@mnemonik/cli 7.104.8 → 7.104.10

package/dist/scanner/service.js

@@ -5,7 +5,21 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __commonJS = (cb, mod) => function __require() {
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+var __esm = (fn, res, err2) => function __init() {
+  if (err2) throw err2[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err2 = [e], e;
+  }
+};
+var __commonJS = (cb, mod) => function __require2() {
   try {
     return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
   } catch (e) {
@@ -400,90 +414,1742 @@ var require_ignore = __commonJS({
         }
         return this;
       }
-      // legacy
-      addPattern(pattern) {
-        return this.add(pattern);
+      // legacy
+      addPattern(pattern) {
+        return this.add(pattern);
+      }
+      // @returns {TestResult}
+      _test(originalPath, cache, checkUnignored, slices) {
+        const path = originalPath && checkPath.convert(originalPath);
+        checkPath(
+          path,
+          originalPath,
+          this._strictPathCheck ? throwError : RETURN_FALSE
+        );
+        return this._t(path, cache, checkUnignored, slices);
+      }
+      checkIgnore(path) {
+        if (!REGEX_TEST_TRAILING_SLASH.test(path)) {
+          return this.test(path);
+        }
+        const slices = path.split(SLASH).filter(Boolean);
+        slices.pop();
+        if (slices.length) {
+          const parent = this._t(
+            slices.join(SLASH) + SLASH,
+            this._testCache,
+            true,
+            slices
+          );
+          if (parent.ignored) {
+            return parent;
+          }
+        }
+        return this._rules.test(path, false, MODE_CHECK_IGNORE);
+      }
+      _t(path, cache, checkUnignored, slices) {
+        if (path in cache) {
+          return cache[path];
+        }
+        if (!slices) {
+          slices = path.split(SLASH).filter(Boolean);
+        }
+        slices.pop();
+        if (!slices.length) {
+          return cache[path] = this._rules.test(path, checkUnignored, MODE_IGNORE);
+        }
+        const parent = this._t(
+          slices.join(SLASH) + SLASH,
+          cache,
+          checkUnignored,
+          slices
+        );
+        return cache[path] = parent.ignored ? parent : this._rules.test(path, checkUnignored, MODE_IGNORE);
+      }
+      ignores(path) {
+        return this._test(path, this._ignoreCache, false).ignored;
+      }
+      createFilter() {
+        return (path) => !this.ignores(path);
+      }
+      filter(paths) {
+        return makeArray(paths).filter(this.createFilter());
+      }
+      // @returns {TestResult}
+      test(path) {
+        return this._test(path, this._testCache, true);
+      }
+    };
+    var factory = (options) => new Ignore(options);
+    var isPathValid = (path) => checkPath(path && checkPath.convert(path), path, RETURN_FALSE);
+    var setupWindows = () => {
+      const makePosix = (str) => /^\\\\\?\\/.test(str) || /["<>|\u0000-\u001F]+/u.test(str) ? str : str.replace(/\\/g, "/");
+      checkPath.convert = makePosix;
+      const REGEX_TEST_WINDOWS_PATH_ABSOLUTE = /^[a-z]:\//i;
+      checkPath.isNotRelative = (path) => REGEX_TEST_WINDOWS_PATH_ABSOLUTE.test(path) || isNotRelative(path);
+    };
+    if (
+      // Detect `process` so that it can run in browsers.
+      typeof process !== "undefined" && process.platform === "win32"
+    ) {
+      setupWindows();
+    }
+    module2.exports = factory;
+    factory.default = factory;
+    module2.exports.isPathValid = isPathValid;
+    define(module2.exports, /* @__PURE__ */ Symbol.for("setupWindows"), setupWindows);
+  }
+});
+
+// packages/shared/dist/runtimeSigners.js
+var ttl;
+var init_runtimeSigners = __esm({
+  "packages/shared/dist/runtimeSigners.js"() {
+    "use strict";
+    ttl = 10 * 6e4;
+  }
+});
+
+// packages/shared/dist/repositoryFingerprint.js
+var REPOSITORY_PROVIDER_RULES, controls;
+var init_repositoryFingerprint = __esm({
+  "packages/shared/dist/repositoryFingerprint.js"() {
+    "use strict";
+    REPOSITORY_PROVIDER_RULES = Object.freeze([
+      Object.freeze({ name: "github", host: "github.com", sshUser: "git", removeTerminalDotGit: true })
+    ]);
+    controls = new RegExp("\\p{Cc}", "u");
+  }
+});
+
+// packages/shared/dist/projectIdentityFile.js
+var init_projectIdentityFile = __esm({
+  "packages/shared/dist/projectIdentityFile.js"() {
+    "use strict";
+  }
+});
+
+// packages/shared/dist/repositoryRoot.js
+var init_repositoryRoot = __esm({
+  "packages/shared/dist/repositoryRoot.js"() {
+    "use strict";
+    init_projectIdentityFile();
+  }
+});
+
+// packages/shared/dist/runtimeReader.js
+var RuntimeError;
+var init_runtimeReader = __esm({
+  "packages/shared/dist/runtimeReader.js"() {
+    "use strict";
+    init_runtimeSigners();
+    init_runtimeSigners();
+    RuntimeError = class extends Error {
+      reason;
+      constructor(reason) {
+        super(reason);
+        this.reason = reason;
+        this.name = "RuntimeError";
+      }
+    };
+  }
+});
+
+// packages/shared/dist/projectSetupHandoff.js
+var init_projectSetupHandoff = __esm({
+  "packages/shared/dist/projectSetupHandoff.js"() {
+    "use strict";
+    init_runtimeSigners();
+    init_runtimeReader();
+  }
+});
+
+// packages/shared/dist/hookRuntime.js
+var init_hookRuntime = __esm({
+  "packages/shared/dist/hookRuntime.js"() {
+    "use strict";
+    init_runtimeSigners();
+    init_repositoryRoot();
+    init_runtimeReader();
+    init_runtimeSigners();
+    init_projectSetupHandoff();
+  }
+});
+
+// node_modules/graceful-fs/polyfills.js
+var require_polyfills = __commonJS({
+  "node_modules/graceful-fs/polyfills.js"(exports, module2) {
+    var constants = __require("constants");
+    var origCwd = process.cwd;
+    var cwd = null;
+    var platform = process.env.GRACEFUL_FS_PLATFORM || process.platform;
+    process.cwd = function() {
+      if (!cwd)
+        cwd = origCwd.call(process);
+      return cwd;
+    };
+    try {
+      process.cwd();
+    } catch (er) {
+    }
+    if (typeof process.chdir === "function") {
+      chdir = process.chdir;
+      process.chdir = function(d) {
+        cwd = null;
+        chdir.call(process, d);
+      };
+      if (Object.setPrototypeOf) Object.setPrototypeOf(process.chdir, chdir);
+    }
+    var chdir;
+    module2.exports = patch;
+    function patch(fs3) {
+      if (constants.hasOwnProperty("O_SYMLINK") && process.version.match(/^v0\.6\.[0-2]|^v0\.5\./)) {
+        patchLchmod(fs3);
+      }
+      if (!fs3.lutimes) {
+        patchLutimes(fs3);
+      }
+      fs3.chown = chownFix(fs3.chown);
+      fs3.fchown = chownFix(fs3.fchown);
+      fs3.lchown = chownFix(fs3.lchown);
+      fs3.chmod = chmodFix(fs3.chmod);
+      fs3.fchmod = chmodFix(fs3.fchmod);
+      fs3.lchmod = chmodFix(fs3.lchmod);
+      fs3.chownSync = chownFixSync(fs3.chownSync);
+      fs3.fchownSync = chownFixSync(fs3.fchownSync);
+      fs3.lchownSync = chownFixSync(fs3.lchownSync);
+      fs3.chmodSync = chmodFixSync(fs3.chmodSync);
+      fs3.fchmodSync = chmodFixSync(fs3.fchmodSync);
+      fs3.lchmodSync = chmodFixSync(fs3.lchmodSync);
+      fs3.stat = statFix(fs3.stat);
+      fs3.fstat = statFix(fs3.fstat);
+      fs3.lstat = statFix(fs3.lstat);
+      fs3.statSync = statFixSync(fs3.statSync);
+      fs3.fstatSync = statFixSync(fs3.fstatSync);
+      fs3.lstatSync = statFixSync(fs3.lstatSync);
+      if (fs3.chmod && !fs3.lchmod) {
+        fs3.lchmod = function(path, mode, cb) {
+          if (cb) process.nextTick(cb);
+        };
+        fs3.lchmodSync = function() {
+        };
+      }
+      if (fs3.chown && !fs3.lchown) {
+        fs3.lchown = function(path, uid, gid, cb) {
+          if (cb) process.nextTick(cb);
+        };
+        fs3.lchownSync = function() {
+        };
+      }
+      if (platform === "win32") {
+        fs3.rename = typeof fs3.rename !== "function" ? fs3.rename : (function(fs$rename) {
+          function rename2(from, to, cb) {
+            var start2 = Date.now();
+            var backoff = 0;
+            fs$rename(from, to, function CB(er) {
+              if (er && (er.code === "EACCES" || er.code === "EPERM" || er.code === "EBUSY") && Date.now() - start2 < 6e4) {
+                setTimeout(function() {
+                  fs3.stat(to, function(stater, st) {
+                    if (stater && stater.code === "ENOENT")
+                      fs$rename(from, to, CB);
+                    else
+                      cb(er);
+                  });
+                }, backoff);
+                if (backoff < 100)
+                  backoff += 10;
+                return;
+              }
+              if (cb) cb(er);
+            });
+          }
+          if (Object.setPrototypeOf) Object.setPrototypeOf(rename2, fs$rename);
+          return rename2;
+        })(fs3.rename);
+      }
+      fs3.read = typeof fs3.read !== "function" ? fs3.read : (function(fs$read) {
+        function read(fd, buffer, offset, length, position, callback_) {
+          var callback;
+          if (callback_ && typeof callback_ === "function") {
+            var eagCounter = 0;
+            callback = function(er, _, __) {
+              if (er && er.code === "EAGAIN" && eagCounter < 10) {
+                eagCounter++;
+                return fs$read.call(fs3, fd, buffer, offset, length, position, callback);
+              }
+              callback_.apply(this, arguments);
+            };
+          }
+          return fs$read.call(fs3, fd, buffer, offset, length, position, callback);
+        }
+        if (Object.setPrototypeOf) Object.setPrototypeOf(read, fs$read);
+        return read;
+      })(fs3.read);
+      fs3.readSync = typeof fs3.readSync !== "function" ? fs3.readSync : /* @__PURE__ */ (function(fs$readSync) {
+        return function(fd, buffer, offset, length, position) {
+          var eagCounter = 0;
+          while (true) {
+            try {
+              return fs$readSync.call(fs3, fd, buffer, offset, length, position);
+            } catch (er) {
+              if (er.code === "EAGAIN" && eagCounter < 10) {
+                eagCounter++;
+                continue;
+              }
+              throw er;
+            }
+          }
+        };
+      })(fs3.readSync);
+      function patchLchmod(fs4) {
+        fs4.lchmod = function(path, mode, callback) {
+          fs4.open(
+            path,
+            constants.O_WRONLY | constants.O_SYMLINK,
+            mode,
+            function(err2, fd) {
+              if (err2) {
+                if (callback) callback(err2);
+                return;
+              }
+              fs4.fchmod(fd, mode, function(err3) {
+                fs4.close(fd, function(err22) {
+                  if (callback) callback(err3 || err22);
+                });
+              });
+            }
+          );
+        };
+        fs4.lchmodSync = function(path, mode) {
+          var fd = fs4.openSync(path, constants.O_WRONLY | constants.O_SYMLINK, mode);
+          var threw = true;
+          var ret;
+          try {
+            ret = fs4.fchmodSync(fd, mode);
+            threw = false;
+          } finally {
+            if (threw) {
+              try {
+                fs4.closeSync(fd);
+              } catch (er) {
+              }
+            } else {
+              fs4.closeSync(fd);
+            }
+          }
+          return ret;
+        };
+      }
+      function patchLutimes(fs4) {
+        if (constants.hasOwnProperty("O_SYMLINK") && fs4.futimes) {
+          fs4.lutimes = function(path, at, mt, cb) {
+            fs4.open(path, constants.O_SYMLINK, function(er, fd) {
+              if (er) {
+                if (cb) cb(er);
+                return;
+              }
+              fs4.futimes(fd, at, mt, function(er2) {
+                fs4.close(fd, function(er22) {
+                  if (cb) cb(er2 || er22);
+                });
+              });
+            });
+          };
+          fs4.lutimesSync = function(path, at, mt) {
+            var fd = fs4.openSync(path, constants.O_SYMLINK);
+            var ret;
+            var threw = true;
+            try {
+              ret = fs4.futimesSync(fd, at, mt);
+              threw = false;
+            } finally {
+              if (threw) {
+                try {
+                  fs4.closeSync(fd);
+                } catch (er) {
+                }
+              } else {
+                fs4.closeSync(fd);
+              }
+            }
+            return ret;
+          };
+        } else if (fs4.futimes) {
+          fs4.lutimes = function(_a, _b, _c, cb) {
+            if (cb) process.nextTick(cb);
+          };
+          fs4.lutimesSync = function() {
+          };
+        }
+      }
+      function chmodFix(orig) {
+        if (!orig) return orig;
+        return function(target, mode, cb) {
+          return orig.call(fs3, target, mode, function(er) {
+            if (chownErOk(er)) er = null;
+            if (cb) cb.apply(this, arguments);
+          });
+        };
+      }
+      function chmodFixSync(orig) {
+        if (!orig) return orig;
+        return function(target, mode) {
+          try {
+            return orig.call(fs3, target, mode);
+          } catch (er) {
+            if (!chownErOk(er)) throw er;
+          }
+        };
+      }
+      function chownFix(orig) {
+        if (!orig) return orig;
+        return function(target, uid, gid, cb) {
+          return orig.call(fs3, target, uid, gid, function(er) {
+            if (chownErOk(er)) er = null;
+            if (cb) cb.apply(this, arguments);
+          });
+        };
+      }
+      function chownFixSync(orig) {
+        if (!orig) return orig;
+        return function(target, uid, gid) {
+          try {
+            return orig.call(fs3, target, uid, gid);
+          } catch (er) {
+            if (!chownErOk(er)) throw er;
+          }
+        };
+      }
+      function statFix(orig) {
+        if (!orig) return orig;
+        return function(target, options, cb) {
+          if (typeof options === "function") {
+            cb = options;
+            options = null;
+          }
+          function callback(er, stats) {
+            if (stats) {
+              if (stats.uid < 0) stats.uid += 4294967296;
+              if (stats.gid < 0) stats.gid += 4294967296;
+            }
+            if (cb) cb.apply(this, arguments);
+          }
+          return options ? orig.call(fs3, target, options, callback) : orig.call(fs3, target, callback);
+        };
+      }
+      function statFixSync(orig) {
+        if (!orig) return orig;
+        return function(target, options) {
+          var stats = options ? orig.call(fs3, target, options) : orig.call(fs3, target);
+          if (stats) {
+            if (stats.uid < 0) stats.uid += 4294967296;
+            if (stats.gid < 0) stats.gid += 4294967296;
+          }
+          return stats;
+        };
+      }
+      function chownErOk(er) {
+        if (!er)
+          return true;
+        if (er.code === "ENOSYS")
+          return true;
+        var nonroot = !process.getuid || process.getuid() !== 0;
+        if (nonroot) {
+          if (er.code === "EINVAL" || er.code === "EPERM")
+            return true;
+        }
+        return false;
+      }
+    }
+  }
+});
+
+// node_modules/graceful-fs/legacy-streams.js
+var require_legacy_streams = __commonJS({
+  "node_modules/graceful-fs/legacy-streams.js"(exports, module2) {
+    var Stream = __require("stream").Stream;
+    module2.exports = legacy;
+    function legacy(fs3) {
+      return {
+        ReadStream,
+        WriteStream
+      };
+      function ReadStream(path, options) {
+        if (!(this instanceof ReadStream)) return new ReadStream(path, options);
+        Stream.call(this);
+        var self = this;
+        this.path = path;
+        this.fd = null;
+        this.readable = true;
+        this.paused = false;
+        this.flags = "r";
+        this.mode = 438;
+        this.bufferSize = 64 * 1024;
+        options = options || {};
+        var keys = Object.keys(options);
+        for (var index = 0, length = keys.length; index < length; index++) {
+          var key = keys[index];
+          this[key] = options[key];
+        }
+        if (this.encoding) this.setEncoding(this.encoding);
+        if (this.start !== void 0) {
+          if ("number" !== typeof this.start) {
+            throw TypeError("start must be a Number");
+          }
+          if (this.end === void 0) {
+            this.end = Infinity;
+          } else if ("number" !== typeof this.end) {
+            throw TypeError("end must be a Number");
+          }
+          if (this.start > this.end) {
+            throw new Error("start must be <= end");
+          }
+          this.pos = this.start;
+        }
+        if (this.fd !== null) {
+          process.nextTick(function() {
+            self._read();
+          });
+          return;
+        }
+        fs3.open(this.path, this.flags, this.mode, function(err2, fd) {
+          if (err2) {
+            self.emit("error", err2);
+            self.readable = false;
+            return;
+          }
+          self.fd = fd;
+          self.emit("open", fd);
+          self._read();
+        });
+      }
+      function WriteStream(path, options) {
+        if (!(this instanceof WriteStream)) return new WriteStream(path, options);
+        Stream.call(this);
+        this.path = path;
+        this.fd = null;
+        this.writable = true;
+        this.flags = "w";
+        this.encoding = "binary";
+        this.mode = 438;
+        this.bytesWritten = 0;
+        options = options || {};
+        var keys = Object.keys(options);
+        for (var index = 0, length = keys.length; index < length; index++) {
+          var key = keys[index];
+          this[key] = options[key];
+        }
+        if (this.start !== void 0) {
+          if ("number" !== typeof this.start) {
+            throw TypeError("start must be a Number");
+          }
+          if (this.start < 0) {
+            throw new Error("start must be >= zero");
+          }
+          this.pos = this.start;
+        }
+        this.busy = false;
+        this._queue = [];
+        if (this.fd === null) {
+          this._open = fs3.open;
+          this._queue.push([this._open, this.path, this.flags, this.mode, void 0]);
+          this.flush();
+        }
+      }
+    }
+  }
+});
+
+// node_modules/graceful-fs/clone.js
+var require_clone = __commonJS({
+  "node_modules/graceful-fs/clone.js"(exports, module2) {
+    "use strict";
+    module2.exports = clone;
+    var getPrototypeOf = Object.getPrototypeOf || function(obj) {
+      return obj.__proto__;
+    };
+    function clone(obj) {
+      if (obj === null || typeof obj !== "object")
+        return obj;
+      if (obj instanceof Object)
+        var copy = { __proto__: getPrototypeOf(obj) };
+      else
+        var copy = /* @__PURE__ */ Object.create(null);
+      Object.getOwnPropertyNames(obj).forEach(function(key) {
+        Object.defineProperty(copy, key, Object.getOwnPropertyDescriptor(obj, key));
+      });
+      return copy;
+    }
+  }
+});
+
+// node_modules/graceful-fs/graceful-fs.js
+var require_graceful_fs = __commonJS({
+  "node_modules/graceful-fs/graceful-fs.js"(exports, module2) {
+    var fs3 = __require("fs");
+    var polyfills = require_polyfills();
+    var legacy = require_legacy_streams();
+    var clone = require_clone();
+    var util = __require("util");
+    var gracefulQueue;
+    var previousSymbol;
+    if (typeof Symbol === "function" && typeof Symbol.for === "function") {
+      gracefulQueue = /* @__PURE__ */ Symbol.for("graceful-fs.queue");
+      previousSymbol = /* @__PURE__ */ Symbol.for("graceful-fs.previous");
+    } else {
+      gracefulQueue = "___graceful-fs.queue";
+      previousSymbol = "___graceful-fs.previous";
+    }
+    function noop() {
+    }
+    function publishQueue(context, queue2) {
+      Object.defineProperty(context, gracefulQueue, {
+        get: function() {
+          return queue2;
+        }
+      });
+    }
+    var debug2 = noop;
+    if (util.debuglog)
+      debug2 = util.debuglog("gfs4");
+    else if (/\bgfs4\b/i.test(process.env.NODE_DEBUG || ""))
+      debug2 = function() {
+        var m = util.format.apply(util, arguments);
+        m = "GFS4: " + m.split(/\n/).join("\nGFS4: ");
+        console.error(m);
+      };
+    if (!fs3[gracefulQueue]) {
+      queue = global[gracefulQueue] || [];
+      publishQueue(fs3, queue);
+      fs3.close = (function(fs$close) {
+        function close(fd, cb) {
+          return fs$close.call(fs3, fd, function(err2) {
+            if (!err2) {
+              resetQueue();
+            }
+            if (typeof cb === "function")
+              cb.apply(this, arguments);
+          });
+        }
+        Object.defineProperty(close, previousSymbol, {
+          value: fs$close
+        });
+        return close;
+      })(fs3.close);
+      fs3.closeSync = (function(fs$closeSync) {
+        function closeSync(fd) {
+          fs$closeSync.apply(fs3, arguments);
+          resetQueue();
+        }
+        Object.defineProperty(closeSync, previousSymbol, {
+          value: fs$closeSync
+        });
+        return closeSync;
+      })(fs3.closeSync);
+      if (/\bgfs4\b/i.test(process.env.NODE_DEBUG || "")) {
+        process.on("exit", function() {
+          debug2(fs3[gracefulQueue]);
+          __require("assert").equal(fs3[gracefulQueue].length, 0);
+        });
+      }
+    }
+    var queue;
+    if (!global[gracefulQueue]) {
+      publishQueue(global, fs3[gracefulQueue]);
+    }
+    module2.exports = patch(clone(fs3));
+    if (process.env.TEST_GRACEFUL_FS_GLOBAL_PATCH && !fs3.__patched) {
+      module2.exports = patch(fs3);
+      fs3.__patched = true;
+    }
+    function patch(fs4) {
+      polyfills(fs4);
+      fs4.gracefulify = patch;
+      fs4.createReadStream = createReadStream;
+      fs4.createWriteStream = createWriteStream;
+      var fs$readFile = fs4.readFile;
+      fs4.readFile = readFile4;
+      function readFile4(path, options, cb) {
+        if (typeof options === "function")
+          cb = options, options = null;
+        return go$readFile(path, options, cb);
+        function go$readFile(path2, options2, cb2, startTime) {
+          return fs$readFile(path2, options2, function(err2) {
+            if (err2 && (err2.code === "EMFILE" || err2.code === "ENFILE"))
+              enqueue([go$readFile, [path2, options2, cb2], err2, startTime || Date.now(), Date.now()]);
+            else {
+              if (typeof cb2 === "function")
+                cb2.apply(this, arguments);
+            }
+          });
+        }
+      }
+      var fs$writeFile = fs4.writeFile;
+      fs4.writeFile = writeFile3;
+      function writeFile3(path, data, options, cb) {
+        if (typeof options === "function")
+          cb = options, options = null;
+        return go$writeFile(path, data, options, cb);
+        function go$writeFile(path2, data2, options2, cb2, startTime) {
+          return fs$writeFile(path2, data2, options2, function(err2) {
+            if (err2 && (err2.code === "EMFILE" || err2.code === "ENFILE"))
+              enqueue([go$writeFile, [path2, data2, options2, cb2], err2, startTime || Date.now(), Date.now()]);
+            else {
+              if (typeof cb2 === "function")
+                cb2.apply(this, arguments);
+            }
+          });
+        }
+      }
+      var fs$appendFile = fs4.appendFile;
+      if (fs$appendFile)
+        fs4.appendFile = appendFile;
+      function appendFile(path, data, options, cb) {
+        if (typeof options === "function")
+          cb = options, options = null;
+        return go$appendFile(path, data, options, cb);
+        function go$appendFile(path2, data2, options2, cb2, startTime) {
+          return fs$appendFile(path2, data2, options2, function(err2) {
+            if (err2 && (err2.code === "EMFILE" || err2.code === "ENFILE"))
+              enqueue([go$appendFile, [path2, data2, options2, cb2], err2, startTime || Date.now(), Date.now()]);
+            else {
+              if (typeof cb2 === "function")
+                cb2.apply(this, arguments);
+            }
+          });
+        }
+      }
+      var fs$copyFile = fs4.copyFile;
+      if (fs$copyFile)
+        fs4.copyFile = copyFile;
+      function copyFile(src, dest, flags2, cb) {
+        if (typeof flags2 === "function") {
+          cb = flags2;
+          flags2 = 0;
+        }
+        return go$copyFile(src, dest, flags2, cb);
+        function go$copyFile(src2, dest2, flags3, cb2, startTime) {
+          return fs$copyFile(src2, dest2, flags3, function(err2) {
+            if (err2 && (err2.code === "EMFILE" || err2.code === "ENFILE"))
+              enqueue([go$copyFile, [src2, dest2, flags3, cb2], err2, startTime || Date.now(), Date.now()]);
+            else {
+              if (typeof cb2 === "function")
+                cb2.apply(this, arguments);
+            }
+          });
+        }
+      }
+      var fs$readdir = fs4.readdir;
+      fs4.readdir = readdir;
+      var noReaddirOptionVersions = /^v[0-5]\./;
+      function readdir(path, options, cb) {
+        if (typeof options === "function")
+          cb = options, options = null;
+        var go$readdir = noReaddirOptionVersions.test(process.version) ? function go$readdir2(path2, options2, cb2, startTime) {
+          return fs$readdir(path2, fs$readdirCallback(
+            path2,
+            options2,
+            cb2,
+            startTime
+          ));
+        } : function go$readdir2(path2, options2, cb2, startTime) {
+          return fs$readdir(path2, options2, fs$readdirCallback(
+            path2,
+            options2,
+            cb2,
+            startTime
+          ));
+        };
+        return go$readdir(path, options, cb);
+        function fs$readdirCallback(path2, options2, cb2, startTime) {
+          return function(err2, files) {
+            if (err2 && (err2.code === "EMFILE" || err2.code === "ENFILE"))
+              enqueue([
+                go$readdir,
+                [path2, options2, cb2],
+                err2,
+                startTime || Date.now(),
+                Date.now()
+              ]);
+            else {
+              if (files && files.sort)
+                files.sort();
+              if (typeof cb2 === "function")
+                cb2.call(this, err2, files);
+            }
+          };
+        }
+      }
+      if (process.version.substr(0, 4) === "v0.8") {
+        var legStreams = legacy(fs4);
+        ReadStream = legStreams.ReadStream;
+        WriteStream = legStreams.WriteStream;
+      }
+      var fs$ReadStream = fs4.ReadStream;
+      if (fs$ReadStream) {
+        ReadStream.prototype = Object.create(fs$ReadStream.prototype);
+        ReadStream.prototype.open = ReadStream$open;
+      }
+      var fs$WriteStream = fs4.WriteStream;
+      if (fs$WriteStream) {
+        WriteStream.prototype = Object.create(fs$WriteStream.prototype);
+        WriteStream.prototype.open = WriteStream$open;
+      }
+      Object.defineProperty(fs4, "ReadStream", {
+        get: function() {
+          return ReadStream;
+        },
+        set: function(val) {
+          ReadStream = val;
+        },
+        enumerable: true,
+        configurable: true
+      });
+      Object.defineProperty(fs4, "WriteStream", {
+        get: function() {
+          return WriteStream;
+        },
+        set: function(val) {
+          WriteStream = val;
+        },
+        enumerable: true,
+        configurable: true
+      });
+      var FileReadStream = ReadStream;
+      Object.defineProperty(fs4, "FileReadStream", {
+        get: function() {
+          return FileReadStream;
+        },
+        set: function(val) {
+          FileReadStream = val;
+        },
+        enumerable: true,
+        configurable: true
+      });
+      var FileWriteStream = WriteStream;
+      Object.defineProperty(fs4, "FileWriteStream", {
+        get: function() {
+          return FileWriteStream;
+        },
+        set: function(val) {
+          FileWriteStream = val;
+        },
+        enumerable: true,
+        configurable: true
+      });
+      function ReadStream(path, options) {
+        if (this instanceof ReadStream)
+          return fs$ReadStream.apply(this, arguments), this;
+        else
+          return ReadStream.apply(Object.create(ReadStream.prototype), arguments);
+      }
+      function ReadStream$open() {
+        var that = this;
+        open2(that.path, that.flags, that.mode, function(err2, fd) {
+          if (err2) {
+            if (that.autoClose)
+              that.destroy();
+            that.emit("error", err2);
+          } else {
+            that.fd = fd;
+            that.emit("open", fd);
+            that.read();
+          }
+        });
+      }
+      function WriteStream(path, options) {
+        if (this instanceof WriteStream)
+          return fs$WriteStream.apply(this, arguments), this;
+        else
+          return WriteStream.apply(Object.create(WriteStream.prototype), arguments);
+      }
+      function WriteStream$open() {
+        var that = this;
+        open2(that.path, that.flags, that.mode, function(err2, fd) {
+          if (err2) {
+            that.destroy();
+            that.emit("error", err2);
+          } else {
+            that.fd = fd;
+            that.emit("open", fd);
+          }
+        });
+      }
+      function createReadStream(path, options) {
+        return new fs4.ReadStream(path, options);
+      }
+      function createWriteStream(path, options) {
+        return new fs4.WriteStream(path, options);
+      }
+      var fs$open = fs4.open;
+      fs4.open = open2;
+      function open2(path, flags2, mode, cb) {
+        if (typeof mode === "function")
+          cb = mode, mode = null;
+        return go$open(path, flags2, mode, cb);
+        function go$open(path2, flags3, mode2, cb2, startTime) {
+          return fs$open(path2, flags3, mode2, function(err2, fd) {
+            if (err2 && (err2.code === "EMFILE" || err2.code === "ENFILE"))
+              enqueue([go$open, [path2, flags3, mode2, cb2], err2, startTime || Date.now(), Date.now()]);
+            else {
+              if (typeof cb2 === "function")
+                cb2.apply(this, arguments);
+            }
+          });
+        }
+      }
+      return fs4;
+    }
+    function enqueue(elem) {
+      debug2("ENQUEUE", elem[0].name, elem[1]);
+      fs3[gracefulQueue].push(elem);
+      retry();
+    }
+    var retryTimer;
+    function resetQueue() {
+      var now = Date.now();
+      for (var i2 = 0; i2 < fs3[gracefulQueue].length; ++i2) {
+        if (fs3[gracefulQueue][i2].length > 2) {
+          fs3[gracefulQueue][i2][3] = now;
+          fs3[gracefulQueue][i2][4] = now;
+        }
+      }
+      retry();
+    }
+    function retry() {
+      clearTimeout(retryTimer);
+      retryTimer = void 0;
+      if (fs3[gracefulQueue].length === 0)
+        return;
+      var elem = fs3[gracefulQueue].shift();
+      var fn = elem[0];
+      var args2 = elem[1];
+      var err2 = elem[2];
+      var startTime = elem[3];
+      var lastTime = elem[4];
+      if (startTime === void 0) {
+        debug2("RETRY", fn.name, args2);
+        fn.apply(null, args2);
+      } else if (Date.now() - startTime >= 6e4) {
+        debug2("TIMEOUT", fn.name, args2);
+        var cb = args2.pop();
+        if (typeof cb === "function")
+          cb.call(null, err2);
+      } else {
+        var sinceAttempt = Date.now() - lastTime;
+        var sinceStart = Math.max(lastTime - startTime, 1);
+        var desiredDelay = Math.min(sinceStart * 1.2, 100);
+        if (sinceAttempt >= desiredDelay) {
+          debug2("RETRY", fn.name, args2);
+          fn.apply(null, args2.concat([startTime]));
+        } else {
+          fs3[gracefulQueue].push(elem);
+        }
+      }
+      if (retryTimer === void 0) {
+        retryTimer = setTimeout(retry, 0);
+      }
+    }
+  }
+});
+
+// node_modules/retry/lib/retry_operation.js
+var require_retry_operation = __commonJS({
+  "node_modules/retry/lib/retry_operation.js"(exports, module2) {
+    function RetryOperation(timeouts, options) {
+      if (typeof options === "boolean") {
+        options = { forever: options };
+      }
+      this._originalTimeouts = JSON.parse(JSON.stringify(timeouts));
+      this._timeouts = timeouts;
+      this._options = options || {};
+      this._maxRetryTime = options && options.maxRetryTime || Infinity;
+      this._fn = null;
+      this._errors = [];
+      this._attempts = 1;
+      this._operationTimeout = null;
+      this._operationTimeoutCb = null;
+      this._timeout = null;
+      this._operationStart = null;
+      if (this._options.forever) {
+        this._cachedTimeouts = this._timeouts.slice(0);
+      }
+    }
+    module2.exports = RetryOperation;
+    RetryOperation.prototype.reset = function() {
+      this._attempts = 1;
+      this._timeouts = this._originalTimeouts;
+    };
+    RetryOperation.prototype.stop = function() {
+      if (this._timeout) {
+        clearTimeout(this._timeout);
+      }
+      this._timeouts = [];
+      this._cachedTimeouts = null;
+    };
+    RetryOperation.prototype.retry = function(err2) {
+      if (this._timeout) {
+        clearTimeout(this._timeout);
+      }
+      if (!err2) {
+        return false;
+      }
+      var currentTime = (/* @__PURE__ */ new Date()).getTime();
+      if (err2 && currentTime - this._operationStart >= this._maxRetryTime) {
+        this._errors.unshift(new Error("RetryOperation timeout occurred"));
+        return false;
+      }
+      this._errors.push(err2);
+      var timeout = this._timeouts.shift();
+      if (timeout === void 0) {
+        if (this._cachedTimeouts) {
+          this._errors.splice(this._errors.length - 1, this._errors.length);
+          this._timeouts = this._cachedTimeouts.slice(0);
+          timeout = this._timeouts.shift();
+        } else {
+          return false;
+        }
+      }
+      var self = this;
+      var timer = setTimeout(function() {
+        self._attempts++;
+        if (self._operationTimeoutCb) {
+          self._timeout = setTimeout(function() {
+            self._operationTimeoutCb(self._attempts);
+          }, self._operationTimeout);
+          if (self._options.unref) {
+            self._timeout.unref();
+          }
+        }
+        self._fn(self._attempts);
+      }, timeout);
+      if (this._options.unref) {
+        timer.unref();
+      }
+      return true;
+    };
+    RetryOperation.prototype.attempt = function(fn, timeoutOps) {
+      this._fn = fn;
+      if (timeoutOps) {
+        if (timeoutOps.timeout) {
+          this._operationTimeout = timeoutOps.timeout;
+        }
+        if (timeoutOps.cb) {
+          this._operationTimeoutCb = timeoutOps.cb;
+        }
+      }
+      var self = this;
+      if (this._operationTimeoutCb) {
+        this._timeout = setTimeout(function() {
+          self._operationTimeoutCb();
+        }, self._operationTimeout);
+      }
+      this._operationStart = (/* @__PURE__ */ new Date()).getTime();
+      this._fn(this._attempts);
+    };
+    RetryOperation.prototype.try = function(fn) {
+      console.log("Using RetryOperation.try() is deprecated");
+      this.attempt(fn);
+    };
+    RetryOperation.prototype.start = function(fn) {
+      console.log("Using RetryOperation.start() is deprecated");
+      this.attempt(fn);
+    };
+    RetryOperation.prototype.start = RetryOperation.prototype.try;
+    RetryOperation.prototype.errors = function() {
+      return this._errors;
+    };
+    RetryOperation.prototype.attempts = function() {
+      return this._attempts;
+    };
+    RetryOperation.prototype.mainError = function() {
+      if (this._errors.length === 0) {
+        return null;
+      }
+      var counts = {};
+      var mainError = null;
+      var mainErrorCount = 0;
+      for (var i2 = 0; i2 < this._errors.length; i2++) {
+        var error = this._errors[i2];
+        var message = error.message;
+        var count = (counts[message] || 0) + 1;
+        counts[message] = count;
+        if (count >= mainErrorCount) {
+          mainError = error;
+          mainErrorCount = count;
+        }
+      }
+      return mainError;
+    };
+  }
+});
+
+// node_modules/retry/lib/retry.js
+var require_retry = __commonJS({
+  "node_modules/retry/lib/retry.js"(exports) {
+    var RetryOperation = require_retry_operation();
+    exports.operation = function(options) {
+      var timeouts = exports.timeouts(options);
+      return new RetryOperation(timeouts, {
+        forever: options && options.forever,
+        unref: options && options.unref,
+        maxRetryTime: options && options.maxRetryTime
+      });
+    };
+    exports.timeouts = function(options) {
+      if (options instanceof Array) {
+        return [].concat(options);
+      }
+      var opts = {
+        retries: 10,
+        factor: 2,
+        minTimeout: 1 * 1e3,
+        maxTimeout: Infinity,
+        randomize: false
+      };
+      for (var key in options) {
+        opts[key] = options[key];
+      }
+      if (opts.minTimeout > opts.maxTimeout) {
+        throw new Error("minTimeout is greater than maxTimeout");
+      }
+      var timeouts = [];
+      for (var i2 = 0; i2 < opts.retries; i2++) {
+        timeouts.push(this.createTimeout(i2, opts));
+      }
+      if (options && options.forever && !timeouts.length) {
+        timeouts.push(this.createTimeout(i2, opts));
+      }
+      timeouts.sort(function(a, b) {
+        return a - b;
+      });
+      return timeouts;
+    };
+    exports.createTimeout = function(attempt, opts) {
+      var random = opts.randomize ? Math.random() + 1 : 1;
+      var timeout = Math.round(random * opts.minTimeout * Math.pow(opts.factor, attempt));
+      timeout = Math.min(timeout, opts.maxTimeout);
+      return timeout;
+    };
+    exports.wrap = function(obj, options, methods) {
+      if (options instanceof Array) {
+        methods = options;
+        options = null;
+      }
+      if (!methods) {
+        methods = [];
+        for (var key in obj) {
+          if (typeof obj[key] === "function") {
+            methods.push(key);
+          }
+        }
+      }
+      for (var i2 = 0; i2 < methods.length; i2++) {
+        var method = methods[i2];
+        var original = obj[method];
+        obj[method] = function retryWrapper(original2) {
+          var op = exports.operation(options);
+          var args2 = Array.prototype.slice.call(arguments, 1);
+          var callback = args2.pop();
+          args2.push(function(err2) {
+            if (op.retry(err2)) {
+              return;
+            }
+            if (err2) {
+              arguments[0] = op.mainError();
+            }
+            callback.apply(this, arguments);
+          });
+          op.attempt(function() {
+            original2.apply(obj, args2);
+          });
+        }.bind(obj, original);
+        obj[method].options = options;
+      }
+    };
+  }
+});
+
+// node_modules/retry/index.js
+var require_retry2 = __commonJS({
+  "node_modules/retry/index.js"(exports, module2) {
+    module2.exports = require_retry();
+  }
+});
+
+// node_modules/proper-lockfile/node_modules/signal-exit/signals.js
+var require_signals = __commonJS({
+  "node_modules/proper-lockfile/node_modules/signal-exit/signals.js"(exports, module2) {
+    module2.exports = [
+      "SIGABRT",
+      "SIGALRM",
+      "SIGHUP",
+      "SIGINT",
+      "SIGTERM"
+    ];
+    if (process.platform !== "win32") {
+      module2.exports.push(
+        "SIGVTALRM",
+        "SIGXCPU",
+        "SIGXFSZ",
+        "SIGUSR2",
+        "SIGTRAP",
+        "SIGSYS",
+        "SIGQUIT",
+        "SIGIOT"
+        // should detect profiler and enable/disable accordingly.
+        // see #21
+        // 'SIGPROF'
+      );
+    }
+    if (process.platform === "linux") {
+      module2.exports.push(
+        "SIGIO",
+        "SIGPOLL",
+        "SIGPWR",
+        "SIGSTKFLT",
+        "SIGUNUSED"
+      );
+    }
+  }
+});
+
+// node_modules/proper-lockfile/node_modules/signal-exit/index.js
+var require_signal_exit = __commonJS({
+  "node_modules/proper-lockfile/node_modules/signal-exit/index.js"(exports, module2) {
+    var process2 = global.process;
+    var processOk = function(process3) {
+      return process3 && typeof process3 === "object" && typeof process3.removeListener === "function" && typeof process3.emit === "function" && typeof process3.reallyExit === "function" && typeof process3.listeners === "function" && typeof process3.kill === "function" && typeof process3.pid === "number" && typeof process3.on === "function";
+    };
+    if (!processOk(process2)) {
+      module2.exports = function() {
+        return function() {
+        };
+      };
+    } else {
+      assert = __require("assert");
+      signals = require_signals();
+      isWin = /^win/i.test(process2.platform);
+      EE = __require("events");
+      if (typeof EE !== "function") {
+        EE = EE.EventEmitter;
+      }
+      if (process2.__signal_exit_emitter__) {
+        emitter = process2.__signal_exit_emitter__;
+      } else {
+        emitter = process2.__signal_exit_emitter__ = new EE();
+        emitter.count = 0;
+        emitter.emitted = {};
+      }
+      if (!emitter.infinite) {
+        emitter.setMaxListeners(Infinity);
+        emitter.infinite = true;
+      }
+      module2.exports = function(cb, opts) {
+        if (!processOk(global.process)) {
+          return function() {
+          };
+        }
+        assert.equal(typeof cb, "function", "a callback must be provided for exit handler");
+        if (loaded === false) {
+          load();
+        }
+        var ev = "exit";
+        if (opts && opts.alwaysLast) {
+          ev = "afterexit";
+        }
+        var remove = function() {
+          emitter.removeListener(ev, cb);
+          if (emitter.listeners("exit").length === 0 && emitter.listeners("afterexit").length === 0) {
+            unload();
+          }
+        };
+        emitter.on(ev, cb);
+        return remove;
+      };
+      unload = function unload2() {
+        if (!loaded || !processOk(global.process)) {
+          return;
+        }
+        loaded = false;
+        signals.forEach(function(sig) {
+          try {
+            process2.removeListener(sig, sigListeners[sig]);
+          } catch (er) {
+          }
+        });
+        process2.emit = originalProcessEmit;
+        process2.reallyExit = originalProcessReallyExit;
+        emitter.count -= 1;
+      };
+      module2.exports.unload = unload;
+      emit = function emit2(event, code, signal) {
+        if (emitter.emitted[event]) {
+          return;
+        }
+        emitter.emitted[event] = true;
+        emitter.emit(event, code, signal);
+      };
+      sigListeners = {};
+      signals.forEach(function(sig) {
+        sigListeners[sig] = function listener() {
+          if (!processOk(global.process)) {
+            return;
+          }
+          var listeners = process2.listeners(sig);
+          if (listeners.length === emitter.count) {
+            unload();
+            emit("exit", null, sig);
+            emit("afterexit", null, sig);
+            if (isWin && sig === "SIGHUP") {
+              sig = "SIGINT";
+            }
+            process2.kill(process2.pid, sig);
+          }
+        };
+      });
+      module2.exports.signals = function() {
+        return signals;
+      };
+      loaded = false;
+      load = function load2() {
+        if (loaded || !processOk(global.process)) {
+          return;
+        }
+        loaded = true;
+        emitter.count += 1;
+        signals = signals.filter(function(sig) {
+          try {
+            process2.on(sig, sigListeners[sig]);
+            return true;
+          } catch (er) {
+            return false;
+          }
+        });
+        process2.emit = processEmit;
+        process2.reallyExit = processReallyExit;
+      };
+      module2.exports.load = load;
+      originalProcessReallyExit = process2.reallyExit;
+      processReallyExit = function processReallyExit2(code) {
+        if (!processOk(global.process)) {
+          return;
+        }
+        process2.exitCode = code || /* istanbul ignore next */
+        0;
+        emit("exit", process2.exitCode, null);
+        emit("afterexit", process2.exitCode, null);
+        originalProcessReallyExit.call(process2, process2.exitCode);
+      };
+      originalProcessEmit = process2.emit;
+      processEmit = function processEmit2(ev, arg) {
+        if (ev === "exit" && processOk(global.process)) {
+          if (arg !== void 0) {
+            process2.exitCode = arg;
+          }
+          var ret = originalProcessEmit.apply(this, arguments);
+          emit("exit", process2.exitCode, null);
+          emit("afterexit", process2.exitCode, null);
+          return ret;
+        } else {
+          return originalProcessEmit.apply(this, arguments);
+        }
+      };
+    }
+    var assert;
+    var signals;
+    var isWin;
+    var EE;
+    var emitter;
+    var unload;
+    var emit;
+    var sigListeners;
+    var loaded;
+    var load;
+    var originalProcessReallyExit;
+    var processReallyExit;
+    var originalProcessEmit;
+    var processEmit;
+  }
+});
+
+// node_modules/proper-lockfile/lib/mtime-precision.js
+var require_mtime_precision = __commonJS({
+  "node_modules/proper-lockfile/lib/mtime-precision.js"(exports, module2) {
+    "use strict";
+    var cacheSymbol = /* @__PURE__ */ Symbol();
+    function probe(file, fs3, callback) {
+      const cachedPrecision = fs3[cacheSymbol];
+      if (cachedPrecision) {
+        return fs3.stat(file, (err2, stat) => {
+          if (err2) {
+            return callback(err2);
+          }
+          callback(null, stat.mtime, cachedPrecision);
+        });
+      }
+      const mtime = new Date(Math.ceil(Date.now() / 1e3) * 1e3 + 5);
+      fs3.utimes(file, mtime, mtime, (err2) => {
+        if (err2) {
+          return callback(err2);
+        }
+        fs3.stat(file, (err3, stat) => {
+          if (err3) {
+            return callback(err3);
+          }
+          const precision = stat.mtime.getTime() % 1e3 === 0 ? "s" : "ms";
+          Object.defineProperty(fs3, cacheSymbol, { value: precision });
+          callback(null, stat.mtime, precision);
+        });
+      });
+    }
+    function getMtime(precision) {
+      let now = Date.now();
+      if (precision === "s") {
+        now = Math.ceil(now / 1e3) * 1e3;
+      }
+      return new Date(now);
+    }
+    module2.exports.probe = probe;
+    module2.exports.getMtime = getMtime;
+  }
+});
+
+// node_modules/proper-lockfile/lib/lockfile.js
+var require_lockfile = __commonJS({
+  "node_modules/proper-lockfile/lib/lockfile.js"(exports, module2) {
+    "use strict";
+    var path = __require("path");
+    var fs3 = require_graceful_fs();
+    var retry = require_retry2();
+    var onExit = require_signal_exit();
+    var mtimePrecision = require_mtime_precision();
+    var locks = {};
+    function getLockFile(file, options) {
+      return options.lockfilePath || `${file}.lock`;
+    }
+    function resolveCanonicalPath(file, options, callback) {
+      if (!options.realpath) {
+        return callback(null, path.resolve(file));
+      }
+      options.fs.realpath(file, callback);
+    }
+    function acquireLock(file, options, callback) {
+      const lockfilePath = getLockFile(file, options);
+      options.fs.mkdir(lockfilePath, (err2) => {
+        if (!err2) {
+          return mtimePrecision.probe(lockfilePath, options.fs, (err3, mtime, mtimePrecision2) => {
+            if (err3) {
+              options.fs.rmdir(lockfilePath, () => {
+              });
+              return callback(err3);
+            }
+            callback(null, mtime, mtimePrecision2);
+          });
+        }
+        if (err2.code !== "EEXIST") {
+          return callback(err2);
+        }
+        if (options.stale <= 0) {
+          return callback(Object.assign(new Error("Lock file is already being held"), { code: "ELOCKED", file }));
+        }
+        options.fs.stat(lockfilePath, (err3, stat) => {
+          if (err3) {
+            if (err3.code === "ENOENT") {
+              return acquireLock(file, { ...options, stale: 0 }, callback);
+            }
+            return callback(err3);
+          }
+          if (!isLockStale(stat, options)) {
+            return callback(Object.assign(new Error("Lock file is already being held"), { code: "ELOCKED", file }));
+          }
+          removeLock(file, options, (err4) => {
+            if (err4) {
+              return callback(err4);
+            }
+            acquireLock(file, { ...options, stale: 0 }, callback);
+          });
+        });
+      });
+    }
+    function isLockStale(stat, options) {
+      return stat.mtime.getTime() < Date.now() - options.stale;
+    }
+    function removeLock(file, options, callback) {
+      options.fs.rmdir(getLockFile(file, options), (err2) => {
+        if (err2 && err2.code !== "ENOENT") {
+          return callback(err2);
+        }
+        callback();
+      });
+    }
+    function updateLock(file, options) {
+      const lock2 = locks[file];
+      if (lock2.updateTimeout) {
+        return;
+      }
+      lock2.updateDelay = lock2.updateDelay || options.update;
+      lock2.updateTimeout = setTimeout(() => {
+        lock2.updateTimeout = null;
+        options.fs.stat(lock2.lockfilePath, (err2, stat) => {
+          const isOverThreshold = lock2.lastUpdate + options.stale < Date.now();
+          if (err2) {
+            if (err2.code === "ENOENT" || isOverThreshold) {
+              return setLockAsCompromised(file, lock2, Object.assign(err2, { code: "ECOMPROMISED" }));
+            }
+            lock2.updateDelay = 1e3;
+            return updateLock(file, options);
+          }
+          const isMtimeOurs = lock2.mtime.getTime() === stat.mtime.getTime();
+          if (!isMtimeOurs) {
+            return setLockAsCompromised(
+              file,
+              lock2,
+              Object.assign(
+                new Error("Unable to update lock within the stale threshold"),
+                { code: "ECOMPROMISED" }
+              )
+            );
+          }
+          const mtime = mtimePrecision.getMtime(lock2.mtimePrecision);
+          options.fs.utimes(lock2.lockfilePath, mtime, mtime, (err3) => {
+            const isOverThreshold2 = lock2.lastUpdate + options.stale < Date.now();
+            if (lock2.released) {
+              return;
+            }
+            if (err3) {
+              if (err3.code === "ENOENT" || isOverThreshold2) {
+                return setLockAsCompromised(file, lock2, Object.assign(err3, { code: "ECOMPROMISED" }));
+              }
+              lock2.updateDelay = 1e3;
+              return updateLock(file, options);
+            }
+            lock2.mtime = mtime;
+            lock2.lastUpdate = Date.now();
+            lock2.updateDelay = null;
+            updateLock(file, options);
+          });
+        });
+      }, lock2.updateDelay);
+      if (lock2.updateTimeout.unref) {
+        lock2.updateTimeout.unref();
+      }
+    }
+    function setLockAsCompromised(file, lock2, err2) {
+      lock2.released = true;
+      if (lock2.updateTimeout) {
+        clearTimeout(lock2.updateTimeout);
       }
-      // @returns {TestResult}
-      _test(originalPath, cache, checkUnignored, slices) {
-        const path = originalPath && checkPath.convert(originalPath);
-        checkPath(
-          path,
-          originalPath,
-          this._strictPathCheck ? throwError : RETURN_FALSE
-        );
-        return this._t(path, cache, checkUnignored, slices);
+      if (locks[file] === lock2) {
+        delete locks[file];
       }
-      checkIgnore(path) {
-        if (!REGEX_TEST_TRAILING_SLASH.test(path)) {
-          return this.test(path);
+      lock2.options.onCompromised(err2);
+    }
+    function lock(file, options, callback) {
+      options = {
+        stale: 1e4,
+        update: null,
+        realpath: true,
+        retries: 0,
+        fs: fs3,
+        onCompromised: (err2) => {
+          throw err2;
+        },
+        ...options
+      };
+      options.retries = options.retries || 0;
+      options.retries = typeof options.retries === "number" ? { retries: options.retries } : options.retries;
+      options.stale = Math.max(options.stale || 0, 2e3);
+      options.update = options.update == null ? options.stale / 2 : options.update || 0;
+      options.update = Math.max(Math.min(options.update, options.stale / 2), 1e3);
+      resolveCanonicalPath(file, options, (err2, file2) => {
+        if (err2) {
+          return callback(err2);
         }
-        const slices = path.split(SLASH).filter(Boolean);
-        slices.pop();
-        if (slices.length) {
-          const parent = this._t(
-            slices.join(SLASH) + SLASH,
-            this._testCache,
-            true,
-            slices
-          );
-          if (parent.ignored) {
-            return parent;
-          }
+        const operation = retry.operation(options.retries);
+        operation.attempt(() => {
+          acquireLock(file2, options, (err3, mtime, mtimePrecision2) => {
+            if (operation.retry(err3)) {
+              return;
+            }
+            if (err3) {
+              return callback(operation.mainError());
+            }
+            const lock2 = locks[file2] = {
+              lockfilePath: getLockFile(file2, options),
+              mtime,
+              mtimePrecision: mtimePrecision2,
+              options,
+              lastUpdate: Date.now()
+            };
+            updateLock(file2, options);
+            callback(null, (releasedCallback) => {
+              if (lock2.released) {
+                return releasedCallback && releasedCallback(Object.assign(new Error("Lock is already released"), { code: "ERELEASED" }));
+              }
+              unlock(file2, { ...options, realpath: false }, releasedCallback);
+            });
+          });
+        });
+      });
+    }
+    function unlock(file, options, callback) {
+      options = {
+        fs: fs3,
+        realpath: true,
+        ...options
+      };
+      resolveCanonicalPath(file, options, (err2, file2) => {
+        if (err2) {
+          return callback(err2);
         }
-        return this._rules.test(path, false, MODE_CHECK_IGNORE);
-      }
-      _t(path, cache, checkUnignored, slices) {
-        if (path in cache) {
-          return cache[path];
+        const lock2 = locks[file2];
+        if (!lock2) {
+          return callback(Object.assign(new Error("Lock is not acquired/owned by you"), { code: "ENOTACQUIRED" }));
         }
-        if (!slices) {
-          slices = path.split(SLASH).filter(Boolean);
+        lock2.updateTimeout && clearTimeout(lock2.updateTimeout);
+        lock2.released = true;
+        delete locks[file2];
+        removeLock(file2, options, callback);
+      });
+    }
+    function check(file, options, callback) {
+      options = {
+        stale: 1e4,
+        realpath: true,
+        fs: fs3,
+        ...options
+      };
+      options.stale = Math.max(options.stale || 0, 2e3);
+      resolveCanonicalPath(file, options, (err2, file2) => {
+        if (err2) {
+          return callback(err2);
         }
-        slices.pop();
-        if (!slices.length) {
-          return cache[path] = this._rules.test(path, checkUnignored, MODE_IGNORE);
+        options.fs.stat(getLockFile(file2, options), (err3, stat) => {
+          if (err3) {
+            return err3.code === "ENOENT" ? callback(null, false) : callback(err3);
+          }
+          return callback(null, !isLockStale(stat, options));
+        });
+      });
+    }
+    function getLocks() {
+      return locks;
+    }
+    onExit(() => {
+      for (const file in locks) {
+        const options = locks[file].options;
+        try {
+          options.fs.rmdirSync(getLockFile(file, options));
+        } catch (e) {
         }
-        const parent = this._t(
-          slices.join(SLASH) + SLASH,
-          cache,
-          checkUnignored,
-          slices
-        );
-        return cache[path] = parent.ignored ? parent : this._rules.test(path, checkUnignored, MODE_IGNORE);
-      }
-      ignores(path) {
-        return this._test(path, this._ignoreCache, false).ignored;
-      }
-      createFilter() {
-        return (path) => !this.ignores(path);
-      }
-      filter(paths) {
-        return makeArray(paths).filter(this.createFilter());
       }
-      // @returns {TestResult}
-      test(path) {
-        return this._test(path, this._testCache, true);
+    });
+    module2.exports.lock = lock;
+    module2.exports.unlock = unlock;
+    module2.exports.check = check;
+    module2.exports.getLocks = getLocks;
+  }
+});
+
+// node_modules/proper-lockfile/lib/adapter.js
+var require_adapter = __commonJS({
+  "node_modules/proper-lockfile/lib/adapter.js"(exports, module2) {
+    "use strict";
+    var fs3 = require_graceful_fs();
+    function createSyncFs(fs4) {
+      const methods = ["mkdir", "realpath", "stat", "rmdir", "utimes"];
+      const newFs = { ...fs4 };
+      methods.forEach((method) => {
+        newFs[method] = (...args2) => {
+          const callback = args2.pop();
+          let ret;
+          try {
+            ret = fs4[`${method}Sync`](...args2);
+          } catch (err2) {
+            return callback(err2);
+          }
+          callback(null, ret);
+        };
+      });
+      return newFs;
+    }
+    function toPromise(method) {
+      return (...args2) => new Promise((resolve, reject) => {
+        args2.push((err2, result) => {
+          if (err2) {
+            reject(err2);
+          } else {
+            resolve(result);
+          }
+        });
+        method(...args2);
+      });
+    }
+    function toSync(method) {
+      return (...args2) => {
+        let err2;
+        let result;
+        args2.push((_err, _result) => {
+          err2 = _err;
+          result = _result;
+        });
+        method(...args2);
+        if (err2) {
+          throw err2;
+        }
+        return result;
+      };
+    }
+    function toSyncOptions(options) {
+      options = { ...options };
+      options.fs = createSyncFs(options.fs || fs3);
+      if (typeof options.retries === "number" && options.retries > 0 || options.retries && typeof options.retries.retries === "number" && options.retries.retries > 0) {
+        throw Object.assign(new Error("Cannot use retries with the sync api"), { code: "ESYNC" });
       }
-    };
-    var factory = (options) => new Ignore(options);
-    var isPathValid = (path) => checkPath(path && checkPath.convert(path), path, RETURN_FALSE);
-    var setupWindows = () => {
-      const makePosix = (str) => /^\\\\\?\\/.test(str) || /["<>|\u0000-\u001F]+/u.test(str) ? str : str.replace(/\\/g, "/");
-      checkPath.convert = makePosix;
-      const REGEX_TEST_WINDOWS_PATH_ABSOLUTE = /^[a-z]:\//i;
-      checkPath.isNotRelative = (path) => REGEX_TEST_WINDOWS_PATH_ABSOLUTE.test(path) || isNotRelative(path);
-    };
-    if (
-      // Detect `process` so that it can run in browsers.
-      typeof process !== "undefined" && process.platform === "win32"
-    ) {
-      setupWindows();
+      return options;
     }
-    module2.exports = factory;
-    factory.default = factory;
-    module2.exports.isPathValid = isPathValid;
-    define(module2.exports, /* @__PURE__ */ Symbol.for("setupWindows"), setupWindows);
+    module2.exports = {
+      toPromise,
+      toSync,
+      toSyncOptions
+    };
+  }
+});
+
+// node_modules/proper-lockfile/index.js
+var require_proper_lockfile = __commonJS({
+  "node_modules/proper-lockfile/index.js"(exports, module2) {
+    "use strict";
+    var lockfile = require_lockfile();
+    var { toPromise, toSync, toSyncOptions } = require_adapter();
+    async function lock(file, options) {
+      const release = await toPromise(lockfile.lock)(file, options);
+      return toPromise(release);
+    }
+    function lockSync(file, options) {
+      const release = toSync(lockfile.lock)(file, toSyncOptions(options));
+      return toSync(release);
+    }
+    function unlock(file, options) {
+      return toPromise(lockfile.unlock)(file, options);
+    }
+    function unlockSync(file, options) {
+      return toSync(lockfile.unlock)(file, toSyncOptions(options));
+    }
+    function check(file, options) {
+      return toPromise(lockfile.check)(file, options);
+    }
+    function checkSync(file, options) {
+      return toSync(lockfile.check)(file, toSyncOptions(options));
+    }
+    module2.exports = lock;
+    module2.exports.lock = lock;
+    module2.exports.unlock = unlock;
+    module2.exports.lockSync = lockSync;
+    module2.exports.unlockSync = unlockSync;
+    module2.exports.check = check;
+    module2.exports.checkSync = checkSync;
   }
 });
 
@@ -1994,8 +3660,8 @@ var Language = class _Language {
     if (input instanceof Uint8Array) {
       binary2 = input;
     } else if (globalThis.process?.versions.node) {
-      const fs2 = await import("fs/promises");
-      binary2 = await fs2.readFile(input);
+      const fs22 = await import("fs/promises");
+      binary2 = await fs22.readFile(input);
     } else {
       const response = await fetch(input);
       if (!response.ok) {
@@ -4396,14 +6062,14 @@ var Query = class {
       captures.length = captureCount;
       address = unmarshalCaptures(this, node.tree, address, patternIndex, captures);
       if (this.textPredicates[patternIndex].every((p) => p(captures))) {
-        const capture = captures[captureIndex];
+        const capture2 = captures[captureIndex];
         const setProperties = this.setProperties[patternIndex];
-        capture.setProperties = setProperties;
+        capture2.setProperties = setProperties;
         const assertedProperties = this.assertedProperties[patternIndex];
-        capture.assertedProperties = assertedProperties;
+        capture2.assertedProperties = assertedProperties;
         const refutedProperties = this.refutedProperties[patternIndex];
-        capture.refutedProperties = refutedProperties;
-        result.push(capture);
+        capture2.refutedProperties = refutedProperties;
+        result.push(capture2);
       }
     }
     C._free(startAddress);
@@ -4669,25 +6335,428 @@ var DEFAULT_OPTIONS = {
 };
 var BUILT_IN_IGNORE_DIR_SET = new Set(BUILT_IN_IGNORE_DIRS);
 
-// packages/shared/dist/runtimeSigners.js
-var ttl = 10 * 6e4;
+// packages/shared/dist/jitDeliveryAck.js
+init_runtimeSigners();
 
-// packages/shared/dist/repositoryFingerprint.js
-var REPOSITORY_PROVIDER_RULES = Object.freeze([
-  Object.freeze({ name: "github", host: "github.com", sshUser: "git", removeTerminalDotGit: true })
-]);
-var controls = new RegExp("\\p{Cc}", "u");
+// packages/shared/dist/index.js
+init_repositoryFingerprint();
+init_projectIdentityFile();
+init_repositoryRoot();
 
 // packages/shared/dist/scannerSupervisor.js
 var WINDOWS_SERVICE_BUDGET_MS = 12e4;
+var SCANNER_STARTUP_BUDGET_MS = 6e4;
+var SCANNER_HANDOFF_BUDGET_MS = 15e4;
+var SCANNER_RECEIPT_STALE_MS = 36e4;
+var SCANNER_MAC_COMMAND_BUDGET_MS = 36e4;
+var SCANNER_STOP_BUDGET_MS = 1e4;
+var SCANNER_REMOVAL_BUDGET_MS = 18e4;
+function scannerAttemptHealthy(receipt, attempt, paused = false) {
+  const life = receipt?.snapshot?.lifecycle;
+  const readyAt = receipt?.snapshot?.startupTimings?.localReadyAt;
+  const state = life?.state;
+  return !!receipt && !!attempt && (receipt.recordedAt ?? 0) > attempt.startedAt && (attempt.version === void 0 || receipt.snapshot?.version === attempt.version) && (life?.pid === attempt.pid || state === "stopped") && (paused && state === "paused" || (readyAt ?? 0) > attempt.startedAt && (state === "running" || state === "starting" || state === "stopped") || readyAt === void 0 && state === "running");
+}
+
+// packages/shared/dist/launchdControl.js
+import { setTimeout as delay } from "node:timers/promises";
+import { mkdir, readFile, rm, writeFile, lstat } from "node:fs/promises";
+import { join as join2 } from "node:path";
+async function printLaunchdRegistration(domain, label, run2) {
+  try {
+    return await run2("launchctl", ["print", `${domain}/${label}`]);
+  } catch (error) {
+    const failure = error;
+    if (/Could not find (?:service|domain)\b/i.test(failure.message))
+      return null;
+    const unsupportedDomain = /Could not print domain:\s*125:\s*Domain does not support specified action\s*$/.test(failure.message);
+    if (domain.startsWith("gui/") && unsupportedDomain && (failure.code === 125 && !failure.killed && !failure.signal || /^supervisor_command_failed killed=false code=125 signal=null:/.test(failure.message)))
+      return null;
+    throw error;
+  }
+}
+async function processesAlive(pids, run2) {
+  const list = [...pids];
+  if (!list.length)
+    return false;
+  try {
+    return (await run2("ps", ["-p", list.join(","), "-o", "pid="])).trim() !== "";
+  } catch (error) {
+    const failure = error;
+    if (failure.code === 1 && !failure.killed && !failure.signal || /^supervisor_command_failed killed=false code=1 signal=null:/.test(failure.message))
+      return false;
+    throw error;
+  }
+}
+var macScannerLauncher = "/Library/Application Support/Mnemonik/scanner-launcher";
+var macScannerPlist = "/Library/LaunchDaemons/ai.mnemonik.scanner.plist";
+async function authorizeMacService(run2, env = process.env) {
+  let interrupted = false;
+  const interrupt = () => {
+    interrupted = true;
+  };
+  process.on("SIGINT", interrupt);
+  try {
+    await run2("sudo", [...env.SUDO_ASKPASS ? ["-A"] : [], "-v"]);
+  } catch (error) {
+    throw new Error(!interrupted && /terminal is required|a password is required|no tty present|no askpass program/iu.test(error.message) ? "mac_authorization_required" : "mac_authorization_failed");
+  } finally {
+    process.removeListener("SIGINT", interrupt);
+  }
+}
+async function removeMacScanner(state, home, uid, run2, options = {}) {
+  const exists = (path) => lstat(path).then(() => true, (error) => {
+    if (error.code === "ENOENT")
+      return false;
+    throw error;
+  });
+  const receipt = await readFile(join2(state, "scanner/status.json"), "utf8").catch((error) => {
+    if (error.code === "ENOENT")
+      return null;
+    throw error;
+  });
+  const recordedPid = receipt ? JSON.parse(receipt).snapshot?.lifecycle?.pid : void 0;
+  const system = await printLaunchdRegistration("system", "ai.mnemonik.scanner", run2) !== null;
+  const plist = options.plist ?? macScannerPlist;
+  const present = await exists(plist);
+  const launcher = options.launcher ?? macScannerLauncher;
+  const launcherPresent = await exists(launcher);
+  if (system || present || launcherPresent)
+    await authorizeMacService(run2, options.environment);
+  const privileged = (file, args2) => file === "launchctl" && args2[0] === "bootout" ? run2("sudo", ["-n", "/bin/launchctl", ...args2]) : run2(file, args2);
+  await stopLaunchdRegistrations(["system"], "ai.mnemonik.scanner", privileged, {
+    ...options
+  });
+  const legacy = [`user/${uid}`, `gui/${uid}`];
+  await stopLaunchdRegistrations(legacy, "ai.mnemonik.scanner.replacement", run2, options);
+  await stopLaunchdRegistrations(legacy, "ai.mnemonik.scanner", run2, { ...options, recordedPid });
+  await rm(join2(state, "scanner/service-replacement"), { recursive: true, force: true });
+  if (options.remove === false) {
+    await mkdir(join2(state, "scanner/service-replacement"), { recursive: true });
+    await writeFile(join2(state, "scanner/service-replacement/result.json"), JSON.stringify({ stopped: true }));
+    return;
+  }
+  if (present || launcherPresent)
+    await run2("sudo", ["-n", "/bin/rm", "-f", plist, launcher]);
+  for (const label of ["ai.mnemonik.scanner", "ai.mnemonik.scanner.replacement"])
+    await rm(join2(home, "Library/LaunchAgents", `${label}.plist`), { force: true });
+  await rm(join2(state, "scanner/assets"), { recursive: true, force: true });
+  await rm(join2(state, "scanner/service-supervisor.json"), { force: true });
+  await rm(join2(state, "scanner/service-migrated"), { force: true });
+  await rm(join2(state, "scanner/system-service.plist"), { force: true });
+}
+async function stopLaunchdRegistrations(domains, label, run2, options = {}) {
+  const now = options.now ?? Date.now;
+  const sleep = options.sleep ?? delay;
+  const inspect = (domain) => printLaunchdRegistration(domain, label, run2);
+  const pids = /* @__PURE__ */ new Set();
+  const recordedPid = options.recordedPid;
+  if (typeof recordedPid === "number" && Number.isInteger(recordedPid) && recordedPid > 0)
+    pids.add(recordedPid);
+  const registrations = [];
+  for (const domain of domains) {
+    const output = await inspect(domain);
+    if (output === null)
+      continue;
+    const pid = Number(/\bpid = (\d+)/.exec(output)?.[1]);
+    if (pid)
+      pids.add(pid);
+    registrations.push(domain);
+  }
+  for (const domain of registrations)
+    await run2("launchctl", ["bootout", `${domain}/${label}`]);
+  const deadline = now() + SCANNER_STOP_BUDGET_MS;
+  do {
+    let registered = false;
+    for (const domain of domains) {
+      const output = await inspect(domain);
+      if (output !== null) {
+        registered = true;
+        const pid = Number(/\bpid = (\d+)/.exec(output)?.[1]);
+        if (pid)
+          pids.add(pid);
+      }
+    }
+    if (!registered && !await processesAlive(pids, run2))
+      return;
+    await sleep(100);
+  } while (now() <= deadline);
+  throw new Error("scanner_stop_failed");
+}
+
+// packages/shared/dist/systemdControl.js
+import { existsSync } from "node:fs";
+import { rm as rm2 } from "node:fs/promises";
+import { basename, dirname as dirname2, join as join3 } from "node:path";
+import { setTimeout as delay2 } from "node:timers/promises";
+async function uninstallSystemdUnit(unitPath, run2, options = {}) {
+  try {
+    const unit = basename(unitPath);
+    if (!/^mnemonik-scanner(?:-test-[0-9]+)?\.service$/.test(unit))
+      throw new Error("invalid_test_unit");
+    const command = (args2) => run2("systemctl", ["--user", ...args2]);
+    const inspect = async () => {
+      const output = await command([
+        "show",
+        unit,
+        "--property=LoadState,ActiveState,MainPID,UnitFileState"
+      ]);
+      const state = Object.fromEntries(output.trim().split("\n").map((line) => {
+        const split = line.indexOf("=");
+        return [line.slice(0, split), line.slice(split + 1)];
+      }));
+      if (!state.LoadState || !state.ActiveState || !/^\d+$/.test(state.MainPID) || state.UnitFileState === void 0)
+        throw new Error("systemd_inspection_failed");
+      return state;
+    };
+    const before = await inspect();
+    const pids = /* @__PURE__ */ new Set();
+    if (Number(before.MainPID))
+      pids.add(Number(before.MainPID));
+    const recordedPid = options.recordedPid;
+    if (typeof recordedPid === "number" && Number.isInteger(recordedPid) && recordedPid > 0)
+      pids.add(recordedPid);
+    if (before.LoadState !== "not-found" || before.ActiveState !== "inactive" || Number(before.MainPID))
+      await command(["stop", unit]);
+    try {
+      await command(["disable", "--now", unit]);
+    } catch (error) {
+      if (existsSync(unitPath) || !new RegExp(`Unit file ${unit.replaceAll(".", "\\.")} does not exist\\.?\\s*$`).test(error.message))
+        throw error;
+      await rm2(join3(dirname2(unitPath), "default.target.wants", unit), { force: true });
+      await command(["daemon-reload"]);
+    }
+    if ((await inspect()).ActiveState === "failed")
+      await command(["reset-failed", unit]);
+    const now = options.now ?? Date.now;
+    const wait = async (removed) => {
+      const deadline = now() + SCANNER_STOP_BUDGET_MS;
+      do {
+        const state = await inspect();
+        if (Number(state.MainPID))
+          pids.add(Number(state.MainPID));
+        const alive = await processesAlive(pids, run2);
+        if (state.ActiveState === "inactive" && Number(state.MainPID) === 0 && !alive && ["", "disabled", "static", "indirect", "not-found"].includes(state.UnitFileState) && (!removed || state.LoadState === "not-found"))
+          return;
+        await (options.sleep ?? delay2)(100);
+      } while (now() <= deadline);
+      throw new Error("systemd_stop_unverified");
+    };
+    await wait(false);
+    await rm2(unitPath, { force: true });
+    await command(["daemon-reload"]);
+    await wait(true);
+  } catch (cause) {
+    throw new Error("scanner_stop_failed", { cause });
+  }
+}
+
+// packages/shared/dist/scannerPid.js
+import { execFileSync } from "node:child_process";
+import { readFileSync } from "node:fs";
+var SCANNER_CMD_PATTERN = /(mnemonik-scanner|scanner[\\/]dist[\\/]index\.js)/;
+var capture = {
+  encoding: "utf-8",
+  stdio: ["ignore", "pipe", "ignore"],
+  timeout: 5e3
+};
+function processCmdline(pid, platform, exec = execFileSync) {
+  if (!Number.isSafeInteger(pid) || pid <= 0)
+    return null;
+  if (platform === "win32") {
+    try {
+      return exec("powershell.exe", [
+        "-NoProfile",
+        "-NonInteractive",
+        "-Command",
+        `(Get-CimInstance Win32_Process -Filter "ProcessId = ${pid}").CommandLine`
+      ], capture).trim();
+    } catch {
+      return null;
+    }
+  }
+  if (platform === "linux") {
+    try {
+      return readFileSync(`/proc/${pid}/cmdline`, "utf-8").replace(/\0/g, " ").trim();
+    } catch {
+    }
+  }
+  try {
+    return exec("ps", ["-o", "args=", "-p", String(pid)], capture).trim();
+  } catch {
+    return null;
+  }
+}
+function pidIsScanner(pid, platform = process.platform, exec = execFileSync, identity) {
+  const cmdline = processCmdline(pid, platform, exec);
+  if (cmdline === null)
+    return false;
+  if (!identity)
+    return SCANNER_CMD_PATTERN.test(cmdline);
+  if (cmdline !== `${identity.binaryPath} start`)
+    return false;
+  try {
+    return exec("ps", ["-o", "uid=", "-p", String(pid)], capture).trim() === String(identity.uid);
+  } catch {
+    return false;
+  }
+}
+
+// packages/local-setup/dist/storage.js
+init_hookRuntime();
+import { createHash, randomUUID } from "node:crypto";
+import fs2 from "node:fs";
+import { open, rename, readFile as readFile2, mkdir as mkdir2, lstat as lstat2, chmod, writeFile as writeFile2, unlink, rmdir } from "node:fs/promises";
+init_hookRuntime();
+import { dirname as dirname3, join as join4, win32, posix } from "node:path";
+import { setTimeout as delay3 } from "node:timers/promises";
+var lockfileKey = /* @__PURE__ */ Symbol.for("mnemonik.proper-lockfile");
+function sharedLockfile() {
+  const shared = globalThis;
+  return shared[lockfileKey] ??= Promise.resolve().then(() => __toESM(require_proper_lockfile(), 1)).then((module2) => module2.default);
+}
+var codeIs = (error, code) => error.code === code;
+async function readBytes(path) {
+  try {
+    if (!(await lstat2(path)).isFile())
+      throw new Error("setup_requires_regular_file");
+    return await readFile2(path);
+  } catch (error) {
+    if (codeIs(error, "ENOENT"))
+      return null;
+    throw error;
+  }
+}
+async function withLock(path, waitMs, work) {
+  const lockfile = await sharedLockfile();
+  await mkdir2(dirname3(path), { recursive: true, mode: 448 });
+  const generation = randomUUID();
+  const owner = join4(`${path}.lock`, "owner");
+  let compromised = false;
+  let acquired = false;
+  const assertOwned = async () => {
+    if (compromised || (await readBytes(owner).catch(() => null))?.toString() !== generation) {
+      compromised = true;
+      throw new Error("lock_lost");
+    }
+  };
+  const leaseFs = {
+    ...fs2,
+    mkdir: (dir, callback) => {
+      void mkdir2(dir).then(() => writeFile2(owner, generation, { mode: 384, flag: "wx" })).then(() => callback(), callback);
+    },
+    rmdir: (dir, callback) => {
+      void unlink(join4(dir, "owner")).catch((error) => {
+        if (!codeIs(error, "ENOENT"))
+          throw error;
+      }).then(() => rmdir(dir)).then(() => callback(), callback);
+    },
+    rmdirSync: (dir) => {
+      try {
+        fs2.unlinkSync(join4(dir, "owner"));
+      } catch (error) {
+        if (!codeIs(error, "ENOENT"))
+          throw error;
+      }
+      fs2.rmdirSync(dir);
+    },
+    stat: (file, callback) => {
+      void (acquired ? assertOwned() : Promise.resolve()).then(() => fs2.stat(file, callback), () => callback(Object.assign(new Error("lock_lost"), { code: "ENOENT" })));
+    }
+  };
+  const deadline = performance.now() + waitMs;
+  let release;
+  while (!release) {
+    try {
+      release = await lockfile.lock(path, {
+        realpath: false,
+        stale: 3e4,
+        update: 5e3,
+        retries: 0,
+        fs: leaseFs,
+        onCompromised: () => {
+          compromised = true;
+        }
+      });
+    } catch (error) {
+      if (!codeIs(error, "ELOCKED"))
+        throw error;
+      if (performance.now() >= deadline)
+        throw new RuntimeError("lock_held");
+      await delay3(Math.min(100, Math.max(1, deadline - performance.now())));
+    }
+  }
+  acquired = true;
+  try {
+    return await work(assertOwned);
+  } finally {
+    if (await assertOwned().then(() => true, () => false))
+      await release();
+  }
+}
+
+// packages/local-setup/dist/index.js
+var MAX_ORIGINAL_BYTES = 64 * 1024;
 
 // packages/cli/src/scanner/service.ts
 import { execFile } from "node:child_process";
-import { readFile, rm } from "node:fs/promises";
-import { join as join2, dirname as dirname2 } from "node:path";
+import { readFile as readFile3, rm as rm3, lstat as lstat3 } from "node:fs/promises";
+import { join as join5, dirname as dirname4 } from "node:path";
+import { homedir } from "node:os";
 import { promisify } from "node:util";
-import { setTimeout as delay } from "node:timers/promises";
+import { setTimeout as delay4 } from "node:timers/promises";
 import { RuntimeStore } from "../runtime/store.js";
+import { scannerReceipt } from "./control.js";
+var SCANNER_RESTART_MESSAGE = "Background indexing stopped responding. Mnemonik restarted it.";
+var SCANNER_RESTART_ACTION = "Run mnemonik status after indexing starts.";
+var SCANNER_LIMITED_SENTENCE = "Background indexing could not be started.";
+var SCANNER_LIMITED_ACTION = "Run mnemonik install to try again.";
+var SCANNER_SENTENCES = {
+  systemd_linger_required: [
+    "Background indexing needs permission to keep running after you log out.",
+    "Run sudo loginctl enable-linger $USER, then run mnemonik install."
+  ],
+  systemd_session_unavailable: [
+    "This server cannot keep background indexing running.",
+    "Ask the server administrator to enable systemd user services, then run mnemonik install."
+  ],
+  mac_authorization_required: [
+    "Mnemonik needs your Mac password to set up background indexing.",
+    "Run mnemonik install in a terminal and enter your Mac password."
+  ],
+  mac_authorization_failed: [
+    "Background indexing was not set up because the password was not accepted.",
+    SCANNER_LIMITED_ACTION
+  ],
+  scanner_replacement_rolled_back: [
+    "Background indexing went back to the previous version.",
+    SCANNER_LIMITED_ACTION
+  ],
+  scanner_stop_failed: [
+    "Background indexing could not be stopped.",
+    "Restart this computer, then run mnemonik uninstall again."
+  ],
+  scanner_other_account: [
+    "Background indexing is already set up for another account on this Mac.",
+    ""
+  ],
+  scanner_stopped: [
+    "Background indexing is stopped on this computer.",
+    "Run mnemonik scanner start and enter your Mac password to start it again."
+  ],
+  scanner_replacement_failed: [
+    "Background indexing could not be started. Mnemonik tried the new version and the last working one.",
+    SCANNER_LIMITED_ACTION
+  ],
+  scanner_replacement_pending: [
+    "Background indexing is restarting with a new version.",
+    "Wait a minute, then run mnemonik status."
+  ],
+  heartbeat_timeout: [
+    "Background indexing started but has not reported yet.",
+    "Wait a minute, then run mnemonik status."
+  ]
+};
 var ScannerServiceLimited = class extends Error {
   constructor(reason, message = reason) {
     super(message);
@@ -4695,14 +6764,21 @@ var ScannerServiceLimited = class extends Error {
   }
   reason;
   status = "LIMITED";
-  action = "mnemonik scanner enable";
+  get summary() {
+    return SCANNER_SENTENCES[this.reason]?.[0] ?? SCANNER_LIMITED_SENTENCE;
+  }
+  get action() {
+    if (this.reason.startsWith("scanner_replacement_") && /ENOSPC|no space left/iu.test(this.message))
+      return "Free disk space on this computer, then run mnemonik install.";
+    return SCANNER_SENTENCES[this.reason]?.[1] ?? SCANNER_LIMITED_ACTION;
+  }
 };
 function scannerService(options) {
   let store = options.store ?? new RuntimeStore(options.stateDir);
-  const verify = async () => {
+  const configureStore = async () => {
     if (!options.store) {
       const saved = JSON.parse(
-        await new RuntimeStore(options.stateDir).bytes(join2(options.stateDir, "scanner/state.json")).then((bytes) => bytes.toString()).catch((error) => {
+        await new RuntimeStore(options.stateDir).bytes(join5(options.stateDir, "scanner/state.json")).then((bytes) => bytes.toString()).catch((error) => {
           if (error.code === "ENOENT") return "null";
           throw error;
         })
@@ -4711,19 +6787,30 @@ function scannerService(options) {
         allowUnsigned: saved?.devReleaseSource === true
       });
     }
+  };
+  const verify = async () => {
+    await configureStore();
     return store.verifyRuntime("scanner");
   };
   const now = options.now ?? Date.now;
-  const sleep = options.sleep ?? delay;
+  const sleep = options.sleep ?? delay4;
   let verified = false;
+  let replacementRuntime;
   const command = options.command ?? (async (operation, definition) => {
-    const runtime = await verify();
+    const retained = replacementRuntime ?? options.supervisorRuntime;
+    const fixed = !replacementRuntime && (options.platform ?? process.platform) === "darwin" ? await lstat3(macScannerLauncher).catch((error) => {
+      if (error.code === "ENOENT") return null;
+      throw error;
+    }) : null;
+    if (fixed && (!fixed.isFile() || fixed.uid !== 0 || fixed.mode & 18))
+      throw new Error("service_runtime_permission");
+    const entry = fixed ? macScannerLauncher : (retained ? await store.verifyRetainedRuntime("scanner", retained.reference) : await verify()).entry;
     return new Promise((resolve, reject) => {
       const child = execFile(
-        runtime.entry,
+        entry,
         ["service", operation, "--json"],
         {
-          timeout: process.platform === "win32" ? WINDOWS_SERVICE_BUDGET_MS : 3e4,
+          timeout: (options.platform ?? process.platform) === "darwin" ? SCANNER_MAC_COMMAND_BUDGET_MS : process.platform === "win32" ? WINDOWS_SERVICE_BUDGET_MS : 3e4,
           encoding: "utf8",
           env: {
             ...process.env,
@@ -4753,10 +6840,16 @@ function scannerService(options) {
   });
   const invoke = async (operation, definition) => {
     let result;
+    const interrupt = () => {
+    };
+    const terminalAuthentication = (options.platform ?? process.platform) === "darwin" && operation === "install";
+    if (terminalAuthentication) process.on("SIGINT", interrupt);
     try {
       result = await command(operation, definition);
     } catch (error) {
       throw new ScannerServiceLimited("scanner_service_unavailable", error.message);
+    } finally {
+      if (terminalAuthentication) process.removeListener("SIGINT", interrupt);
     }
     if (result.status === "LIMITED") throw new ScannerServiceLimited(result.reason, result.detail);
     return result.supervisor;
@@ -4779,15 +6872,14 @@ function scannerService(options) {
     }
   };
   const heartbeat = async (since, pid) => {
-    try {
-      const receipt = JSON.parse(
-        await readFile(join2(options.stateDir, "scanner/status.json"), "utf8")
-      );
-      return pid !== null && receipt.snapshot.lifecycle.pid === pid && typeof receipt.snapshot.heartbeat.lastSuccess === "number" && receipt.snapshot.heartbeat.lastSuccess > since;
-    } catch {
-      return false;
-    }
+    const snapshot = (await scannerReceipt(options.stateDir).catch(() => null))?.snapshot;
+    return pid !== null && snapshot?.lifecycle.pid === pid && (snapshot.heartbeat.lastSuccess ?? 0) > since;
   };
+  const locallyReady = async (since, pid, paused = false) => scannerAttemptHealthy(
+    await scannerReceipt(options.stateDir).catch(() => null),
+    { pid, startedAt: since },
+    paused
+  );
   const describe = async () => {
     const runtime = await verify();
     return options.describe ? await options.describe() : JSON.parse(
@@ -4803,6 +6895,52 @@ function scannerService(options) {
   };
   return {
     status: () => invoke("status"),
+    async recover() {
+      if ((options.platform ?? process.platform) !== "darwin") return false;
+      return withLock(
+        join5(options.stateDir, "scanner/launchd-replacement-control"),
+        5e3,
+        async () => {
+          const receipt = await scannerReceipt(options.stateDir);
+          const snapshot = receipt?.snapshot;
+          const attempt = await readFile3(
+            join5(options.stateDir, "scanner/service-replacement/result.json"),
+            "utf8"
+          ).then((text) => JSON.parse(text)).catch(() => null);
+          const age = now() - Number(attempt?.startedAt);
+          if (attempt?.pid && age <= SCANNER_HANDOFF_BUDGET_MS) return false;
+          const stalledStart = attempt?.pid && Number.isFinite(age) && age > SCANNER_HANDOFF_BUDGET_MS;
+          const staleReceipt = snapshot && receipt && snapshot.heartbeat.lastSuccess && ["running", "starting"].includes(snapshot.lifecycle.state) && now() - snapshot.heartbeat.lastSuccess > SCANNER_RECEIPT_STALE_MS && now() - receipt.recordedAt > SCANNER_RECEIPT_STALE_MS;
+          const pid = stalledStart ? attempt.pid : snapshot?.lifecycle.pid;
+          if (!pid || !stalledStart && !staleReceipt) return false;
+          if (receipt && snapshot?.lifecycle.pid === pid && (snapshot.lifecycle.state === "paused" || now() - receipt.recordedAt <= SCANNER_RECEIPT_STALE_MS))
+            return false;
+          const state = JSON.parse(
+            await readFile3(join5(options.stateDir, "scanner/state.json"), "utf8")
+          );
+          if (state.paused) return false;
+          let runtime = await verify();
+          const service = await invoke("status");
+          if (service.binaryPath !== runtime.entry) {
+            const pointer = JSON.parse(
+              (await store.bytes(store.pointerPath("scanner"))).toString()
+            );
+            if (!pointer.previous) return false;
+            runtime = await store.verifyRetainedRuntime("scanner", pointer.previous);
+          }
+          if (service.kind !== "launchd" || !service.installed || !service.running || service.pid !== pid || service.binaryPath !== runtime.entry || !process.getuid)
+            return false;
+          if (!(options.pidIdentity ?? pidIsScanner)(pid, "darwin", void 0, {
+            binaryPath: runtime.entry,
+            uid: process.getuid()
+          }))
+            return false;
+          (options.signal ?? process.kill)(pid, "SIGKILL");
+          options.onScannerRestartRequested?.();
+          return true;
+        }
+      );
+    },
     get verified() {
       return verified;
     },
@@ -4823,7 +6961,7 @@ function scannerService(options) {
         return [{ id: "scanner", before: "unknown" }];
       }
     },
-    async start(_id = "scanner") {
+    async start(_id = "scanner", heartbeatAfter) {
       verified = false;
       let state = await invoke("status");
       const alreadyRunning = state.running;
@@ -4839,8 +6977,8 @@ function scannerService(options) {
       });
       await waitFor(
         "heartbeat",
-        6e4,
-        () => heartbeat(alreadyRunning ? startedAt - 3e5 : startedAt, state.pid)
+        SCANNER_STARTUP_BUDGET_MS,
+        () => heartbeat(heartbeatAfter ?? (alreadyRunning ? startedAt - 3e5 : startedAt), state.pid)
       );
       verified = true;
       return alreadyRunning ? { started: false, alreadyRunning: true } : { started: true, alreadyRunning: false };
@@ -4856,33 +6994,130 @@ function scannerService(options) {
         }
       });
     },
+    async replace(runtime, replacement) {
+      replacementRuntime = runtime;
+      verified = false;
+      const saved = JSON.parse(
+        replacement.state?.after ?? await readFile3(join5(options.stateDir, "scanner/state.json"), "utf8")
+      );
+      const startedAt = now();
+      await invoke("install", {
+        binaryPath: runtime.entry,
+        arguments: ["start"],
+        workingDirectory: runtime.directory,
+        environment: { MNEMONIK_STATE_DIR: options.stateDir },
+        credentialFamilyId: saved.config?.credentialFamilyId,
+        runAtLogin: true,
+        restart: { policy: "on-failure", delayMs: 3e3 },
+        logDestination: join5(options.stateDir, "scanner/scanner.log"),
+        replacement
+      });
+      const deadline = now() + SCANNER_HANDOFF_BUDGET_MS;
+      while (now() < deadline) {
+        const attempt = await readFile3(
+          join5(options.stateDir, "scanner/service-replacement/result.json"),
+          "utf8"
+        ).then(JSON.parse).catch(() => null);
+        if (attempt && attempt.startedAt >= startedAt) {
+          if (attempt.candidateError === "scanner_configuration_changed")
+            throw new ScannerServiceLimited("scanner_replacement_interrupted");
+          if (attempt.fallbackError)
+            throw new ScannerServiceLimited(
+              attempt.fallbackError === "scanner_fallback_missing" ? "scanner_replacement_candidate_failed" : "scanner_replacement_failed",
+              [attempt.candidateError, attempt.fallbackError].filter(Boolean).join("; ")
+            );
+          const active = await invoke("status");
+          if (active.running && active.pid === attempt.pid && await locallyReady(attempt.startedAt, active.pid, saved.paused)) {
+            if (attempt.fallback)
+              throw new ScannerServiceLimited(
+                "scanner_replacement_rolled_back",
+                attempt.candidateError
+              );
+            verified = true;
+            return;
+          }
+        }
+        await sleep(1e3);
+      }
+      throw new ScannerServiceLimited("scanner_replacement_interrupted");
+    },
     async restart() {
-      await invoke("stop");
-      await invoke("uninstall");
-      return this.start();
+      const definition = await describe();
+      const startedAt = now();
+      await invoke("install", definition);
+      return this.start("scanner", startedAt);
     },
     async stop() {
       await invoke("stop");
     },
     async uninstall() {
-      await invoke("stop");
-      await invoke("uninstall");
-      await rm(dirname2(store.pointerPath("scanner")), { recursive: true, force: true });
+      const native = (timeout) => options.supervisorRun ?? (async (file, args2) => (await promisify(execFile)(file, args2, { encoding: "utf8", timeout })).stdout);
+      try {
+        if ((options.platform ?? process.platform) === "darwin") {
+          return await withLock(
+            join5(options.stateDir, "scanner/launchd-replacement-control"),
+            SCANNER_REMOVAL_BUDGET_MS,
+            async () => {
+              await removeMacScanner(
+                options.stateDir,
+                options.home ?? homedir(),
+                options.uid ?? process.getuid?.() ?? -1,
+                native(SCANNER_REMOVAL_BUDGET_MS),
+                { now, sleep, plist: options.systemPlist }
+              );
+              await rm3(dirname4(store.pointerPath("scanner")), { recursive: true, force: true });
+            }
+          );
+        }
+        if ((options.platform ?? process.platform) === "linux") {
+          const recordedPid = await readFile3(join5(options.stateDir, "scanner/status.json"), "utf8").then(
+            (text) => JSON.parse(text).snapshot?.lifecycle?.pid
+          ).catch((error) => {
+            if (error.code === "ENOENT") return void 0;
+            throw error;
+          });
+          await uninstallSystemdUnit(
+            join5(
+              process.env.XDG_CONFIG_HOME ?? join5(options.home ?? homedir(), ".config"),
+              "systemd/user/mnemonik-scanner.service"
+            ),
+            native(SCANNER_STOP_BUDGET_MS),
+            { now, sleep, recordedPid }
+          );
+        } else {
+          await invoke("stop");
+          await invoke("uninstall");
+        }
+        await rm3(dirname4(store.pointerPath("scanner")), { recursive: true, force: true });
+      } catch (error) {
+        const cause = error.cause;
+        throw new ScannerServiceLimited(
+          "scanner_stop_failed",
+          [error.message, cause instanceof Error ? cause.message : void 0].filter(Boolean).join(": ")
+        );
+      }
     },
     async restore(_id, before) {
       if (before === "unknown") return;
+      const restoredAt = now();
       const previous = JSON.parse(before);
       if (previous.installed && previous.definition) {
         await invoke("install", previous.definition);
-        await invoke(previous.running ? "start" : "stop");
+        if (previous.running) await this.start("scanner", restoredAt);
+        else await invoke("stop");
         return;
       }
       if (!previous.installed) await invoke("uninstall");
-      else if (!previous.running) await invoke("stop");
+      else if (previous.running) await this.start("scanner", restoredAt);
+      else await invoke("stop");
     }
   };
 }
 export {
+  SCANNER_LIMITED_ACTION,
+  SCANNER_LIMITED_SENTENCE,
+  SCANNER_RESTART_ACTION,
+  SCANNER_RESTART_MESSAGE,
   ScannerServiceLimited,
   scannerService
 };