {
-        writeFileSync8(bufferFile, "", "utf8");
+        writeFileSync9(bufferFile, "", "utf8");
       } else {
         const serialised = failed.map((r) => JSON.stringify(r)).join("\n") + "\n";
-        writeFileSync8(bufferFile, serialised, "utf8");
+        writeFileSync9(bufferFile, serialised, "utf8");
       }
     } catch {
     }
@@ -12030,8 +12357,8 @@ function makeViolationsBuffer(opts = {}) {
   return { bufferViolation: bufferViolation2, flushViolations: flushViolations2 };
 }
 function ensureDirFor4(filePath) {
-  const dir = dirname6(filePath);
-  if (!existsSync13(dir)) {
+  const dir = dirname7(filePath);
+  if (!existsSync14(dir)) {
     mkdirSync7(dir, { recursive: true });
   }
 }
@@ -12059,10 +12386,10 @@ function appendDebugLog(entry) {
     const homeDir = process.env.HOME ?? process.env.USERPROFILE ?? "";
     if (!homeDir) return;
     const { mkdirSync: mkdirSync8, appendFileSync: appendFileSync2 } = __require("node:fs");
-    const { join: join12 } = __require("node:path");
-    const dir = join12(homeDir, ".cybedefend");
+    const { join: join13 } = __require("node:path");
+    const dir = join13(homeDir, ".cybedefend");
     mkdirSync8(dir, { recursive: true });
-    appendFileSync2(join12(dir, "hook-debug.log"), entry + "\n", "utf8");
+    appendFileSync2(join13(dir, "hook-debug.log"), entry + "\n", "utf8");
   } catch {
   }
 }
@@ -12548,8 +12875,6 @@ function emitAgentMessage(verdict, message) {
       // Claude Code legacy
       decision: "block",
       reason: fullMessage,
-      continue: false,
-      stopReason: fullMessage,
       // Claude Code modern
       hookSpecificOutput: {
         hookEventName: "PreToolUse",
@@ -12578,9 +12903,9 @@ function emitAgentMessage(verdict, message) {
 }
 function makeProductionJudgeDeps() {
   const cache = makeJudgeCache();
-  const warnDir = process.env.CYBEDEFEND_BASELINE_DIR ?? join11(homedir10(), ".cybedefend");
+  const warnDir = process.env.CYBEDEFEND_BASELINE_DIR ?? join12(homedir12(), ".cybedefend");
   const warnTracker = defaultSessionTracker(
-    join11(warnDir, "guards-judge-warned-sessions.json")
+    join12(warnDir, "guards-judge-warned-sessions.json")
   );
   return {
     callJudge,
@@ -12605,7 +12930,11 @@ async function runPreToolUseGuard() {
     const { projectId, apiBase: configApiBase } = await resolveProjectIdWithApi();
     if (!projectId) return 0;
     const apiBaseResolved = process.env.CYBEDEFEND_API_BASE ?? configApiBase ?? config.region.apiBase;
-    const token = await resolveTokenWithRefresh(config.region.mcpName);
+    const token = await resolveTokenWithRefresh(
+      config.region.mcpName,
+      {},
+      { mcpUrl: config.region.mcpUrl }
+    );
     if (!token) {
       emitUnverifiedBanner(
         "Not authenticated \u2014 run `vibedefend login` to restore Action Guards."