@qodalis/cli-core 2.0.0-beta.8 → 2.0.0-rc.1

package/public-api.js

@@ -7,7 +7,11 @@ var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __commonJS = (cb, mod) => function __require() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
 };
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
@@ -26,9 +30,9 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/constants.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/constants.js
 var require_constants = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/constants.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/constants.js"(exports, module) {
     var SEMVER_SPEC_VERSION = "2.0.0";
     var MAX_LENGTH = 256;
     var MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER || /* istanbul ignore next */
@@ -57,30 +61,30 @@ var require_constants = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/debug.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/debug.js
 var require_debug = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/debug.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/debug.js"(exports, module) {
     var debug = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () => {
     };
     module.exports = debug;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/re.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/re.js
 var require_re = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/re.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/re.js"(exports, module) {
     var {
       MAX_SAFE_COMPONENT_LENGTH,
       MAX_SAFE_BUILD_LENGTH,
       MAX_LENGTH
     } = require_constants();
     var debug = require_debug();
-    exports$1 = module.exports = {};
-    var re = exports$1.re = [];
-    var safeRe = exports$1.safeRe = [];
-    var src = exports$1.src = [];
-    var safeSrc = exports$1.safeSrc = [];
-    var t = exports$1.t = {};
+    exports = module.exports = {};
+    var re = exports.re = [];
+    var safeRe = exports.safeRe = [];
+    var src = exports.src = [];
+    var safeSrc = exports.safeSrc = [];
+    var t = exports.t = {};
     var R = 0;
     var LETTERDASHNUMBER = "[a-zA-Z0-9-]";
     var safeRegexReplacements = [
@@ -133,18 +137,18 @@ var require_re = __commonJS({
     createToken("COERCERTLFULL", src[t.COERCEFULL], true);
     createToken("LONETILDE", "(?:~>?)");
     createToken("TILDETRIM", `(\\s*)${src[t.LONETILDE]}\\s+`, true);
-    exports$1.tildeTrimReplace = "$1~";
+    exports.tildeTrimReplace = "$1~";
     createToken("TILDE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAIN]}$`);
     createToken("TILDELOOSE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAINLOOSE]}$`);
     createToken("LONECARET", "(?:\\^)");
     createToken("CARETTRIM", `(\\s*)${src[t.LONECARET]}\\s+`, true);
-    exports$1.caretTrimReplace = "$1^";
+    exports.caretTrimReplace = "$1^";
     createToken("CARET", `^${src[t.LONECARET]}${src[t.XRANGEPLAIN]}$`);
     createToken("CARETLOOSE", `^${src[t.LONECARET]}${src[t.XRANGEPLAINLOOSE]}$`);
     createToken("COMPARATORLOOSE", `^${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]})$|^$`);
     createToken("COMPARATOR", `^${src[t.GTLT]}\\s*(${src[t.FULLPLAIN]})$|^$`);
     createToken("COMPARATORTRIM", `(\\s*)${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]}|${src[t.XRANGEPLAIN]})`, true);
-    exports$1.comparatorTrimReplace = "$1$2$3";
+    exports.comparatorTrimReplace = "$1$2$3";
     createToken("HYPHENRANGE", `^\\s*(${src[t.XRANGEPLAIN]})\\s+-\\s+(${src[t.XRANGEPLAIN]})\\s*$`);
     createToken("HYPHENRANGELOOSE", `^\\s*(${src[t.XRANGEPLAINLOOSE]})\\s+-\\s+(${src[t.XRANGEPLAINLOOSE]})\\s*$`);
     createToken("STAR", "(<|>)?=?\\s*\\*");
@@ -153,9 +157,9 @@ var require_re = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/parse-options.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/parse-options.js
 var require_parse_options = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/parse-options.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/parse-options.js"(exports, module) {
     var looseOption = Object.freeze({ loose: true });
     var emptyOpts = Object.freeze({});
     var parseOptions = (options) => {
@@ -171,9 +175,9 @@ var require_parse_options = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/identifiers.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/identifiers.js
 var require_identifiers = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/identifiers.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/identifiers.js"(exports, module) {
     var numeric = /^[0-9]+$/;
     var compareIdentifiers = (a, b) => {
       if (typeof a === "number" && typeof b === "number") {
@@ -195,14 +199,26 @@ var require_identifiers = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/classes/semver.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/semver.js
 var require_semver = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/classes/semver.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/semver.js"(exports, module) {
     var debug = require_debug();
     var { MAX_LENGTH, MAX_SAFE_INTEGER } = require_constants();
     var { safeRe: re, t } = require_re();
     var parseOptions = require_parse_options();
     var { compareIdentifiers } = require_identifiers();
+    var isPrereleaseIdentifier = (prerelease, identifier) => {
+      const identifiers = identifier.split(".");
+      if (identifiers.length > prerelease.length) {
+        return false;
+      }
+      for (let i = 0; i < identifiers.length; i++) {
+        if (compareIdentifiers(prerelease[i], identifiers[i]) !== 0) {
+          return false;
+        }
+      }
+      return true;
+    };
     var SemVer = class _SemVer {
       constructor(version, options) {
         options = parseOptions(options);
@@ -449,8 +465,9 @@ var require_semver = __commonJS({
               if (identifierBase === false) {
                 prerelease = [identifier];
               }
-              if (compareIdentifiers(this.prerelease[0], identifier) === 0) {
-                if (isNaN(this.prerelease[1])) {
+              if (isPrereleaseIdentifier(this.prerelease, identifier)) {
+                const prereleaseBase = this.prerelease[identifier.split(".").length];
+                if (isNaN(prereleaseBase)) {
                   this.prerelease = prerelease;
                 }
               } else {
@@ -473,9 +490,9 @@ var require_semver = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/parse.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/parse.js
 var require_parse = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/parse.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/parse.js"(exports, module) {
     var SemVer = require_semver();
     var parse = (version, options, throwErrors = false) => {
       if (version instanceof SemVer) {
@@ -494,9 +511,9 @@ var require_parse = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/valid.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/valid.js
 var require_valid = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/valid.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/valid.js"(exports, module) {
     var parse = require_parse();
     var valid2 = (version, options) => {
       const v = parse(version, options);
@@ -506,9 +523,9 @@ var require_valid = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/clean.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/clean.js
 var require_clean = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/clean.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/clean.js"(exports, module) {
     var parse = require_parse();
     var clean = (version, options) => {
       const s = parse(version.trim().replace(/^[=v]+/, ""), options);
@@ -518,9 +535,9 @@ var require_clean = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/inc.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/inc.js
 var require_inc = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/inc.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/inc.js"(exports, module) {
     var SemVer = require_semver();
     var inc = (version, release, options, identifier, identifierBase) => {
       if (typeof options === "string") {
@@ -541,9 +558,9 @@ var require_inc = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/diff.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/diff.js
 var require_diff = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/diff.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/diff.js"(exports, module) {
     var parse = require_parse();
     var diff = (version1, version2) => {
       const v1 = parse(version1, null, true);
@@ -584,36 +601,36 @@ var require_diff = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/major.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/major.js
 var require_major = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/major.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/major.js"(exports, module) {
     var SemVer = require_semver();
     var major = (a, loose) => new SemVer(a, loose).major;
     module.exports = major;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/minor.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/minor.js
 var require_minor = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/minor.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/minor.js"(exports, module) {
     var SemVer = require_semver();
     var minor = (a, loose) => new SemVer(a, loose).minor;
     module.exports = minor;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/patch.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/patch.js
 var require_patch = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/patch.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/patch.js"(exports, module) {
     var SemVer = require_semver();
     var patch = (a, loose) => new SemVer(a, loose).patch;
     module.exports = patch;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/prerelease.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/prerelease.js
 var require_prerelease = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/prerelease.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/prerelease.js"(exports, module) {
     var parse = require_parse();
     var prerelease = (version, options) => {
       const parsed = parse(version, options);
@@ -623,36 +640,36 @@ var require_prerelease = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/compare.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare.js
 var require_compare = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/compare.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare.js"(exports, module) {
     var SemVer = require_semver();
     var compare2 = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
     module.exports = compare2;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/rcompare.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rcompare.js
 var require_rcompare = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/rcompare.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rcompare.js"(exports, module) {
     var compare2 = require_compare();
     var rcompare = (a, b, loose) => compare2(b, a, loose);
     module.exports = rcompare;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/compare-loose.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-loose.js
 var require_compare_loose = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/compare-loose.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-loose.js"(exports, module) {
     var compare2 = require_compare();
     var compareLoose = (a, b) => compare2(a, b, true);
     module.exports = compareLoose;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/compare-build.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-build.js
 var require_compare_build = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/compare-build.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare-build.js"(exports, module) {
     var SemVer = require_semver();
     var compareBuild = (a, b, loose) => {
       const versionA = new SemVer(a, loose);
@@ -663,81 +680,81 @@ var require_compare_build = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/sort.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/sort.js
 var require_sort = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/sort.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/sort.js"(exports, module) {
     var compareBuild = require_compare_build();
-    var sort = (list, loose) => list.sort((a, b) => compareBuild(a, b, loose));
+    var sort = (list2, loose) => list2.sort((a, b) => compareBuild(a, b, loose));
     module.exports = sort;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/rsort.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rsort.js
 var require_rsort = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/rsort.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/rsort.js"(exports, module) {
     var compareBuild = require_compare_build();
-    var rsort = (list, loose) => list.sort((a, b) => compareBuild(b, a, loose));
+    var rsort = (list2, loose) => list2.sort((a, b) => compareBuild(b, a, loose));
     module.exports = rsort;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/gt.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gt.js
 var require_gt = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/gt.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gt.js"(exports, module) {
     var compare2 = require_compare();
     var gt = (a, b, loose) => compare2(a, b, loose) > 0;
     module.exports = gt;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/lt.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lt.js
 var require_lt = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/lt.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lt.js"(exports, module) {
     var compare2 = require_compare();
     var lt = (a, b, loose) => compare2(a, b, loose) < 0;
     module.exports = lt;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/eq.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/eq.js
 var require_eq = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/eq.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/eq.js"(exports, module) {
     var compare2 = require_compare();
     var eq = (a, b, loose) => compare2(a, b, loose) === 0;
     module.exports = eq;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/neq.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/neq.js
 var require_neq = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/neq.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/neq.js"(exports, module) {
     var compare2 = require_compare();
     var neq = (a, b, loose) => compare2(a, b, loose) !== 0;
     module.exports = neq;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/gte.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gte.js
 var require_gte = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/gte.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gte.js"(exports, module) {
     var compare2 = require_compare();
     var gte2 = (a, b, loose) => compare2(a, b, loose) >= 0;
     module.exports = gte2;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/lte.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lte.js
 var require_lte = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/lte.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lte.js"(exports, module) {
     var compare2 = require_compare();
     var lte = (a, b, loose) => compare2(a, b, loose) <= 0;
     module.exports = lte;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/cmp.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/cmp.js
 var require_cmp = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/cmp.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/cmp.js"(exports, module) {
     var eq = require_eq();
     var neq = require_neq();
     var gt = require_gt();
@@ -784,9 +801,9 @@ var require_cmp = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/coerce.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/coerce.js
 var require_coerce = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/coerce.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/coerce.js"(exports, module) {
     var SemVer = require_semver();
     var parse = require_parse();
     var { safeRe: re, t } = require_re();
@@ -829,9 +846,49 @@ var require_coerce = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/lrucache.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/truncate.js
+var require_truncate = __commonJS({
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/truncate.js"(exports, module) {
+    var parse = require_parse();
+    var constants2 = require_constants();
+    var SemVer = require_semver();
+    var truncate = (version, truncation, options) => {
+      if (!constants2.RELEASE_TYPES.includes(truncation)) {
+        return null;
+      }
+      const clonedVersion = cloneInputVersion(version, options);
+      return clonedVersion && doTruncation(clonedVersion, truncation);
+    };
+    var cloneInputVersion = (version, options) => {
+      const versionStringToParse = version instanceof SemVer ? version.version : version;
+      return parse(versionStringToParse, options);
+    };
+    var doTruncation = (version, truncation) => {
+      if (isPrerelease(truncation)) {
+        return version.version;
+      }
+      version.prerelease = [];
+      switch (truncation) {
+        case "major":
+          version.minor = 0;
+          version.patch = 0;
+          break;
+        case "minor":
+          version.patch = 0;
+          break;
+      }
+      return version.format();
+    };
+    var isPrerelease = (type) => {
+      return type.startsWith("pre");
+    };
+    module.exports = truncate;
+  }
+});
+
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/lrucache.js
 var require_lrucache = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/lrucache.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/lrucache.js"(exports, module) {
     var LRUCache = class {
       constructor() {
         this.max = 1e3;
@@ -866,9 +923,9 @@ var require_lrucache = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/classes/range.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/range.js
 var require_range = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/classes/range.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/range.js"(exports, module) {
     var SPACE_CHARACTERS = /\s+/g;
     var Range = class _Range {
       constructor(range, options) {
@@ -935,6 +992,7 @@ var require_range = __commonJS({
         return this.range;
       }
       parseRange(range) {
+        range = range.replace(BUILDSTRIPRE, "");
         const memoOpts = (this.options.includePrerelease && FLAG_INCLUDE_PRERELEASE) | (this.options.loose && FLAG_LOOSE);
         const memoKey = memoOpts + ":" + range;
         const cached = cache.get(memoKey);
@@ -1017,12 +1075,14 @@ var require_range = __commonJS({
     var SemVer = require_semver();
     var {
       safeRe: re,
+      src,
       t,
       comparatorTrimReplace,
       tildeTrimReplace,
       caretTrimReplace
     } = require_re();
     var { FLAG_INCLUDE_PRERELEASE, FLAG_LOOSE } = require_constants();
+    var BUILDSTRIPRE = new RegExp(src[t.BUILD], "g");
     var isNullSet = (c) => c.value === "<0.0.0-0";
     var isAny = (c) => c.value === "";
     var isSatisfiable = (comparators, options) => {
@@ -1051,20 +1111,22 @@ var require_range = __commonJS({
       return comp;
     };
     var isX = (id) => !id || id.toLowerCase() === "x" || id === "*";
+    var invalidXRangeOrder = (M, m, p) => isX(M) && !isX(m) || isX(m) && p && !isX(p);
     var replaceTildes = (comp, options) => {
       return comp.trim().split(/\s+/).map((c) => replaceTilde(c, options)).join(" ");
     };
     var replaceTilde = (comp, options) => {
       const r = options.loose ? re[t.TILDELOOSE] : re[t.TILDE];
+      const z = options.includePrerelease ? "-0" : "";
       return comp.replace(r, (_, M, m, p, pr) => {
         debug("tilde", comp, _, M, m, p, pr);
         let ret;
         if (isX(M)) {
           ret = "";
         } else if (isX(m)) {
-          ret = `>=${M}.0.0 <${+M + 1}.0.0-0`;
+          ret = `>=${M}.0.0${z} <${+M + 1}.0.0-0`;
         } else if (isX(p)) {
-          ret = `>=${M}.${m}.0 <${M}.${+m + 1}.0-0`;
+          ret = `>=${M}.${m}.0${z} <${M}.${+m + 1}.0-0`;
         } else if (pr) {
           debug("replaceTilde pr", pr);
           ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
@@ -1110,9 +1172,9 @@ var require_range = __commonJS({
           debug("no pr");
           if (M === "0") {
             if (m === "0") {
-              ret = `>=${M}.${m}.${p}${z} <${M}.${m}.${+p + 1}-0`;
+              ret = `>=${M}.${m}.${p} <${M}.${m}.${+p + 1}-0`;
             } else {
-              ret = `>=${M}.${m}.${p}${z} <${M}.${+m + 1}.0-0`;
+              ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
             }
           } else {
             ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
@@ -1131,6 +1193,9 @@ var require_range = __commonJS({
       const r = options.loose ? re[t.XRANGELOOSE] : re[t.XRANGE];
       return comp.replace(r, (ret, gtlt, M, m, p, pr) => {
         debug("xRange", comp, ret, gtlt, M, m, p, pr);
+        if (invalidXRangeOrder(M, m, p)) {
+          return comp;
+        }
         const xM = isX(M);
         const xm = xM || isX(m);
         const xp = xm || isX(p);
@@ -1242,9 +1307,9 @@ var require_range = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/classes/comparator.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/comparator.js
 var require_comparator = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/classes/comparator.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/comparator.js"(exports, module) {
     var ANY = /* @__PURE__ */ Symbol("SemVer ANY");
     var Comparator = class _Comparator {
       static get ANY() {
@@ -1354,9 +1419,9 @@ var require_comparator = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/satisfies.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/satisfies.js
 var require_satisfies = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/functions/satisfies.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/satisfies.js"(exports, module) {
     var Range = require_range();
     var satisfies2 = (version, range, options) => {
       try {
@@ -1370,18 +1435,18 @@ var require_satisfies = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/to-comparators.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/to-comparators.js
 var require_to_comparators = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/to-comparators.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/to-comparators.js"(exports, module) {
     var Range = require_range();
     var toComparators = (range, options) => new Range(range, options).set.map((comp) => comp.map((c) => c.value).join(" ").trim().split(" "));
     module.exports = toComparators;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/max-satisfying.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/max-satisfying.js
 var require_max_satisfying = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/max-satisfying.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/max-satisfying.js"(exports, module) {
     var SemVer = require_semver();
     var Range = require_range();
     var maxSatisfying = (versions, range, options) => {
@@ -1407,9 +1472,9 @@ var require_max_satisfying = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/min-satisfying.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-satisfying.js
 var require_min_satisfying = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/min-satisfying.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-satisfying.js"(exports, module) {
     var SemVer = require_semver();
     var Range = require_range();
     var minSatisfying = (versions, range, options) => {
@@ -1435,9 +1500,9 @@ var require_min_satisfying = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/min-version.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-version.js
 var require_min_version = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/min-version.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/min-version.js"(exports, module) {
     var SemVer = require_semver();
     var Range = require_range();
     var gt = require_gt();
@@ -1493,9 +1558,9 @@ var require_min_version = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/valid.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/valid.js
 var require_valid2 = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/valid.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/valid.js"(exports, module) {
     var Range = require_range();
     var validRange = (range, options) => {
       try {
@@ -1508,9 +1573,9 @@ var require_valid2 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/outside.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/outside.js
 var require_outside = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/outside.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/outside.js"(exports, module) {
     var SemVer = require_semver();
     var Comparator = require_comparator();
     var { ANY } = Comparator;
@@ -1576,27 +1641,27 @@ var require_outside = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/gtr.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/gtr.js
 var require_gtr = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/gtr.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/gtr.js"(exports, module) {
     var outside = require_outside();
     var gtr = (version, range, options) => outside(version, range, ">", options);
     module.exports = gtr;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/ltr.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/ltr.js
 var require_ltr = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/ltr.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/ltr.js"(exports, module) {
     var outside = require_outside();
     var ltr = (version, range, options) => outside(version, range, "<", options);
     module.exports = ltr;
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/intersects.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/intersects.js
 var require_intersects = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/intersects.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/intersects.js"(exports, module) {
     var Range = require_range();
     var intersects = (r1, r2, options) => {
       r1 = new Range(r1, options);
@@ -1607,9 +1672,9 @@ var require_intersects = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/simplify.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/simplify.js
 var require_simplify = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/simplify.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/simplify.js"(exports, module) {
     var satisfies2 = require_satisfies();
     var compare2 = require_compare();
     module.exports = (versions, range, options) => {
@@ -1656,9 +1721,9 @@ var require_simplify = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/subset.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/subset.js
 var require_subset = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/ranges/subset.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/subset.js"(exports, module) {
     var Range = require_range();
     var Comparator = require_comparator();
     var { ANY } = Comparator;
@@ -1765,7 +1830,7 @@ var require_subset = __commonJS({
             if (higher === c && higher !== gt) {
               return false;
             }
-          } else if (gt.operator === ">=" && !satisfies2(gt.semver, String(c), options)) {
+          } else if (gt.operator === ">=" && !c.test(gt.semver)) {
             return false;
           }
         }
@@ -1780,7 +1845,7 @@ var require_subset = __commonJS({
             if (lower === c && lower !== lt) {
               return false;
             }
-          } else if (lt.operator === "<=" && !satisfies2(lt.semver, String(c), options)) {
+          } else if (lt.operator === "<=" && !c.test(lt.semver)) {
             return false;
           }
         }
@@ -1817,9 +1882,9 @@ var require_subset = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/index.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/index.js
 var require_semver2 = __commonJS({
-  "../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/index.js"(exports$1, module) {
+  "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/index.js"(exports, module) {
     var internalRe = require_re();
     var constants2 = require_constants();
     var SemVer = require_semver();
@@ -1847,6 +1912,7 @@ var require_semver2 = __commonJS({
     var lte = require_lte();
     var cmp = require_cmp();
     var coerce2 = require_coerce();
+    var truncate = require_truncate();
     var Comparator = require_comparator();
     var Range = require_range();
     var satisfies2 = require_satisfies();
@@ -1885,6 +1951,7 @@ var require_semver2 = __commonJS({
       lte,
       cmp,
       coerce: coerce2,
+      truncate,
       Comparator,
       Range,
       satisfies: satisfies2,
@@ -1911,11 +1978,7 @@ var require_semver2 = __commonJS({
   }
 });
 
-// src/lib/models/permissions.ts
-var DEFAULT_FILE_PERMISSIONS = "rw-r--r--";
-var DEFAULT_DIR_PERMISSIONS = "rwxr-xr-x";
-
-// src/lib/models/index.ts
+// src/lib/models/colors.ts
 var CliForegroundColor = /* @__PURE__ */ ((CliForegroundColor2) => {
   CliForegroundColor2["Black"] = "\x1B[30m";
   CliForegroundColor2["Red"] = "\x1B[31m";
@@ -1939,6 +2002,8 @@ var CliBackgroundColor = /* @__PURE__ */ ((CliBackgroundColor2) => {
   CliBackgroundColor2["White"] = "\x1B[47m";
   return CliBackgroundColor2;
 })(CliBackgroundColor || {});
+
+// src/lib/models/icons.ts
 var CliIcon = /* @__PURE__ */ ((CliIcon2) => {
   CliIcon2["CheckIcon"] = "\u2714";
   CliIcon2["CrossIcon"] = "\u2718";
@@ -2008,7 +2073,7 @@ var CliIcon = /* @__PURE__ */ ((CliIcon2) => {
   CliIcon2["Server"] = "\u{1F5A5}";
   CliIcon2["Cloud"] = "\u2601";
   CliIcon2["Network"] = "\u{1F310}";
-  CliIcon2["Monitor"] = "\u{1F5A5}";
+  CliIcon2["Monitor"] = "\u{1F4FA}";
   CliIcon2["Printer"] = "\u{1F5A8}";
   CliIcon2["USB"] = "\u{1F50C}";
   CliIcon2["Speaker"] = "\u{1F50A}";
@@ -2018,14 +2083,14 @@ var CliIcon = /* @__PURE__ */ ((CliIcon2) => {
   CliIcon2["Music"] = "\u{1F3B5}";
   CliIcon2["Phone"] = "\u{1F4DE}";
   CliIcon2["Package"] = "\u{1F4E6}";
-  CliIcon2["Plugin"] = "\u{1F50C}";
-  CliIcon2["Extension"] = "\u{1F9E9}";
-  CliIcon2["Module"] = "\u{1F4E6}";
+  CliIcon2["Plugin"] = "\u{1F9E9}";
+  CliIcon2["Extension"] = "\u{1F50C}";
+  CliIcon2["Module"] = "\u{1F9F1}";
   CliIcon2["Evaluate"] = "\u{1F50D}";
-  CliIcon2["Variable"] = "\u{1F527}";
+  CliIcon2["Variable"] = "\u{1D465}";
   CliIcon2["Script"] = "\u{1F4DC}";
-  CliIcon2["Code"] = "\u{1F4BE}";
-  CliIcon2["Logs"] = "\u{1F4DC}";
+  CliIcon2["Code"] = "\u{1F4DD}";
+  CliIcon2["Logs"] = "\u{1F4CB}";
   CliIcon2["Power"] = "\u23FB";
   CliIcon2["Heart"] = "\u2764";
   CliIcon2["Flame"] = "\u{1F525}";
@@ -2056,6 +2121,54 @@ var CliIcon = /* @__PURE__ */ ((CliIcon2) => {
   CliIcon2["Gift"] = "\u{1F381}";
   return CliIcon2;
 })(CliIcon || {});
+
+// src/lib/models/services.ts
+function createCliToken(name) {
+  return name;
+}
+
+// src/lib/tokens.ts
+var ICliUserSessionService_TOKEN = createCliToken("cli-user-session-service");
+var ICliUsersStoreService_TOKEN = createCliToken("cli-users-store-service");
+var ICliGroupsStoreService_TOKEN = createCliToken("cli-groups-store-service");
+var ICliAuthService_TOKEN = createCliToken("cli-auth-service");
+var ICliCompletionProvider_TOKEN = createCliToken("cli-completion-provider");
+var ICliDragDropService_TOKEN = createCliToken("cli-drag-drop-service");
+var ICliFileTransferService_TOKEN = createCliToken("cli-file-transfer-service");
+var ICliTranslationService_TOKEN = createCliToken("cli-translation-service");
+var ICliPermissionService_TOKEN = createCliToken("cli-permission-service");
+var ICliFilePickerProvider_TOKEN = createCliToken("cli-file-picker-provider");
+var ICliHttpClient_TOKEN = createCliToken("cli-http-client");
+var ICliUserEventService_TOKEN = createCliToken("cli-user-event-service");
+var ICliAuditService_TOKEN = createCliToken("cli-audit-service");
+var ICliAuthorizationService_TOKEN = createCliToken("cli-authorization-service");
+var ICliPermissionRegistry_TOKEN = createCliToken("cli-permission-registry");
+var ICliSessionsService_TOKEN = createCliToken("cli-sessions-service");
+var ICliKeyValueStore_TOKEN = createCliToken("cli-key-value-store");
+
+// src/lib/interfaces/services.ts
+var ICliServerAuthTokenProvider_TOKEN = createCliToken("cli-server-auth-token-provider");
+var ICliServerAuthService_TOKEN = createCliToken("cli-server-auth-service");
+var ICliServerManager_TOKEN = createCliToken("cli-server-manager");
+
+// src/lib/models/server.ts
+function resolveHeaders(provider) {
+  if (!provider) return {};
+  return typeof provider === "function" ? provider() : provider;
+}
+function resolveServerHeaders(services, serverName, configHeaders) {
+  if (services) {
+    const authService = services.get(
+      ICliServerAuthService_TOKEN
+    );
+    if (authService) {
+      return authService.getHeaders(serverName, configHeaders);
+    }
+  }
+  return resolveHeaders(configHeaders);
+}
+
+// src/lib/models/options.ts
 var CliLogLevel = /* @__PURE__ */ ((CliLogLevel2) => {
   CliLogLevel2[CliLogLevel2["None"] = 0] = "None";
   CliLogLevel2[CliLogLevel2["DEBUG"] = 1] = "DEBUG";
@@ -2065,6 +2178,12 @@ var CliLogLevel = /* @__PURE__ */ ((CliLogLevel2) => {
   CliLogLevel2[CliLogLevel2["ERROR"] = 5] = "ERROR";
   return CliLogLevel2;
 })(CliLogLevel || {});
+
+// src/lib/models/permissions.ts
+var DEFAULT_FILE_PERMISSIONS = "rw-r--r--";
+var DEFAULT_DIR_PERMISSIONS = "rwxr-xr-x";
+
+// src/lib/models/index.ts
 var enums = {
   CliForegroundColor,
   CliBackgroundColor,
@@ -2072,18 +2191,115 @@ var enums = {
   CliLogLevel
 };
 
-// src/lib/interfaces/completion.ts
-var ICliCompletionProvider_TOKEN = "cli-completion-provider";
+// src/lib/interfaces/command-guards.ts
+var ICliCommandGuard_TOKEN = createCliToken("cli-command-guard");
+
+// src/lib/utils/permissions.ts
+function cliPermissionMatches(granted, required) {
+  const g = granted.trim().toLowerCase().split(":");
+  const r = required.trim().toLowerCase().split(":");
+  for (let i = 0; i < g.length; i++) {
+    if (g[i] === "*" && i === g.length - 1) return true;
+    if (i >= r.length || g[i] !== "*" && g[i] !== r[i]) return false;
+  }
+  return g.length === r.length;
+}
+function cliHasPermission(granted, required) {
+  return !!granted?.some((p) => cliPermissionMatches(p, required));
+}
+function cliMissingPermissions(granted, required) {
+  return required.filter((r) => !cliHasPermission(granted, r));
+}
+function cliMergePermissions(...lists) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const list2 of lists) {
+    for (const p of list2 ?? []) {
+      const key = p.trim();
+      if (key && !seen.has(key.toLowerCase())) {
+        seen.add(key.toLowerCase());
+        out.push(key);
+      }
+    }
+  }
+  return out;
+}
+var CliServerPermissions = {
+  /** Open a remote shell on a server (`ssh`) */
+  ShellExecute: "shell:execute"
+};
+var CliUsersPermissions = {
+  UsersRead: "users:read",
+  UsersCreate: "users:create",
+  UsersUpdate: "users:update",
+  UsersDelete: "users:delete",
+  GroupsRead: "groups:read",
+  GroupsCreate: "groups:create",
+  GroupsUpdate: "groups:update",
+  GroupsDelete: "groups:delete",
+  SessionsRead: "sessions:read",
+  SessionsRevoke: "sessions:revoke",
+  AuditRead: "audit:read",
+  AuditClear: "audit:clear"
+};
 
-// src/lib/interfaces/file-transfer.ts
-var ICliFileTransferService_TOKEN = "cli-file-transfer-service";
+// src/lib/interfaces/authorization.ts
+var CliAccessDeniedError = class _CliAccessDeniedError extends Error {
+  constructor(message = "permission denied") {
+    super(message);
+    this.code = "EACCES";
+    this.name = "CliAccessDeniedError";
+    Object.setPrototypeOf(this, _CliAccessDeniedError.prototype);
+  }
+};
+function isCliAccessDeniedError(error) {
+  return error instanceof CliAccessDeniedError || !!error && typeof error === "object" && error.name === "CliAccessDeniedError";
+}
+function authorizationService(context) {
+  try {
+    return context.services.get(ICliAuthorizationService_TOKEN);
+  } catch {
+    return void 0;
+  }
+}
+function cliAuthorize(context, permission) {
+  const auth = authorizationService(context);
+  return auth ? auth.can(permission) : true;
+}
+function cliCanAccess(context, resource, action, bypassPermissions) {
+  const auth = authorizationService(context);
+  return auth ? auth.canAccess(resource, action, bypassPermissions) : true;
+}
+function cliEvaluateAccess(principal, resource, action, bypassPermissions = []) {
+  const mode = resource.permissions;
+  const owner = resource.ownership;
+  if (!mode || mode.length < 9 || !owner) return true;
+  if (principal && (cliHasPermission(principal.permissions, "*") || bypassPermissions.some((p) => cliHasPermission(principal.permissions, p)))) {
+    return true;
+  }
+  let offset = 6;
+  if (principal) {
+    if (owner.uid === principal.name || owner.uid === principal.id) offset = 0;
+    else if (principal.groups.some((g) => g.toLowerCase() === owner.gid.toLowerCase())) offset = 3;
+  }
+  const index = offset + (action === "read" ? 0 : action === "write" ? 1 : 2);
+  return mode.charAt(index) !== "-";
+}
 
-// src/lib/interfaces/drag-drop.ts
-var ICliDragDropService_TOKEN = "cli-drag-drop-service";
+// src/lib/interfaces/event-bus.ts
+var ICliEventBus_TOKEN = createCliToken("cli-event-bus");
 
-// src/lib/interfaces/index.ts
-var ICliTranslationService_TOKEN = "cli-translation-service";
-var ICliPermissionService_TOKEN = "cli-permission-service";
+// src/lib/interfaces/http-client.ts
+var CliHttpError = class _CliHttpError extends Error {
+  constructor(message, status, statusText = "", body) {
+    super(message);
+    this.status = status;
+    this.statusText = statusText;
+    this.body = body;
+    this.name = "CliHttpError";
+    Object.setPrototypeOf(this, _CliHttpError.prototype);
+  }
+};
 
 // src/lib/constants/index.ts
 var DefaultLibraryAuthor = {
@@ -2099,6 +2315,57 @@ var delay = (ms) => {
   return new Promise((resolve) => setTimeout(resolve, ms));
 };
 
+// src/lib/utils/shell-words.ts
+function splitShellWords(text) {
+  const words = [];
+  let current = "";
+  let inWord = false;
+  for (let i = 0; i < text.length; i++) {
+    const ch = text[i];
+    if (ch === "\\" && i + 1 < text.length) {
+      current += text[++i];
+      inWord = true;
+    } else if (ch === "'" && text.indexOf("'", i + 1) !== -1) {
+      const end = text.indexOf("'", i + 1);
+      current += text.slice(i + 1, end);
+      inWord = true;
+      i = end;
+    } else if (ch === '"' && closingDoubleQuote(text, i) !== -1) {
+      const end = closingDoubleQuote(text, i);
+      current += unescapeDoubleQuoted(text.slice(i + 1, end));
+      inWord = true;
+      i = end;
+    } else if (/\s/.test(ch)) {
+      if (inWord) words.push(current);
+      current = "";
+      inWord = false;
+    } else {
+      current += ch;
+      inWord = true;
+    }
+  }
+  if (inWord) words.push(current);
+  return words;
+}
+function joinShellWords(text) {
+  return splitShellWords(text).join(" ");
+}
+function quoteShellWord(value) {
+  if (value !== "" && !/[\s"'\\$`|&;<>(){}*?[\]#~]/.test(value)) return value;
+  if (!value.includes("'")) return `'${value}'`;
+  return `"${value.replace(/(["\\$`])/g, "\\$1")}"`;
+}
+function closingDoubleQuote(text, start) {
+  for (let i = start + 1; i < text.length; i++) {
+    if (text[i] === "\\") i++;
+    else if (text[i] === '"') return i;
+  }
+  return -1;
+}
+function unescapeDoubleQuoted(text) {
+  return text.replace(/\\(["\\$`])/g, "$1");
+}
+
 // src/lib/utils/object-describer.ts
 var ObjectDescriber = class {
   static describe(obj, options) {
@@ -2157,16 +2424,17 @@ var ObjectDescriber = class {
               argsToCallF.push(command.args[arg]);
             }
           }
-          if (supportsDynamicArgs && command.value) {
+          const value = command.value === void 0 ? void 0 : joinShellWords(command.value);
+          if (supportsDynamicArgs && value) {
             const delimiter = command.args["delimiter"] || ",";
-            argsToCallF.push(...command.value.split(delimiter));
+            argsToCallF.push(...value.split(delimiter));
           }
           if (debug) {
             context.writer.writeln(
               "Arguments after processing: " + JSON.stringify(argsToCallF)
             );
           }
-          const result = supportsDynamicArgs && args.length === 0 ? funcValue(...argsToCallF) : funcValue(command.value, ...argsToCallF);
+          const result = supportsDynamicArgs && args.length === 0 ? funcValue(...argsToCallF) : funcValue(value, ...argsToCallF);
           context.writer.write(
             context.writer.wrapInColor(
               "Result: ",
@@ -2245,6 +2513,19 @@ function getConfigValue(state, category, key, defaultValue) {
   }
   return defaultValue;
 }
+function getPluginConfigValue(context, category, key, defaultValue) {
+  try {
+    const storeManager = context.services.getRequired(
+      "cli-state-store-manager"
+    );
+    if (!storeManager) return defaultValue;
+    const store = storeManager.getStateStore(CLI_CONFIGURE_STORE_NAME);
+    if (!store) return defaultValue;
+    return getConfigValue(store, category, key, defaultValue);
+  } catch {
+    return defaultValue;
+  }
+}
 function resolveConfigurationCategories(registry) {
   const categories = /* @__PURE__ */ new Map();
   for (const processor of registry.processors) {
@@ -2266,7 +2547,8 @@ function resolveConfigurationCategories(registry) {
 
 // src/lib/utils/terminal-utils.ts
 var clearTerminalLine = (terminal, contentLength) => {
-  const lines = Math.max(1, Math.ceil(contentLength / terminal.cols));
+  if (contentLength <= 0) return;
+  const lines = Math.ceil(contentLength / terminal.cols);
   for (let i = 0; i < lines; i++) {
     terminal.write("\x1B[2K");
     if (i < lines - 1) {
@@ -2297,10 +2579,15 @@ function satisfiesVersionRange(installed, range) {
   return semver.satisfies(coerced, range);
 }
 
+// src/lib/version.ts
+var LIBRARY_VERSION = "2.0.0-rc.1";
+var API_VERSION = 2;
+
 // src/lib/utils/server-version-negotiator.ts
+var VERSIONS_ENDPOINT = "/api/qcli/versions";
 var ServerVersionNegotiator = class {
   static {
-    this.CLIENT_SUPPORTED_VERSIONS = [2];
+    this.CLIENT_SUPPORTED_VERSIONS = [API_VERSION];
   }
   /**
    * Given a server's version info, pick the highest mutually compatible version.
@@ -2317,9 +2604,18 @@ var ServerVersionNegotiator = class {
    * Returns the negotiated API version and the base path for all subsequent calls,
    * or null if the server is unreachable or incompatible.
    */
-  static async discover(baseUrl) {
+  static async discover(baseUrl, headers, options) {
+    let response;
+    try {
+      const resolved = resolveHeaders(headers);
+      response = await fetch(`${baseUrl}${VERSIONS_ENDPOINT}`, {
+        headers: Object.keys(resolved).length > 0 ? resolved : void 0
+      });
+    } catch (e) {
+      if (options?.rethrowNetworkErrors) throw e;
+      return null;
+    }
     try {
-      const response = await fetch(`${baseUrl}/api/qcli/versions`);
       if (!response.ok) return null;
       const info = await response.json();
       const version = this.negotiate(info);
@@ -2334,9 +2630,36 @@ var ServerVersionNegotiator = class {
   }
 };
 
+// src/lib/utils/websocket-auth.ts
+function buildAuthenticatedWebSocketUrl(wsUrl, headers) {
+  const resolved = resolveHeaders(headers);
+  if (Object.keys(resolved).length === 0) {
+    return wsUrl;
+  }
+  const separator = wsUrl.includes("?") ? "&" : "?";
+  const params = Object.entries(resolved).map(
+    ([key, value]) => `_header_${encodeURIComponent(key)}=${encodeURIComponent(value)}`
+  ).join("&");
+  return `${wsUrl}${separator}${params}`;
+}
+async function resolveServerWebSocketUrl(services, serverName, wsUrl, configHeaders) {
+  const authService = services?.get(ICliServerAuthService_TOKEN);
+  const params = await authService?.getWebSocketParams?.(serverName);
+  if (params) {
+    return appendQueryParams(wsUrl, params);
+  }
+  return buildAuthenticatedWebSocketUrl(wsUrl, () => resolveServerHeaders(services, serverName, configHeaders));
+}
+function appendQueryParams(url, params) {
+  const entries = Object.entries(params);
+  if (!entries.length) return url;
+  const query = entries.map(([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(v)}`).join("&");
+  return `${url}${url.includes("?") ? "&" : "?"}${query}`;
+}
+
 // src/lib/utils/panel-theme-sync.ts
 function hexToRgb(hex) {
-  const m = /^#?([0-9A-Fa-f]{6})$/.exec(hex);
+  const m = /^#?([0-9A-Fa-f]{6})([0-9A-Fa-f]{2})?$/.exec(hex);
   if (!m) return null;
   const n = parseInt(m[1], 16);
   return { r: n >> 16 & 255, g: n >> 8 & 255, b: n & 255 };
@@ -2354,10 +2677,13 @@ function hexToRgba(hex, alpha) {
   if (!rgb) return hex;
   return `rgba(${rgb.r}, ${rgb.g}, ${rgb.b}, ${alpha})`;
 }
+var DEFAULT_BG = "#111827";
+var DEFAULT_FG = "#ffffff";
+var DEFAULT_ACCENT = "#818cf8";
 function derivePanelThemeStyles(theme) {
-  const bg = theme.background || "#111827";
-  const fg = theme.foreground || "#ffffff";
-  const accent = theme.cyan || theme.blue || theme.magenta || "#818cf8";
+  const bg = theme.background || DEFAULT_BG;
+  const fg = theme.foreground || DEFAULT_FG;
+  const accent = theme.cyan || theme.blue || theme.magenta || DEFAULT_ACCENT;
   return {
     "--cli-panel-bg": bg,
     "--cli-panel-header-bg": shiftColor(bg, 12),
@@ -2391,9 +2717,233 @@ function savePanelPosition(position) {
 }
 function nextPanelPosition(current) {
   const index = POSITION_CYCLE.indexOf(current);
+  if (index === -1) {
+    return POSITION_CYCLE[0];
+  }
   return POSITION_CYCLE[(index + 1) % POSITION_CYCLE.length];
 }
 
+// src/lib/utils/ansi-utils.ts
+var ANSI_RE = /\x1b\[[0-9;]*m/g;
+function stripAnsi(text) {
+  return text.replace(ANSI_RE, "");
+}
+function visibleLength(text) {
+  const stripped = stripAnsi(text);
+  let width = 0;
+  for (const ch of stripped) {
+    const cp = ch.codePointAt(0);
+    if (cp >= 65024 && cp <= 65039) continue;
+    if (cp === 8205) continue;
+    if (cp >= 768 && cp <= 879) continue;
+    width += isWideCharacter(cp) ? 2 : 1;
+  }
+  return width;
+}
+function truncateToWidth(text, width, ellipsis = "\u2026") {
+  if (width < 1) return "";
+  if (visibleLength(text) <= width) return text;
+  const room = Math.max(0, width - visibleLength(ellipsis));
+  let out = "";
+  let used = 0;
+  let i = 0;
+  while (i < text.length) {
+    if (text[i] === "\x1B") {
+      const m = /^\x1b\[[0-9;]*m/.exec(text.slice(i));
+      if (m) {
+        out += m[0];
+        i += m[0].length;
+        continue;
+      }
+    }
+    const ch = String.fromCodePoint(text.codePointAt(i));
+    const w = visibleLength(ch);
+    if (used + w > room) break;
+    out += ch;
+    used += w;
+    i += ch.length;
+  }
+  return `${out}${ellipsis}\x1B[0m`;
+}
+function isWideCharacter(cp) {
+  if (cp >= 126976) return true;
+  if (cp >= 9728 && cp <= 10175) return true;
+  if (cp >= 9984 && cp <= 10175) return true;
+  if (cp >= 19968 && cp <= 40959) return true;
+  if (cp >= 63744 && cp <= 64255) return true;
+  if (cp >= 65281 && cp <= 65376) return true;
+  if (cp >= 65504 && cp <= 65510) return true;
+  if (cp >= 11904 && cp <= 12255) return true;
+  if (cp >= 12288 && cp <= 12543) return true;
+  if (cp >= 12800 && cp <= 13055) return true;
+  if (cp >= 13056 && cp <= 13311) return true;
+  if (cp >= 127232 && cp <= 127487) return true;
+  if (cp >= 8960 && cp <= 9215) return true;
+  return false;
+}
+
+// src/lib/utils/access-guards.ts
+var list = (value) => Array.isArray(value) ? value.filter((v) => typeof v === "string" && v.trim()) : [];
+var authorization = (context) => {
+  try {
+    return context.services.get(ICliAuthorizationService_TOKEN);
+  } catch {
+    return void 0;
+  }
+};
+function chain(processor) {
+  const out = [];
+  let current = processor;
+  while (current && out.length < 32 && !out.includes(current)) {
+    out.push(current);
+    current = current.parent;
+  }
+  return out;
+}
+var requiredPermissionsOf = (p) => [...new Set(chain(p).flatMap((x) => list(x.metadata?.requiredPermissions)))];
+var requiredGroupLevels = (p) => chain(p).map((x) => list(x.metadata?.requiredGroups)).filter((g) => g.length > 0);
+var needsAuth = (p) => chain(p).some((x) => x.metadata?.requireAuth === true) || requiredGroupLevels(p).length > 0 || requiredPermissionsOf(p).length > 0;
+var cliRequireAuthGuard = {
+  name: "access:require-auth",
+  priority: -100,
+  appliesTo: (processor, _command, context) => needsAuth(processor) && !!authorization(context),
+  canActivate: (_command, processor, context) => authorization(context).getPrincipal() ? true : `${processor.command}: login required`
+};
+var cliRequiredGroupsGuard = {
+  name: "access:required-groups",
+  priority: -90,
+  appliesTo: (processor, _command, context) => requiredGroupLevels(processor).length > 0 && !!authorization(context),
+  canActivate: (_command, processor, context) => {
+    const auth = authorization(context);
+    const principal = auth.getPrincipal();
+    if (!principal) return `${processor.command}: login required`;
+    if (auth.can("*")) return true;
+    for (const required of requiredGroupLevels(processor)) {
+      const member = required.some((g) => principal.groups.some((pg) => pg.toLowerCase() === g.toLowerCase()));
+      if (!member) return `${processor.command}: permission denied (requires group: ${required.join(" or ")})`;
+    }
+    return true;
+  }
+};
+var cliRequiredPermissionsGuard = {
+  name: "access:required-permissions",
+  priority: -80,
+  appliesTo: (processor, _command, context) => requiredPermissionsOf(processor).length > 0 && !!authorization(context),
+  canActivate: (_command, processor, context) => {
+    const principal = authorization(context).getPrincipal();
+    if (!principal) return `${processor.command}: login required`;
+    const missing = cliMissingPermissions(principal.permissions, requiredPermissionsOf(processor));
+    return missing.length === 0 ? true : `${processor.command}: permission denied (requires ${missing.join(", ")})`;
+  }
+};
+var cliAccessMetadataGuards = [
+  cliRequireAuthGuard,
+  cliRequiredGroupsGuard,
+  cliRequiredPermissionsGuard
+];
+
+// src/lib/utils/server-target.ts
+function cliDefaultServer(context) {
+  const servers = context.options?.servers ?? [];
+  const manager = context.services?.get(ICliServerManager_TOKEN);
+  const preferred = manager?.preferredServer?.();
+  return (preferred ? servers.find((s) => s.name === preferred) : void 0) ?? servers[0];
+}
+
+// src/lib/utils/help-format.ts
+function writeColumns(context, rows, formatLeft, formatRight) {
+  const width = Math.max(...rows.map(([left]) => left.length)) + 2;
+  for (const [left, right] of rows) {
+    context.writer.writeln(
+      `  ${formatLeft(left.padEnd(width))}${formatRight(right)}`
+    );
+  }
+}
+function writeUsage(context, rows) {
+  const { writer, translator } = context;
+  writer.writeln(`\u{1F4CB} ${translator.t("cli.common.usage", "Usage:")}`);
+  writeColumns(
+    context,
+    rows,
+    (cmd) => writer.wrapInColor(cmd, "\x1B[36m" /* Cyan */),
+    (text) => text
+  );
+}
+function writeExamples(context, rows) {
+  const { writer, translator } = context;
+  writer.writeln(`\u{1F4DD} ${translator.t("cli.common.examples", "Examples:")}`);
+  writeColumns(
+    context,
+    rows,
+    (cmd) => cmd,
+    (comment) => writer.wrapInColor(`# ${comment}`, "\x1B[32m" /* Green */)
+  );
+}
+function writeWrapped(context, text, indent = 0) {
+  const cols = context.terminal?.cols ?? 80;
+  const width = Math.max(20, Math.min(cols - 1, 100) - indent);
+  const pad = " ".repeat(indent);
+  let line = "";
+  for (const word of text.split(/\s+/).filter(Boolean)) {
+    if (line && visibleLength2(line) + 1 + visibleLength2(word) > width) {
+      context.writer.writeln(pad + line);
+      line = word;
+    } else {
+      line = line ? `${line} ${word}` : word;
+    }
+  }
+  if (line) context.writer.writeln(pad + line);
+}
+function visibleLength2(text) {
+  return text.replace(/\x1b\[[0-9;]*m/g, "").length;
+}
+function writeHint(context, command, action) {
+  const { writer, translator } = context;
+  const text = `\u{1F4A1} ${translator.t("cli.common.use_hint", "Use {command} {action}", {
+    command: writer.wrapInColor(command, "\x1B[36m" /* Cyan */),
+    action
+  })}`;
+  const width = Math.min((context.terminal?.cols ?? 80) - 1, 100) - 3;
+  if (visibleLength2(text) + 1 <= width) {
+    writer.writeInfo(text);
+    return;
+  }
+  const lines = [];
+  let line = "";
+  for (const word of text.split(" ")) {
+    if (line && visibleLength2(line) + 1 + visibleLength2(word) > width) {
+      lines.push(line);
+      line = word;
+    } else {
+      line = line ? `${line} ${word}` : word;
+    }
+  }
+  if (line) lines.push(line);
+  writer.writeInfo(lines[0]);
+  for (const rest of lines.slice(1)) {
+    writer.writeln(`   ${rest}`);
+  }
+}
+
+// src/lib/utils/raw-argument.ts
+function unquoteRawArgument(text) {
+  const value = text.trim();
+  if (value.length < 2) return value;
+  const quote = value[0];
+  if (quote === "'") {
+    return value.indexOf("'", 1) === value.length - 1 ? value.slice(1, -1) : value;
+  }
+  if (quote === '"') {
+    for (let i = 1; i < value.length; i++) {
+      if (value[i] === "\\") i++;
+      else if (value[i] === '"') {
+        return i === value.length - 1 ? value.slice(1, -1).replace(/\\(["\\$`])/g, "$1") : value;
+      }
+    }
+  }
+  return value;
+}
+
 // src/lib/utils/index.ts
 var getParameterValue = (p, args) => {
   if (args[p.name] !== void 0) {
@@ -2407,18 +2957,46 @@ var formatJson = (json) => {
   return colorizeJson(identedJson.split("\n").join("\r\n"));
 };
 var colorizeJson = (jsonString) => {
-  return jsonString.replace(/"([^"]+)":/g, '\x1B[33m"$1":\x1B[0m').replace(/: "([^"]*)"/g, ': \x1B[32m"$1"\x1B[0m').replace(/: (\d+)/g, ": \x1B[34m$1\x1B[0m").replace(/: (true|false)/g, ": \x1B[35m$1\x1B[0m").replace(/: (null)/g, ": \x1B[36m$1\x1B[0m");
+  const RST = "\x1B[0m";
+  const CYN = "\x1B[36m";
+  const GRN = "\x1B[32m";
+  const YLW = "\x1B[33m";
+  const GRY = "\x1B[90m";
+  const tokenRe = /("(?:[^"\\]|\\.)*"?)(\s*:)?|(\btrue\b|\bfalse\b|\bnull\b)|(-?\d+(?:\.\d+)?(?:[eE][+-]?\d+)?)|([{}[\],])/g;
+  let result = "";
+  let lastIndex = 0;
+  let m;
+  while ((m = tokenRe.exec(jsonString)) !== null) {
+    if (m.index > lastIndex) {
+      result += jsonString.slice(lastIndex, m.index);
+    }
+    if (m[1] !== void 0) {
+      if (m[2] !== void 0) {
+        result += CYN + m[1] + RST + m[2];
+      } else {
+        result += GRN + m[1] + RST;
+      }
+    } else if (m[3] !== void 0) {
+      result += YLW + m[3] + RST;
+    } else if (m[4] !== void 0) {
+      result += YLW + m[4] + RST;
+    } else if (m[5] !== void 0) {
+      result += GRY + m[5] + RST;
+    }
+    lastIndex = m.index + m[0].length;
+  }
+  if (lastIndex < jsonString.length) {
+    result += jsonString.slice(lastIndex);
+  }
+  return result;
 };
 var toQueryString = (params) => {
   const searchParams = new URLSearchParams();
-  for (const key in params) {
-    if (params.hasOwnProperty(key)) {
-      const value = params[key];
-      if (Array.isArray(value)) {
-        value.forEach((v) => searchParams.append(key, v.toString()));
-      } else if (value !== null && value !== void 0) {
-        searchParams.append(key, value.toString());
-      }
+  for (const [key, value] of Object.entries(params)) {
+    if (Array.isArray(value)) {
+      value.forEach((v) => searchParams.append(key, v.toString()));
+    } else if (value !== null && value !== void 0) {
+      searchParams.append(key, value.toString());
     }
   }
   return searchParams.toString();
@@ -2455,19 +3033,19 @@ var utils = {
   ObjectDescriber,
   delay,
   getConfigValue,
+  getPluginConfigValue,
   resolveConfigurationCategories,
   CLI_CONFIGURE_STORE_NAME
 };
 
-// src/lib/version.ts
-var LIBRARY_VERSION = "2.0.0-beta.8";
-var API_VERSION = 2;
-
 // src/lib/modules/cli-module-registry.ts
 var CliModuleRegistry = class {
   constructor() {
     this.modules = /* @__PURE__ */ new Map();
     this.bootHandlers = [];
+    this.unregisterHandlers = [];
+    /** Registrations whose boot handlers are still running. */
+    this.inFlight = /* @__PURE__ */ new Set();
   }
   /**
    * Register a handler that is called whenever a new module is registered.
@@ -2476,21 +3054,80 @@ var CliModuleRegistry = class {
     this.bootHandlers.push(handler);
   }
   /**
-   * Register a module and notify all boot handlers.
-   * Modules that do not meet the required API version are silently skipped.
+   * Register a web plugin module and notify all boot handlers.
+   * Modules whose `apiVersion` is below the runtime's `API_VERSION` are
+   * skipped with a warning — this ensures only compatible frontend plugins load.
    */
-  async register(module) {
+  register(module) {
+    const registration = this.registerInternal(module);
+    this.inFlight.add(registration);
+    const done = () => this.inFlight.delete(registration);
+    registration.then(done, done);
+    return registration;
+  }
+  /**
+   * Resolve once every registration in progress (including ones started
+   * meanwhile, e.g. a plugin loading another) has finished booting.
+   */
+  async whenIdle() {
+    while (this.inFlight.size > 0) {
+      await Promise.allSettled([...this.inFlight]);
+    }
+  }
+  async registerInternal(module) {
     const modApiVersion = module.apiVersion;
     if (typeof modApiVersion !== "number" || modApiVersion < API_VERSION) {
-      console.warn(
-        `[CLI] Plugin "${module.name}" targets API version ${modApiVersion ?? "unknown"}, but this runtime requires API version ${API_VERSION}. Skipping.`
-      );
+      const msg = `[CLI] Plugin "${module.name}" targets API version ${modApiVersion ?? "unknown"}, but this runtime requires API version ${API_VERSION}. Skipping.`;
+      if (this.onWarn) {
+        this.onWarn(msg);
+      } else {
+        console.warn(msg);
+      }
       return;
     }
     this.modules.set(module.name, module);
     for (const handler of this.bootHandlers) {
-      await handler(module);
+      try {
+        await handler(module);
+      } catch (e) {
+        const msg = `[CLI] Boot handler failed for module "${module.name}": ${e instanceof Error ? e.message : e}`;
+        if (this.onWarn) {
+          this.onWarn(msg);
+        } else {
+          console.warn(msg);
+        }
+      }
+    }
+  }
+  /**
+   * Register a handler that is called when a module is unregistered,
+   * e.g. so its processors can be removed.
+   */
+  onModuleUnregister(handler) {
+    this.unregisterHandlers.push(handler);
+  }
+  /**
+   * Unregister a module and notify all unregister handlers. A module
+   * registered again afterwards (e.g. a newer version) boots again.
+   * Returns the removed module, or `undefined` when it was not registered.
+   */
+  unregister(name) {
+    const module = this.modules.get(name);
+    if (!module) return void 0;
+    this.modules.delete(name);
+    for (const handler of this.unregisterHandlers) {
+      try {
+        handler(module);
+      } catch (e) {
+        const msg = `[CLI] Unregister handler failed for module "${name}": ${e instanceof Error ? e.message : e}`;
+        if (this.onWarn) {
+          this.onWarn(msg);
+        } else {
+          console.warn(msg);
+        }
+      }
     }
+    return module;
   }
   /**
    * Get a module by name.
@@ -2530,8 +3167,7 @@ var initializeBrowserEnvironment = ({
     ...constants,
     ...utils,
     ...enums,
-    bootCliModule,
-    bootUmdModule
+    bootCliModule
   };
   Object.defineProperty(window, "ngCore", {
     configurable: true,
@@ -2549,21 +3185,23 @@ var bootCliModule = async (module) => {
     await window.__cliModuleRegistry.register(module);
   }
 };
-var bootUmdModule = async (module) => {
-  await bootCliModule(module);
-};
 
 // src/lib/types/CancellablePromise.ts
+var CANCELLATION_ERROR_MESSAGE = "Promise cancelled";
 var CancellablePromise = class {
   constructor(executor) {
     this.executor = executor;
     this.hasCancelled = false;
     this.abortController = new AbortController();
   }
+  /**
+   * Run the executor and return a promise for its result.
+   * If `cancel()` has been called, the promise rejects immediately.
+   */
   execute() {
     return new Promise((resolve, reject) => {
       this.abortController.signal.onabort = () => {
-        reject(new Error("Promise cancelled"));
+        reject(new Error(CANCELLATION_ERROR_MESSAGE));
       };
       this.executor(
         (value) => {
@@ -2579,13 +3217,17 @@ var CancellablePromise = class {
       );
     });
   }
+  /**
+   * Cancel the promise. The executing promise rejects with
+   * `Error('Promise cancelled')` and subsequent resolve/reject calls are ignored.
+   */
   cancel() {
     this.hasCancelled = true;
     this.abortController.abort();
   }
 };
 
-// src/lib/themes/index.ts
+// src/lib/themes/default-themes.ts
 var DefaultThemes = {
   default: {
     background: "#070b14",
@@ -3221,6 +3863,8 @@ var DefaultThemes = {
   }
 };
 DefaultThemes.yellow = DefaultThemes.highContrastLight;
+
+// src/lib/themes/default-theme-infos.ts
 var DefaultThemeInfos = {
   default: {
     theme: DefaultThemes.default,
@@ -3398,12 +4042,6 @@ var DefaultThemeInfos = {
   }
 };
 
-// src/lib/tokens.ts
-var ICliUserSessionService_TOKEN = "cli-user-session-service";
-var ICliUsersStoreService_TOKEN = "cli-users-store-service";
-var ICliGroupsStoreService_TOKEN = "cli-groups-store-service";
-var ICliAuthService_TOKEN = "cli-auth-service";
-
 // src/lib/worker/create-worker-service.ts
 function createWorkerService(handlers) {
   const abortController = new AbortController();
@@ -3496,9 +4134,17 @@ var BrowserFileTransferService = class {
     const filename = path.split("/").pop() || "download";
     this.downloadToBrowser(filename, content);
   }
+  /**
+   * Not supported in browser — always returns an empty array.
+   * Use `@qodalis/cli-files` for directory listing.
+   */
   async listFiles(_path) {
     return [];
   }
+  /**
+   * Not supported in browser — always returns `false`.
+   * Use `@qodalis/cli-files` for file existence checks.
+   */
   async exists(_path) {
     return false;
   }
@@ -3544,37 +4190,69 @@ var BrowserFileTransferService = class {
 
 exports.API_VERSION = API_VERSION;
 exports.BrowserFileTransferService = BrowserFileTransferService;
+exports.CANCELLATION_ERROR_MESSAGE = CANCELLATION_ERROR_MESSAGE;
 exports.CLI_CONFIGURE_STORE_NAME = CLI_CONFIGURE_STORE_NAME;
 exports.CancellablePromise = CancellablePromise;
+exports.CliAccessDeniedError = CliAccessDeniedError;
 exports.CliBackgroundColor = CliBackgroundColor;
 exports.CliForegroundColor = CliForegroundColor;
+exports.CliHttpError = CliHttpError;
 exports.CliIcon = CliIcon;
 exports.CliLogLevel = CliLogLevel;
 exports.CliModuleRegistry = CliModuleRegistry;
+exports.CliServerPermissions = CliServerPermissions;
+exports.CliUsersPermissions = CliUsersPermissions;
 exports.DEFAULT_DIR_PERMISSIONS = DEFAULT_DIR_PERMISSIONS;
 exports.DEFAULT_FILE_PERMISSIONS = DEFAULT_FILE_PERMISSIONS;
 exports.DefaultLibraryAuthor = DefaultLibraryAuthor;
 exports.DefaultThemeInfos = DefaultThemeInfos;
 exports.DefaultThemes = DefaultThemes;
+exports.ICliAuditService_TOKEN = ICliAuditService_TOKEN;
 exports.ICliAuthService_TOKEN = ICliAuthService_TOKEN;
+exports.ICliAuthorizationService_TOKEN = ICliAuthorizationService_TOKEN;
+exports.ICliCommandGuard_TOKEN = ICliCommandGuard_TOKEN;
 exports.ICliCompletionProvider_TOKEN = ICliCompletionProvider_TOKEN;
 exports.ICliDragDropService_TOKEN = ICliDragDropService_TOKEN;
+exports.ICliEventBus_TOKEN = ICliEventBus_TOKEN;
+exports.ICliFilePickerProvider_TOKEN = ICliFilePickerProvider_TOKEN;
 exports.ICliFileTransferService_TOKEN = ICliFileTransferService_TOKEN;
 exports.ICliGroupsStoreService_TOKEN = ICliGroupsStoreService_TOKEN;
+exports.ICliHttpClient_TOKEN = ICliHttpClient_TOKEN;
+exports.ICliKeyValueStore_TOKEN = ICliKeyValueStore_TOKEN;
+exports.ICliPermissionRegistry_TOKEN = ICliPermissionRegistry_TOKEN;
 exports.ICliPermissionService_TOKEN = ICliPermissionService_TOKEN;
+exports.ICliServerAuthService_TOKEN = ICliServerAuthService_TOKEN;
+exports.ICliServerAuthTokenProvider_TOKEN = ICliServerAuthTokenProvider_TOKEN;
+exports.ICliServerManager_TOKEN = ICliServerManager_TOKEN;
+exports.ICliSessionsService_TOKEN = ICliSessionsService_TOKEN;
 exports.ICliTranslationService_TOKEN = ICliTranslationService_TOKEN;
+exports.ICliUserEventService_TOKEN = ICliUserEventService_TOKEN;
 exports.ICliUserSessionService_TOKEN = ICliUserSessionService_TOKEN;
 exports.ICliUsersStoreService_TOKEN = ICliUsersStoreService_TOKEN;
 exports.LIBRARY_VERSION = LIBRARY_VERSION;
 exports.ObjectDescriber = ObjectDescriber;
 exports.ServerVersionNegotiator = ServerVersionNegotiator;
+exports.appendQueryParams = appendQueryParams;
 exports.bootCliModule = bootCliModule;
-exports.bootUmdModule = bootUmdModule;
+exports.buildAuthenticatedWebSocketUrl = buildAuthenticatedWebSocketUrl;
 exports.clearTerminalLine = clearTerminalLine;
+exports.cliAccessMetadataGuards = cliAccessMetadataGuards;
+exports.cliAuthorize = cliAuthorize;
+exports.cliCanAccess = cliCanAccess;
+exports.cliDefaultServer = cliDefaultServer;
+exports.cliEvaluateAccess = cliEvaluateAccess;
+exports.cliHasPermission = cliHasPermission;
+exports.cliMergePermissions = cliMergePermissions;
+exports.cliMissingPermissions = cliMissingPermissions;
+exports.cliPermissionMatches = cliPermissionMatches;
+exports.cliRequireAuthGuard = cliRequireAuthGuard;
+exports.cliRequiredGroupsGuard = cliRequiredGroupsGuard;
+exports.cliRequiredPermissionsGuard = cliRequiredPermissionsGuard;
 exports.colorFirstWord = colorFirstWord;
 exports.colorizeJson = colorizeJson;
 exports.compareVersions = compareVersions;
 exports.constants = constants;
+exports.createCliToken = createCliToken;
 exports.createWorkerService = createWorkerService;
 exports.delay = delay;
 exports.derivePanelThemeStyles = derivePanelThemeStyles;
@@ -3582,16 +4260,32 @@ exports.enums = enums;
 exports.formatJson = formatJson;
 exports.getConfigValue = getConfigValue;
 exports.getParameterValue = getParameterValue;
+exports.getPluginConfigValue = getPluginConfigValue;
 exports.getRightOfWord = getRightOfWord;
 exports.highlightTextWithBg = highlightTextWithBg;
 exports.initializeBrowserEnvironment = initializeBrowserEnvironment;
+exports.isCliAccessDeniedError = isCliAccessDeniedError;
+exports.joinShellWords = joinShellWords;
 exports.loadPanelPosition = loadPanelPosition;
 exports.nextPanelPosition = nextPanelPosition;
+exports.quoteShellWord = quoteShellWord;
 exports.resolveConfigurationCategories = resolveConfigurationCategories;
+exports.resolveHeaders = resolveHeaders;
+exports.resolveServerHeaders = resolveServerHeaders;
+exports.resolveServerWebSocketUrl = resolveServerWebSocketUrl;
 exports.satisfiesMinVersion = satisfiesMinVersion;
 exports.satisfiesVersionRange = satisfiesVersionRange;
 exports.savePanelPosition = savePanelPosition;
+exports.splitShellWords = splitShellWords;
+exports.stripAnsi = stripAnsi;
 exports.toQueryString = toQueryString;
+exports.truncateToWidth = truncateToWidth;
+exports.unquoteRawArgument = unquoteRawArgument;
 exports.utils = utils;
+exports.visibleLength = visibleLength;
+exports.writeExamples = writeExamples;
+exports.writeHint = writeHint;
+exports.writeUsage = writeUsage;
+exports.writeWrapped = writeWrapped;
 //# sourceMappingURL=public-api.js.map
 //# sourceMappingURL=public-api.js.map