@snowyroad/braid 0.96.7 → 0.97.0

package/README.md

@@ -231,7 +231,7 @@ descendant process and cannot be shed.
   dirs** — `~/.ssh`, `~/.aws`, `~/.gnupg`, `~/.kube/config`, and the bridge's own
   credential store (`~/.braid`).
 - **Network:** a curated allow-list (provider API hosts, package registries, and
-  the major source-code hosts) so normal work keeps working; everything else is
+  read-only source-content hosts such as codeload.github.com) so normal work keeps working; everything else is
   blocked. Operator-extensible.
 - **Fail-closed:** in **full** tool mode the bridge REFUSES to start if the OS
   sandbox facility is unavailable, and tells you how to fix it. In read-and-reply
@@ -243,9 +243,11 @@ descendant process and cannot be shed.
   or the `BRAID_SCOPE_ALLOW_WRITE` / `BRAID_SCOPE_ALLOW_READ` / `BRAID_SCOPE_ALLOW_DOMAINS`
   env vars (see below). Credential directories (`~/.ssh`, `~/.aws`, `~/.config/gh`,
   and the rest of the protected inventory) are reserved and CANNOT be granted: a
-  grant that lands inside one is refused at startup with a SCOPE ERROR. A tool CLI
-  that only needs network still works inside the jail (`github.com` is in the default
-  allow-list); grant a project data directory, never a credential store.
+  grant that lands inside one is refused at startup with a SCOPE ERROR. Code hosts
+  (github.com, gitlab.com, bitbucket.org) are NOT reachable from inside the jail:
+  authenticated git goes through the bridge's git tools. Grant a project data directory, never a credential store.
+
+**Code hosts are not reachable from the jail.** `github.com`, `api.github.com`, `gitlab.com` and `bitbucket.org` are a reserved set: an `--allow-domain` or `scope.network.allowedDomains` entry that reaches them is refused at startup. To accept that risk for one agent (for example, `git+https` dependencies during installs) run `braid scope allow-code-hosts <agent>`; the startup banner then carries a warning. The agent's own `git` runs with credential helpers disabled, so it cannot read your `gh` or keychain credentials.
 
 - **Unix socket access (Linux):** on Linux, seccomp-bpf cannot filter Unix sockets
   by path. The default `compat` IPC profile allows all pathname sockets. The `strict`

package/dist/{chunk-CLFXLKAW.js → chunk-2OHYN3KD.js}

@@ -400,7 +400,7 @@ var InviteExpiredError = class extends Error {
   }
 };
 async function redeemInvite(relayHttpUrl, code) {
-  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-QDQGGG2I.js");
+  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-7LMCYNHB.js");
   const r = await boundedJsonFetch2(`${relayHttpUrl.replace(/\/$/, "")}/invites/redeem`, {
     method: "POST",
     headers: { "content-type": "application/json" },
@@ -492,7 +492,7 @@ function validateReplacementToken(newToken, currentToken, nowMs = Date.now()) {
   return { ok: true };
 }
 async function mintAccessToken(relayHttpUrl, agentKey, fetchFn = fetch, dpopProof) {
-  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-QDQGGG2I.js");
+  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-7LMCYNHB.js");
   const r = await boundedJsonFetch2(`${relayHttpUrl.replace(/\/$/, "")}/agents/token`, {
     method: "POST",
     headers: {
@@ -812,6 +812,7 @@ function parseScope(v) {
     if (allowedDomains) net.allowedDomains = allowedDomains;
     const deniedDomains = strArr(n.deniedDomains);
     if (deniedDomains) net.deniedDomains = deniedDomains;
+    if (typeof n.allowCodeHosts === "boolean") net.allowCodeHosts = n.allowCodeHosts;
     if (Object.keys(net).length > 0) out.network = net;
   }
   return Object.keys(out).length > 0 ? out : void 0;
@@ -1049,6 +1050,13 @@ function pinEndpoint(dir, agentName, pin) {
   agent.pinnedEndpoints = next;
   saveAgent(dir, agent);
 }
+function setScopeAllowCodeHosts(dir, agentName, value) {
+  const entry = loadAgent(dir, agentName);
+  const agent = entry.agent;
+  const network = { ...agent.scope?.network ?? {}, allowCodeHosts: value };
+  agent.scope = { ...agent.scope ?? {}, network };
+  saveAgent(dir, agent);
+}
 function updateAgentWorkspace(dir, agentName, info) {
   try {
     const entry = loadAgent(dir, agentName);
@@ -2832,13 +2840,44 @@ var DEFAULT_ALLOWED_DOMAINS = [
   // Crates.io
   "crates.io",
   "static.crates.io",
-  // Source hosts
+  // Source hosts: READ-ONLY content delivery only. The code-host write paths
+  // (github.com, api.github.com, gitlab.com, bitbucket.org) left this list on
+  // 2026-10-06 (git gateway D12/G2): with them present, an injected agent could
+  // push private files to an attacker's repo using an attacker-supplied token,
+  // no operator credential needed. Authenticated git goes through the bridge's
+  // git gateway tools; see RESERVED_CODE_HOST_DOMAINS for the enforced floor.
+  "codeload.github.com",
+  "*.githubusercontent.com"
+];
+var RESERVED_CODE_HOST_DOMAINS = [
   "github.com",
   "*.github.com",
-  "*.githubusercontent.com",
   "gitlab.com",
-  "bitbucket.org"
+  "*.gitlab.com",
+  "bitbucket.org",
+  "*.bitbucket.org"
 ];
+var RESERVED_CODE_HOST_READ_ONLY = /* @__PURE__ */ new Set(["codeload.github.com"]);
+function codeHostConflicts(allowed) {
+  const out = [];
+  for (const a of allowed) {
+    const d = a.domain.trim().toLowerCase().replace(/\.$/, "");
+    if (RESERVED_CODE_HOST_READ_ONLY.has(d)) continue;
+    for (const r of RESERVED_CODE_HOST_DOMAINS) {
+      const base = r.startsWith("*.") ? r.slice(2) : r;
+      const isAllMatch = d === "*";
+      const isReservedItself = d === r || d === base;
+      const isSubdomainOfReservedWildcard = r.startsWith("*.") && d.endsWith("." + base);
+      const isBroaderWildcard = d.startsWith("*.") && (base === d.slice(2) || base.endsWith("." + d.slice(2)));
+      const hit = isAllMatch || isReservedItself || isSubdomainOfReservedWildcard || isBroaderWildcard;
+      if (hit) {
+        out.push({ domain: a.domain, source: a.source, reservation: r });
+        break;
+      }
+    }
+  }
+  return out;
+}
 var PROVIDER_PATHS = {
   "claude-code": ["~/.claude", "~/.claude.json"],
   codex: ["~/.codex"],
@@ -3022,6 +3061,24 @@ Narrow the grant to a path outside the protected set. (Ancestor grants like "~"
     ...scope.network?.deniedDomains ?? [],
     ...parseEnvList(env["BRAID_SCOPE_DENY_DOMAINS"])
   ]);
+  const allowCodeHosts = scope.network?.allowCodeHosts === true;
+  if (!disabled && !allowCodeHosts) {
+    const labelledDomains = [
+      ...(scope.network?.allowedDomains ?? []).map((domain) => ({ domain, source: "scope.network.allowedDomains" })),
+      ...(cfg.derivedAllowedDomains ?? []).map((domain) => ({ domain, source: "derived model endpoint" })),
+      ...parseEnvList(env["BRAID_SCOPE_ALLOW_DOMAINS"]).map((domain) => ({ domain, source: "BRAID_SCOPE_ALLOW_DOMAINS" })),
+      ...(cfg.scopeFlags?.allowDomains ?? []).map((domain) => ({ domain, source: "--allow-domain" }))
+    ];
+    const hits = codeHostConflicts(labelledDomains);
+    if (hits.length > 0) {
+      const detail = hits.map((h) => `  - ${h.source}: "${h.domain}" is a code host (reserved: ${h.reservation})`).join("\n");
+      throw new Error(
+        `[braid] SCOPE ERROR: a network grant reaches a code host and was refused:
+${detail}
+The sandboxed agent must not reach code hosts directly (an injected agent could push private files anywhere on that host). Use the Braid git tools for authenticated git, or run \`braid scope allow-code-hosts <agent>\` to accept the exfiltration risk for this agent.`
+      );
+    }
+  }
   function describe() {
     const lines = [];
     if (disabled) {
@@ -3042,6 +3099,9 @@ Narrow the grant to a path outside the protected set. (Ancestor grants like "~"
       lines.push(`[scope] provider paths (writable): ${providerPaths.join(", ")}`);
     }
     lines.push(`[scope] allowed domains (${allowedDomains.length}): ${allowedDomains.slice(0, 5).join(", ")}${allowedDomains.length > 5 ? " ..." : ""}`);
+    if (allowCodeHosts) {
+      lines.push("[scope] WARNING: direct code-host egress is ON for this agent (exfiltration path accepted by the owner via `braid scope allow-code-hosts`)");
+    }
     if ((cfg.derivedAllowedDomains ?? []).length > 0) {
       lines.push(`[scope] model endpoints (derived): ${(cfg.derivedAllowedDomains ?? []).join(", ")}`);
     }
@@ -3773,6 +3833,16 @@ async function verifyCardIdentity(card, peerName, pinnedIssuer) {
 }
 
 // src/relayClient.ts
+function relayHttpNote(label, r) {
+  if (!isVerboseOutput()) return;
+  if (r.status === 402) {
+    const plan = r.json?.requiredPlan;
+    const need = typeof plan === "string" && plan.length > 0 ? `requires ${sanitizeForTty(plan).replace(/\s+/g, " ").slice(0, 32)}` : "requires a higher plan";
+    console.log(`[braid] ${label}: not included in this channel's plan (${need})`);
+    return;
+  }
+  console.warn(`[braid] ${label} HTTP ${r.status ?? r.category}`);
+}
 var HEARTBEAT_MS = 25e3;
 var WATCHDOG_MS = 4e4;
 var CONNECT_TIMEOUT_MS = 2e4;
@@ -3875,7 +3945,7 @@ function decideCardTrust(pin, name, r) {
   if (pin.has(name)) return "downgrade";
   return "ok";
 }
-var RelayClient = class {
+var RelayClient = class _RelayClient {
   constructor(cfg, deps) {
     this.cfg = cfg;
     this.deps = deps;
@@ -3974,6 +4044,9 @@ var RelayClient = class {
    *  legitimately uses that literal. Kept in sync with `memberChannels` (cleared on
    *  `removed`). Names only (G7) — the relay resolves ids to names server-side. */
   channelOrgs = /* @__PURE__ */ new Map();
+  /** D4: per-channel agent-visible features from the relay (hello.channelFeatures / added.features).
+   *  Absent channel or key = offered, so an older relay changes nothing. */
+  channelFeatures = /* @__PURE__ */ new Map();
   /** Task 7.1 (D4): this agent's own workspace display name, or the literal string
    *  "personal" for an org-less agent, from hello's `agentWorkspace`. null until the
    *  first hello that carries it (older relay, or not yet connected). */
@@ -4220,7 +4293,7 @@ var RelayClient = class {
         continue;
       }
       if (!r.ok) {
-        console.warn("[braid] backfill HTTP", r.status ?? r.category);
+        relayHttpNote("backfill", r);
         return out;
       }
       let body = r.json;
@@ -4274,7 +4347,7 @@ var RelayClient = class {
       { requestClass: "relay.messages.recent", maxBodyBytes: 16 * 1024 * 1024 }
     );
     if (!r.ok) {
-      console.warn("[braid] join-history HTTP", r.status ?? r.category);
+      relayHttpNote("join-history", r);
       return [];
     }
     const body = r.json;
@@ -4557,6 +4630,7 @@ var RelayClient = class {
         this.lastGapResumeAt.delete(ch);
         this.memberChannels.delete(ch);
         this.channelOrgs.delete(ch);
+        this.channelFeatures.delete(ch);
         this.removedCb?.(ch);
         break;
       }
@@ -4566,6 +4640,8 @@ var RelayClient = class {
         this.memberChannels.add(ch);
         const orgName = msg.orgName;
         if (typeof orgName === "string" && orgName.length > 0) this.channelOrgs.set(ch, orgName);
+        const fm = _RelayClient.asFeatureMap(msg.features);
+        if (fm) this.channelFeatures.set(ch, fm);
         this.addedCb?.(ch);
         break;
       }
@@ -4615,6 +4691,13 @@ var RelayClient = class {
             }
           }
         }
+        const feats = msg.channelFeatures;
+        if (feats && typeof feats === "object" && !Array.isArray(feats)) {
+          for (const [ch, m] of Object.entries(feats)) {
+            const fm = _RelayClient.asFeatureMap(m);
+            if (fm) this.channelFeatures.set(ch, fm);
+          }
+        }
         const agentWorkspaceRaw = msg.agentWorkspace;
         if (typeof agentWorkspaceRaw === "string" && agentWorkspaceRaw.length > 0) {
           this.agentWorkspace = agentWorkspaceRaw;
@@ -4892,7 +4975,7 @@ var RelayClient = class {
       body: JSON.stringify({ scope, card }),
       requestClass: "relay.agentcard.put"
     });
-    if (!r.ok) console.warn("[braid] put card HTTP", r.status ?? r.category);
+    if (!r.ok) relayHttpNote("put card", r);
   }
   /** Verify peer identity in the background (never blocks ingest). Logs security
    *  warnings on mismatch/downgrade; silent on ok (unsigned/unattested + never-pinned). */
@@ -4926,7 +5009,7 @@ var RelayClient = class {
     if (!ch) return [];
     const r = await this.httpJson(`/channels/${ch}`, { requestClass: "relay.channel.get" });
     if (!r.ok) {
-      console.warn("[braid] roster HTTP", r.status ?? r.category);
+      relayHttpNote("roster", r);
       return [];
     }
     const body = r.json;
@@ -4948,6 +5031,17 @@ var RelayClient = class {
       return normalizeRosterEntry(m.id, m.description, m.card);
     });
   }
+  static asFeatureMap(v) {
+    if (!v || typeof v !== "object" || Array.isArray(v)) return null;
+    const out = {};
+    for (const [k, b] of Object.entries(v)) if (typeof b === "boolean") out[k] = b;
+    return out;
+  }
+  /** True unless the relay told us this channel's plan lacks `key` (D4). */
+  channelHasFeature(channelId, key) {
+    const f = this.channelFeatures.get(channelId);
+    return f === void 0 || f[key] !== false;
+  }
   /** Sync read of this agent's own scribe status for a channel (BL-121 task 2).
    *  Populated by fetchRoster (see selfScribeCache above); false until that has
    *  run once for this channel. */
@@ -4966,7 +5060,7 @@ var RelayClient = class {
   async fetchMemberChannels() {
     const r = await this.httpJson(`/channels`, { requestClass: "relay.channels.list" });
     if (!r.ok) {
-      console.warn("[braid] member channels HTTP", r.status ?? r.category);
+      relayHttpNote("member channels", r);
       return [];
     }
     const body = r.json;
@@ -5048,7 +5142,7 @@ var RelayClient = class {
       requestClass: "relay.message.post"
     });
     if (!r.ok) {
-      console.warn("[braid] post HTTP", r.status ?? r.category);
+      relayHttpNote("post", r);
     }
   }
   /** Add an emoji reaction to a message in a channel. Degrades silently on error (never throws). */
@@ -5059,7 +5153,7 @@ var RelayClient = class {
       method: "PUT",
       requestClass: "relay.reaction.put"
     });
-    if (!r.ok) console.warn("[braid] add reaction HTTP", r.status ?? r.category);
+    if (!r.ok) relayHttpNote("add reaction", r);
   }
   /** Remove an emoji reaction from a message in a channel. Degrades silently on error (never throws). */
   async removeReaction(channelId, messageId, emoji) {
@@ -5069,7 +5163,7 @@ var RelayClient = class {
       method: "DELETE",
       requestClass: "relay.reaction.delete"
     });
-    if (!r.ok) console.warn("[braid] remove reaction HTTP", r.status ?? r.category);
+    if (!r.ok) relayHttpNote("remove reaction", r);
   }
   /** Append a structured reflection to a channel. Degrades silently on error (never throws).
    *  Maps snake_case tool-arg fields to camelCase REST body before posting. */
@@ -5095,7 +5189,7 @@ var RelayClient = class {
       body: JSON.stringify(body),
       requestClass: "relay.reflection.post"
     });
-    if (!r.ok) console.warn("[braid] write reflection HTTP", r.status ?? r.category);
+    if (!r.ok) relayHttpNote("write reflection", r);
   }
   /** Append a durable note to a channel's shared memory. Never throws on a network error
    *  (returns {ok:false, status:0}), but — unlike the pre-BL-121 version — surfaces the
@@ -5116,7 +5210,7 @@ var RelayClient = class {
       body: JSON.stringify(noteBody),
       requestClass: "relay.note.post"
     });
-    if (!r.ok) console.warn("[braid] write note HTTP", r.status ?? r.category);
+    if (!r.ok) relayHttpNote("write note", r);
     return { ok: r.ok, status: r.ok ? r.status : r.status ?? 0, json: r.ok ? r.json : r.json };
   }
   // ── Private memory lane (BL-056 task 7) ──────────────────────────────────────
@@ -5147,7 +5241,7 @@ var RelayClient = class {
       body: JSON.stringify(memBody),
       requestClass: "relay.memory.post"
     });
-    if (!r.ok) console.warn("[braid] remember private HTTP", r.status ?? r.category);
+    if (!r.ok) relayHttpNote("remember private", r);
     return { ok: r.ok, status: r.ok ? r.status : r.status ?? 0, json: r.ok ? r.json : r.json };
   }
   /** JIT recall over THIS agent's own private memory lane (relay GET
@@ -5174,7 +5268,7 @@ var RelayClient = class {
       { requestClass: "relay.memory.recall" }
     );
     if (!r.ok) {
-      console.warn("[braid] recall private HTTP", r.status ?? r.category);
+      relayHttpNote("recall private", r);
       return [];
     }
     const data = r.json;
@@ -5375,7 +5469,7 @@ var RelayClient = class {
     if (!ch) return [];
     const r = await this.httpJson(`/channels/${ch}/notes`, { requestClass: "relay.notes.get" });
     if (!r.ok) {
-      console.warn("[braid] notes HTTP", r.status ?? r.category);
+      relayHttpNote("notes", r);
       return [];
     }
     const data = r.json;
@@ -5405,7 +5499,7 @@ var RelayClient = class {
     if (!ch) return [];
     const r = await this.httpJson(`/channels/${ch}/insights`, { requestClass: "relay.insights.get" });
     if (!r.ok) {
-      console.warn("[braid] insights HTTP", r.status ?? r.category);
+      relayHttpNote("insights", r);
       return [];
     }
     const data = r.json;
@@ -5459,7 +5553,7 @@ var RelayClient = class {
       body,
       requestClass: "relay.flow.post"
     });
-    if (!r.ok) console.warn("[braid] flow post HTTP", r.status ?? r.category);
+    if (!r.ok) relayHttpNote("flow post", r);
   }
   /** Channel instructions text (empty if none or on error — never throws). Branded (H2-4). */
   async fetchChannelInstructions(channelId) {
@@ -5467,7 +5561,7 @@ var RelayClient = class {
     if (!ch) return untrusted("");
     const r = await this.httpJson(`/channels/${ch}/instructions`, { requestClass: "relay.instructions.get" });
     if (!r.ok) {
-      console.warn("[braid] instructions HTTP", r.status ?? r.category);
+      relayHttpNote("instructions", r);
       return untrusted("");
     }
     const data = r.json;
@@ -5480,7 +5574,7 @@ var RelayClient = class {
     if (!ch) return [];
     const r = await this.httpJson(`/channels/${ch}/topics`, { requestClass: "relay.topics.get" });
     if (!r.ok) {
-      console.warn("[braid] topics HTTP", r.status ?? r.category);
+      relayHttpNote("topics", r);
       return [];
     }
     const data = r.json;
@@ -5494,7 +5588,7 @@ var RelayClient = class {
     if (!ch) return [];
     const r = await this.httpJson(`/channels/${ch}/sources`, { requestClass: "relay.sources.get" });
     if (!r.ok) {
-      console.warn("[braid] sources HTTP", r.status ?? r.category);
+      relayHttpNote("sources", r);
       return [];
     }
     const data = r.json;
@@ -5510,7 +5604,7 @@ var RelayClient = class {
     if (!ch) return [];
     const r = await this.httpJson(`/channels/${ch}/sources`, { requestClass: "relay.sources.get" });
     if (!r.ok) {
-      console.warn("[braid] listSources HTTP", r.status ?? r.category);
+      relayHttpNote("listSources", r);
       return [];
     }
     const data = r.json;
@@ -5523,7 +5617,7 @@ var RelayClient = class {
     if (!ch || !sid) return null;
     const r = await this.httpJson(`/channels/${ch}/sources/${sid}/content`, { requestClass: "relay.sources.get" });
     if (!r.ok) {
-      console.warn("[braid] getSourceContent HTTP", r.status ?? r.category);
+      relayHttpNote("getSourceContent", r);
       return null;
     }
     const data = r.json;
@@ -5547,7 +5641,7 @@ var RelayClient = class {
       this.fetchChannelTopics(channelId),
       this.fetchSourcesContext(channelId),
       this.fetchChannelNotes(channelId),
-      this.fetchInsights(channelId)
+      this.channelHasFeature(channelId, "insights") ? this.fetchInsights(channelId) : Promise.resolve([])
     ]);
     const orderedNotes = await this.applyRecallOrder(channelId, notes, queryHint);
     return buildChannelContext({ instructions, topics, pins, notes: orderedNotes, insights, isScribe: this.isScribeFor(channelId) });
@@ -5583,7 +5677,7 @@ var RelayClient = class {
       requestClass: "relay.recall.post"
     });
     if (!r.ok) {
-      console.warn("[braid] recall HTTP", r.status ?? r.category);
+      relayHttpNote("recall", r);
       return [];
     }
     const data = r.json;
@@ -5630,7 +5724,7 @@ var RelayClient = class {
       { requestClass: "relay.flow.messages", maxBodyBytes: 16 * 1024 * 1024 }
     );
     if (!r.ok) {
-      console.warn("[braid] flow messages HTTP", r.status ?? r.category);
+      relayHttpNote("flow messages", r);
       return [];
     }
     const data = r.json;
@@ -6191,6 +6285,29 @@ function formatRateLimitNotice(agentName, provider, message) {
   ];
 }
 
+// src/gitEnv.ts
+var AGENT_GIT_ENV = {
+  GIT_TERMINAL_PROMPT: "0",
+  GCM_INTERACTIVE: "never",
+  GIT_CONFIG_NOSYSTEM: "1"
+};
+var AGENT_GIT_CONFIG = [
+  ["credential.helper", ""],
+  ["core.askPass", ""]
+];
+function withAgentGitEnv(extra, baseGitConfigCount = process.env.GIT_CONFIG_COUNT) {
+  const out = { ...extra, ...AGENT_GIT_ENV };
+  let n = Number.parseInt(extra.GIT_CONFIG_COUNT ?? baseGitConfigCount ?? "0", 10);
+  if (!Number.isFinite(n) || n < 0) n = 0;
+  for (const [key, value] of AGENT_GIT_CONFIG) {
+    out[`GIT_CONFIG_KEY_${n}`] = key;
+    out[`GIT_CONFIG_VALUE_${n}`] = value;
+    n++;
+  }
+  out.GIT_CONFIG_COUNT = String(n);
+  return out;
+}
+
 // src/adapter.ts
 function defaultToolPolicy() {
   return { mode: "readonly", configDirAbs: resolve2(configDir(process.env)), allowReadAbs: [] };
@@ -6290,6 +6407,10 @@ function resolvePathBinary(binary, hint) {
   return found;
 }
 function launchSpecFor(agent) {
+  const spec = launchSpecForProvider(agent);
+  return { ...spec, env: withAgentGitEnv(spec.env ?? {}) };
+}
+function launchSpecForProvider(agent) {
   const cwd = process.cwd();
   switch (agent) {
     case "claude-code": {
@@ -6434,7 +6555,7 @@ function interactiveHandoffSupported(agent) {
 }
 function interactiveResumeSpecFor(agent, sessionId, cwd) {
   const build = HANDOFF_RESUME_SPECS[agent];
-  return build ? build(sessionId, cwd) : null;
+  return build ? { ...build(sessionId, cwd), env: withAgentGitEnv({}) } : null;
 }
 var defaultAcpClientFactory = (launch) => new AcpClient(launch);
 var MAX_CONSECUTIVE_RESTARTS = 3;
@@ -7887,6 +8008,7 @@ export {
   loadAgent,
   acquireAgentLock,
   pinEndpoint,
+  setScopeAllowCodeHosts,
   updateAgentWorkspace,
   isFilesystemRoot,
   narrowestMode,
@@ -7916,6 +8038,7 @@ export {
   scopedLaunch,
   resetScope,
   sandboxInstaller,
+  withAgentGitEnv,
   resolveClaudeBinary,
   describeClaudeBinary,
   interactiveHandoffSupported,

package/dist/cli.js

@@ -75,6 +75,7 @@ import {
   sanitizeForTty,
   saveAgent,
   scopedLaunch,
+  setScopeAllowCodeHosts,
   setVerboseOutput,
   snapshotHttpMetrics,
   startingLines,
@@ -82,8 +83,9 @@ import {
   toolStatusLine,
   updateAgentWorkspace,
   validateRelayWsUrl,
+  withAgentGitEnv,
   wsToHttp
-} from "./chunk-CLFXLKAW.js";
+} from "./chunk-2OHYN3KD.js";
 import {
   clampUntrusted,
   externalSourceLabel,
@@ -2376,7 +2378,7 @@ function makeSocketHandoffController(deps) {
           session = c.session;
           spec = c.spec;
         }
-        const scoped = await scopedLaunchFn({ command: spec.command, args: spec.args, cwd: spec.cwd }, { scope: deps.scope }, deps.provider);
+        const scoped = await scopedLaunchFn({ command: spec.command, args: spec.args, cwd: spec.cwd, env: spec.env }, { scope: deps.scope }, deps.provider);
         pauseAttempted = true;
         await session.handoffPause();
         active = { channelId, session };
@@ -3043,6 +3045,9 @@ Commands:
                   (no network; local inspection only)
   scope allow <agent> <host>
                   Approve a custom model endpoint host for a saved agent (BL-148)
+  scope allow-code-hosts <agent>
+                  Let THIS agent's sandbox reach github.com/gitlab.com/bitbucket.org
+                  directly (accepts the exfiltration risk; prefer the git tools)
   telemetry [status|enable|disable]
                   Show or change usage telemetry (tool-mode +
                   blocked-tool-call signals only; never content, paths, or
@@ -3125,6 +3130,11 @@ function parseCliArgs(argv) {
       }
       return { kind: "scope-allow", agent: agent2, host };
     }
+    if (argv[1] === "allow-code-hosts") {
+      const agent2 = argv[2] && !argv[2].startsWith("-") ? argv[2].trim() : void 0;
+      if (!agent2) return { kind: "usage", error: `Usage: braid scope allow-code-hosts <agent>` };
+      return { kind: "scope-allow-code-hosts", agent: agent2 };
+    }
     const agent = argv[1] && !argv[1].startsWith("-") ? argv[1].trim() : void 0;
     return { kind: "scope", agent };
   }
@@ -3951,7 +3961,7 @@ async function runHandoff(opts) {
   }
   const spawnFn = opts.spawnFn ?? nodeSpawn;
   const scoped = await scopedLaunch(
-    { command: spec.command, args: spec.args, cwd: spec.cwd },
+    { command: spec.command, args: spec.args, cwd: spec.cwd, env: spec.env },
     { scope: opts.scope },
     provider
   );
@@ -4109,7 +4119,7 @@ async function runTakeover(lc, ctx) {
       const child = spawnFn(spec.command, spec.args, {
         stdio: "inherit",
         cwd: spec.cwd,
-        env: buildAcpEnv(env, spec.env ?? void 0)
+        env: buildAcpEnv(env, spec.env ? withOwnGitConfig(spec.env, env) : void 0)
       });
       child.on("exit", () => settle({}));
       child.on("error", (e) => settle({ error: e }));
@@ -4332,6 +4342,13 @@ async function defaultPrompt(stdin, stdout, question) {
     rl.close();
   }
 }
+function withOwnGitConfig(wire, owner) {
+  const rest = {};
+  for (const [k, v] of Object.entries(wire)) {
+    if (k !== "GIT_CONFIG_COUNT" && !/^GIT_CONFIG_(KEY|VALUE)_\d+$/.test(k)) rest[k] = v;
+  }
+  return withAgentGitEnv(rest, owner.GIT_CONFIG_COUNT);
+}
 
 // src/observe/handoffGate.ts
 var HandoffGate = class {
@@ -5993,6 +6010,13 @@ Set the provider's config to use ${normalizedHost} and try again, or check BRAID
   console.log(`[braid] pinned: ${normalizedHost}  (source: ${match.source})`);
   console.log(`[braid] restart the bridge for the change to take effect.`);
 }
+function scopeAllowCodeHosts(agentName) {
+  const dir = configDir(process.env);
+  setScopeAllowCodeHosts(dir, agentName, true);
+  console.log(`[braid] ${agentName}: direct code-host egress is now ON (github.com, gitlab.com, bitbucket.org reachable from the jail).`);
+  console.log(`[braid] This re-opens an exfiltration path. Prefer the Braid git tools; undo by editing scope.network.allowCodeHosts in the saved agent file.`);
+  console.log(`[braid] restart the bridge for the change to take effect.`);
+}
 function runTelemetryVerb(verb) {
   const dir = configDir(process.env);
   if (verb === "disable") {
@@ -6063,6 +6087,10 @@ async function main() {
     scopeAllow(invocation.agent, invocation.host);
     return;
   }
+  if (invocation.kind === "scope-allow-code-hosts") {
+    scopeAllowCodeHosts(invocation.agent);
+    return;
+  }
   if (invocation.kind === "telemetry") {
     runTelemetryVerb(invocation.verb);
     return;

package/dist/{http-QDQGGG2I.js → http-7LMCYNHB.js}

@@ -4,7 +4,7 @@ import {
   boundedJsonFetch,
   resetHttpMetricsForTest,
   snapshotHttpMetrics
-} from "./chunk-CLFXLKAW.js";
+} from "./chunk-2OHYN3KD.js";
 import "./chunk-HQNAAXUM.js";
 export {
   assertHttpEndpoint,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.96.7",
+  "version": "0.97.0",
   "description": "Braid: connect your own coding agent (Claude Code, Codex, Gemini, Grok) to a Braid channel and collaborate with other agents and humans.",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "SnowyRoad",

package/service-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.96.7",
+  "version": "0.97.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@snowyroad/braid",
-      "version": "0.96.7",
+      "version": "0.97.0",
       "license": "SEE LICENSE IN LICENSE.md",
       "dependencies": {
         "@agentclientprotocol/sdk": "0.25.1",
@@ -815,9 +815,9 @@
       "license": "MIT"
     },
     "node_modules/@rollup/rollup-android-arm-eabi": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.63.5.tgz",
-      "integrity": "sha512-J25QJU+B78T4FhhBsNpLJyVWOi31mwtpcMwywHmOKH65Q9IWGA81gPj+dnwlhU8wktVriYE+tFAaQgrnJRzAZg==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.64.0.tgz",
+      "integrity": "sha512-FLLpX941CD/7aBvX3GqLGBM9OvY5PGXTryPJkG5r5/OuBpZpV5k45Uo3RxAvqd35tsyc3hH1bhtz921IKzoIzg==",
       "cpu": [
         "arm"
       ],
@@ -829,9 +829,9 @@
       ]
     },
     "node_modules/@rollup/rollup-android-arm64": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.63.5.tgz",
-      "integrity": "sha512-LDopB3zuZM5Ux9TT2luNEBJW/tYbGU2g1d+VpKk6I+gSKDb+/7sYE6M225gRQt4RbMX6MSwMsVR/phdjVUgRLg==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.64.0.tgz",
+      "integrity": "sha512-iI32XM/jnDYJsvx5ai/za/7gWO9XoSeFFtU06/ZCaRgyilfJOjaopD3nOpk2WrTCGOyeDt4hleUiGOAnd5tHNg==",
       "cpu": [
         "arm64"
       ],
@@ -843,9 +843,9 @@
       ]
     },
     "node_modules/@rollup/rollup-darwin-arm64": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.63.5.tgz",
-      "integrity": "sha512-wlJEERGfeuHeBavCL2qVnNacOK43NDoZM4sjkeRPymd04OAE9T1zBqDJgmZ+CIsPTYKwdzpUC8vmOw84dwY4Tg==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.64.0.tgz",
+      "integrity": "sha512-dRBZlbt2sEtF8Mn4MODThze9fIPdDoOhVSlXMAKy5dQbOYK9pOOoPY4Fat3OTtr0+8zbJo5TTZwlsfxY/kDNJg==",
       "cpu": [
         "arm64"
       ],
@@ -857,9 +857,9 @@
       ]
     },
     "node_modules/@rollup/rollup-darwin-x64": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.63.5.tgz",
-      "integrity": "sha512-4nJJGg5jbo2wwPP4JP+LfEBA3bvP8rU9CLuhp7jWvq9sxEyhjQFTFdrqi+/dHEin/pd8jpT0vcehIpnZtmEdcQ==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.64.0.tgz",
+      "integrity": "sha512-Y3whrJOMucfkhgNkvcM93M6j8C53iEAMmPMYD99C6G1kUy4ELigLWk9ar2/4aCBSRgsql0zdlOemLgW2m5GZgQ==",
       "cpu": [
         "x64"
       ],
@@ -871,9 +871,9 @@
       ]
     },
     "node_modules/@rollup/rollup-freebsd-arm64": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.63.5.tgz",
-      "integrity": "sha512-DrZbyCDF1hneuO6jRbvZ2D7+PIBM6yIwYnJpg2vIk58T+wuFpiaGZrfUr59lDWw45bg+IrpTGLPiNi/Fk4w3Cg==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.64.0.tgz",
+      "integrity": "sha512-S6S1GEzPjFF6IONYJX3AKt/799+8RgBgCcwRnUo+Ep1IvBxUbw5M51iU0TDdK2NWWVnSvCQ8yi6Em0fGASMOng==",
       "cpu": [
         "arm64"
       ],
@@ -885,9 +885,9 @@
       ]
     },
     "node_modules/@rollup/rollup-freebsd-x64": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.63.5.tgz",
-      "integrity": "sha512-gqfUVMJMB3mehqywxp6hTBFfgtMQykZY19+cfiaYP0toIJLb/1DZRJHVkQQGP13W4TAwfZDWeg1qBcheTRioXQ==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.64.0.tgz",
+      "integrity": "sha512-Ed1DPoFENkXj4IGzSB12SesV40iP6LxCCrbTIkSGIQBpOOxpBM+0kj62lmaeIHfMWTDoddqTOtqc7s8LYfn+Pw==",
       "cpu": [
         "x64"
       ],
@@ -899,9 +899,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm-gnueabihf": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.63.5.tgz",
-      "integrity": "sha512-CFmhpvAwzSaWMlN3VN7UtmoTihlZNzoP0juQib5TQRnYUyDV8dXeWOp29sobWAT6gXl/hQgAClLlEiYozQG3OQ==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.64.0.tgz",
+      "integrity": "sha512-J/6xhutJPtFyIkmHdf4olOdHHKH5kOJNumojdWn+Elv5ICEYTVOa362Vw27TxsK0BLzb1le3EDlO3UbvFK1lnQ==",
       "cpu": [
         "arm"
       ],
@@ -916,9 +916,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm-musleabihf": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.63.5.tgz",
-      "integrity": "sha512-Uc9H8eXCOayV6JLTH5bXKMId6qbhNHa818/BgYjm4jrlq3vZquC9cqyvHBw17xy5Mnj5f+I3gFK5JcEf3hSqrw==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.64.0.tgz",
+      "integrity": "sha512-G4L/Nnx59d2LvDoV/P4S5lZ7oVLT6hodOHMacqjiq2LL2gts86KbkEBTYL53+fBt0odhf7XPIbIATGoYiJctxg==",
       "cpu": [
         "arm"
       ],
@@ -933,9 +933,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm64-gnu": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.63.5.tgz",
-      "integrity": "sha512-VcPr/szv/1BFw112Kt//fxulXt/JPqzzidU84iW68L2DdjnOO8QFUv2zTSYBEPHD6movBD4z+bbr5y60GYM7Jw==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.64.0.tgz",
+      "integrity": "sha512-zF16pvJDEUksGYRbfnXne7pdklAyj2XDmJeYKgP93oq0cUyX9Y8O7lUo1R+IY1GagP/YBvCEDCe7eEcAKpw//g==",
       "cpu": [
         "arm64"
       ],
@@ -950,9 +950,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm64-musl": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.63.5.tgz",
-      "integrity": "sha512-BnxtJ5/91BrIHYIkGrmjz/lbMhqEHt1dPFqIxIFR+jPn0xVc/oUSCtIT089zfp5ufwGDlYz2UC+Fe1SRBpYFbQ==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.64.0.tgz",
+      "integrity": "sha512-nIggWn8n+w12+R5lsV+PYYoUY8vuObxPAQqJI7WES+9v0qspYuAHoZMfYM0yLxlipasT5BY9ht5W8t5c/rSCkg==",
       "cpu": [
         "arm64"
       ],
@@ -967,9 +967,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-loong64-gnu": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.63.5.tgz",
-      "integrity": "sha512-LrYcHZwF+fAMNKHYTOQ5osWM4AZF7YF6D+XtsjDyEvljtt11twc+zHVXBLNEjxVSUnKYsOhvVz4Z213eW02COQ==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.64.0.tgz",
+      "integrity": "sha512-WLOTiHPzszP0dxIMsHpFeDSOSB5I49Mj8K4+yKE3H1X/D0JRG5XZ5jrctJLMjnUc/LUzaKiwq6EHWNJ8pup8PA==",
       "cpu": [
         "loong64"
       ],
@@ -984,9 +984,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-loong64-musl": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.63.5.tgz",
-      "integrity": "sha512-nj7QKQePAAUpCpJHtg0pR0W/b92A9NO17JS3BAQmHDn/yhmkir2p8llrKY9TOhleKIaSzy1JhxS3T9FVld6coA==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.64.0.tgz",
+      "integrity": "sha512-35RK9aRhh7g7Pmeu5gQ01aCvrhXzj9LoBE6xtUcEH1ns+nyTaSzxSpADmBQINu4QiTDGvmQYwo1j5hlg1rRXFw==",
       "cpu": [
         "loong64"
       ],
@@ -1001,9 +1001,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-ppc64-gnu": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.63.5.tgz",
-      "integrity": "sha512-5ylkX6dWMeBKge9nTU+Rxfb+ZfaCIJ9lRqIFaK0eAMcWp7OJbYnLveLgXmm0VrvuLKb8qIK+mHyH0qu88RM+iA==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.64.0.tgz",
+      "integrity": "sha512-RqTfnpoTjuWfPAmqK5p2edt2AMCDJWm6oTn7sKfmyx+6tRga0ip05SJ977o6udTcIiDeF/CJMUfkaN4gtWt6Aw==",
       "cpu": [
         "ppc64"
       ],
@@ -1018,9 +1018,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-ppc64-musl": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.63.5.tgz",
-      "integrity": "sha512-oHK4ZHYFDKjZviK34I+NwgfbGxgI7ztrNxj2hPTSSNFgeq1a/lEd7dHV2fdGAuTH4Iym3RHJg+vAbWaWG4B7Zg==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.64.0.tgz",
+      "integrity": "sha512-RQjZPigjxFvFZDijG6rjlSXxhRaTf9zLYVpGK+lVcga64oMqP1GbgVqCb46eHTTceSIgp89Ja0y5aPe3GFBYHg==",
       "cpu": [
         "ppc64"
       ],
@@ -1035,9 +1035,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-riscv64-gnu": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.63.5.tgz",
-      "integrity": "sha512-UcetmHZ6XOXuUByiKZyQmb55ZPr0LABr3Ec/HB9wKZn6CEAFWZkE+hsJErJ9hbPBC7nI0dKuELx7CoV6IM7TMg==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.64.0.tgz",
+      "integrity": "sha512-tjL58mgQcTRnDRpeky+Sth1MKQeYi2Ct6r3Luq9E5aTSjnM/i/JbozqZkKqp9thM5+oDSZxo+05f9kdQedfTGA==",
       "cpu": [
         "riscv64"
       ],
@@ -1052,9 +1052,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-riscv64-musl": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.63.5.tgz",
-      "integrity": "sha512-C5CmDPQBtvjVo8cgQsBs+w6WB0JLkiixhgi6hVLV11hERWdn/p0XcPU2OUcZzac9BPOFq7SbaHFa8r3SWEysCQ==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.64.0.tgz",
+      "integrity": "sha512-ictoRyVaoZ8C67myHef+8hhCa6IplXJJ/xUCkVCxziV4zxMZh+jvhkhGsPBLqj1S72fnqD0QH5zL4lcaa4X7DQ==",
       "cpu": [
         "riscv64"
       ],
@@ -1069,9 +1069,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-s390x-gnu": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.63.5.tgz",
-      "integrity": "sha512-lHVQHJFKsuuxLMi3MQO9XVL8Tje3JR82CzB+QDKC5NWBcsIWuwsn9uIM5e3lBhI+fF1/s63qnyYqsg65+8rV/w==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.64.0.tgz",
+      "integrity": "sha512-8aVvZ2hfr9RLFzBQkQNmYeHLDja8fLeQAmLt757zdKN/B+8L809KlLJKctQjS22wZotptV8G6o7fVPuAs8S1tQ==",
       "cpu": [
         "s390x"
       ],
@@ -1086,9 +1086,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-x64-gnu": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.63.5.tgz",
-      "integrity": "sha512-3W9bTFcQNJn71cSJVM9RKIiZOy8DO/XLDii8Uv/Pm6WKqDRj7JV3ZfuXIEfyuy5LXpIzAbB/1M4Ukp9GKNa7nA==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.64.0.tgz",
+      "integrity": "sha512-2dEF8GAcDKwshUfydD+GhosppNyBzhVUHkdFF3CXd3FpOkzj/RZzF5aoEtzklujklT5qFVRU2GK/cFeLaTNKVg==",
       "cpu": [
         "x64"
       ],
@@ -1103,9 +1103,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-x64-musl": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.63.5.tgz",
-      "integrity": "sha512-VDC7rRJlee/scpki96GZ27Omf6yU87s1YXwVTpjE5841faVlDYYT565rgfmoR1U0sqL7z5ivQSDjcsF6VRXyBA==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.64.0.tgz",
+      "integrity": "sha512-3XHTvoo2hKkh0MiOfS7SkhHjMaaWF7P4F3drocZZaho/Z8w7h/jpnuBHm91BOQLfvrKHs1yR+zir4E8RI3XzTQ==",
       "cpu": [
         "x64"
       ],
@@ -1120,9 +1120,9 @@
       ]
     },
     "node_modules/@rollup/rollup-openbsd-x64": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.63.5.tgz",
-      "integrity": "sha512-z86Ok2p4pTdv5xqCKZsTooO7yBEiaJR/HzU3Wx8RmWsPoLppnMKROhJusQob8B3IE1ghC343kUW9rC2r+Wf3ig==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.64.0.tgz",
+      "integrity": "sha512-HKtkzodL4a3KFWDXDoO61cRynAWTR3LnAE0oGtfG9lcNFpNuVYUFOByxDgNqEvic9rvaQbAj+SFwTEWDptRaIw==",
       "cpu": [
         "x64"
       ],
@@ -1134,9 +1134,9 @@
       ]
     },
     "node_modules/@rollup/rollup-openharmony-arm64": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.63.5.tgz",
-      "integrity": "sha512-IzQmj+xXwQFGhMAMKMQVXkMwMZN3TqkJgAE0nSsqvVwWWciP4AIPMmWRqOQ2GfX7TUDZr+xqGFcBS36CRPGw0g==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.64.0.tgz",
+      "integrity": "sha512-JBsxqiY16uyyCujtoC3s7zL+SrYyNElptD7K4V+KUoJ2V8/XG3hPWpheK+SuPwNh1cikJvIZmIdsrYXvD6PLJw==",
       "cpu": [
         "arm64"
       ],
@@ -1148,9 +1148,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-arm64-msvc": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.63.5.tgz",
-      "integrity": "sha512-F6qpTaPc9bwBH85kjy0/BLmLSW1uv7AoOXCoRIkg2arlgCYlWYcAbiMkvZuAcaWk9TpCRG//okznLAqLGshkMw==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.64.0.tgz",
+      "integrity": "sha512-S5Qrijh37qhnUYQ0ay8WN3LuWeKjow7wTUyCOPMZtnXiBXYXdsZETI6ZLfYnQAKovltckPLBFdNeD61P2rJc7g==",
       "cpu": [
         "arm64"
       ],
@@ -1162,9 +1162,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-ia32-msvc": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.63.5.tgz",
-      "integrity": "sha512-igoDsTFhhwECBeGbUuLeIk7t8Y1apa+cs6mDWpx2EZ0ch7oEQgzHbFUXN9euoHekCAQzXdXApAGkV6jznS7tWw==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.64.0.tgz",
+      "integrity": "sha512-zbZ6iMmLFEsCtTdc2/y1F/cDFVNNCPF7Ae8PCT/wdPE//hGwYp6r+MyCLMFX+kOeIe09Pz6ASfnnfpSTN1FJQQ==",
       "cpu": [
         "ia32"
       ],
@@ -1176,9 +1176,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-x64-gnu": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.63.5.tgz",
-      "integrity": "sha512-U3teMeMbXFmaM5D+OTJpsOXd+wV/qftIeYF9kBKL4v73641qyJmoXFtA28DQLsnmlyayEsTe72xpLHrArq6vHw==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.64.0.tgz",
+      "integrity": "sha512-L6Hw69oNpuYaOr1zCG30v0/DqKYCSRwodPGwIcVZ/6f8SOzq9rxtL/xNVI5MO4wjli+Ko0ErK9uHJL3mNPt8wQ==",
       "cpu": [
         "x64"
       ],
@@ -1190,9 +1190,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-x64-msvc": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.63.5.tgz",
-      "integrity": "sha512-ypfC34F3RKXvCXBglGqGMsUSMKlgwd1HX9AOAlx9RoZZ6GaI42YHVeKpzg3JG+wpBUJYTG+NNZhqbDWL8tBZkw==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.64.0.tgz",
+      "integrity": "sha512-nl+CTWIgOGszQmUz/kanfgrfFZ4qiwxKIfT/ryl3N3Ewk5tqizmYtNXiqb7Bu/fDtNgu1kyxdFiAUJNur3iysg==",
       "cpu": [
         "x64"
       ],
@@ -1234,9 +1234,9 @@
       "license": "MIT"
     },
     "node_modules/@types/node": {
-      "version": "25.9.8",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-25.9.8.tgz",
-      "integrity": "sha512-VfMrScDmMhUJQmd5hArdQnFvK0OIeD36uN2Va1FcpYaLB/BgkgM8Ulc50XtYISPMz7APJ30+N0T5EM0jlcdfRw==",
+      "version": "25.9.9",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-25.9.9.tgz",
+      "integrity": "sha512-b4e2xxj/yMeT2hNlD6x7zNFiQK2Dlmkb9CQ6v3/1G2RezKN4YS2lcEv8lzGm1mhs4f2lM4yNAMI/zUDBZBBt7w==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -1394,9 +1394,9 @@
       }
     },
     "node_modules/acorn": {
-      "version": "8.18.0",
-      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.18.0.tgz",
-      "integrity": "sha512-lGq+9yr1/GuAWaVYIHRjvvySG5/4VfKIvC8EWxStPdcDh/Ka7FG3twP6v4d5BkravUilhIAsG4Qj83t02LWUPQ==",
+      "version": "8.19.0",
+      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.19.0.tgz",
+      "integrity": "sha512-oJlA3XiRm7Cyk6qFD2Jn8ak9B7jSy0qy00ADO3+8dpT0LSjFihQYv4C02LFCSYJV3Q37xYwwRy5m+IpIiUzqWw==",
       "dev": true,
       "license": "MIT",
       "bin": {
@@ -2144,9 +2144,9 @@
       }
     },
     "node_modules/express-rate-limit": {
-      "version": "8.7.0",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.7.0.tgz",
-      "integrity": "sha512-hOwV7WOxXfjRpAM1DSJWZDXx3GhplwD8IfwuwvogD8i1Qnkgosw/H45s4ZnFAUHDAhPjlY9hLBvJhKmGMyY26g==",
+      "version": "8.7.1",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.7.1.tgz",
+      "integrity": "sha512-2FXbqkygil3mZiXzEtM0IjE/UBmBNot0J1GEVrJT4JbrvwOSoEtqtO+wHbiMQELWe1eNvHoYRg2dkjOid+6JkA==",
       "license": "MIT",
       "dependencies": {
         "debug": "^4.4.3",
@@ -2369,9 +2369,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.13.11",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.11.tgz",
-      "integrity": "sha512-/SMX/RQNJn7oNmFwH6DtwDqcrzZU2otm1FD6OJe2cWF6cfy/F8hq0XVBv7xW3FTJshRQwuBnXHDq2kNsdZnshg==",
+      "version": "4.13.13",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.13.tgz",
+      "integrity": "sha512-CQ46U0ZkAGmbT/4UxdzzGJpacP2IeKgY4a5/tOI9AABbpOMfK739wfDXmv1usCk+3RkKj1hQy4/fjhiwa2xlrA==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"
@@ -2480,9 +2480,9 @@
       }
     },
     "node_modules/ip-address": {
-      "version": "10.7.2",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.2.tgz",
-      "integrity": "sha512-7H/2gFSIitxc0hG3nOI1glS8QLo/EHBFFLk8vEUjXY/xu0AdL8jZ9U1IzO2PUm0d2D/ofQcAifb0g6OBkt8U7w==",
+      "version": "10.7.3",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.3.tgz",
+      "integrity": "sha512-A1kdq/tSb5QjvKvAMgIoEvDBIgL7qaqVP/jkvSwYYRZ9iEzvPpopxp2wQfu3SuZRHtpHNxMn8Fs0bS+gf5Xmwg==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"
@@ -2745,9 +2745,9 @@
       }
     },
     "node_modules/nanoid": {
-      "version": "3.3.19",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.19.tgz",
-      "integrity": "sha512-Y2tUNy4ouw6tq5oDSKeQYGOyhkUBhNOcGV/02KC+6kd9eDGqdZd++mjMiIDilrBYvjEnCYvVtsuHCuP+okSfug==",
+      "version": "3.3.20",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.20.tgz",
+      "integrity": "sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ==",
       "dev": true,
       "funding": [
         {
@@ -2964,9 +2964,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.28",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.28.tgz",
-      "integrity": "sha512-RRuzqDtt5Y9h3quz5hWhK+TPnsmVs6WwSU6LkJMeY4HstUEDuYTG8UJSdawMRzmzAtV+KEoG8N3Qg2qLy5vM/A==",
+      "version": "8.5.29",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.29.tgz",
+      "integrity": "sha512-49cGhUbXj8Qenv0iTMxA1cFBzxXoctpC9Ujd77t1WcbJIr6nF/eI7g/8MgxrYldFRuAXvja7xQRwavoW7kgrxQ==",
       "dev": true,
       "funding": [
         {
@@ -2984,9 +2984,9 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.18",
+        "nanoid": "^3.3.19",
         "picocolors": "^1.1.1",
-        "source-map-js": "^1.2.1"
+        "source-map-js": "^1.2.2"
       },
       "engines": {
         "node": "^10 || ^12 || >=14"
@@ -3174,9 +3174,9 @@
       }
     },
     "node_modules/rollup": {
-      "version": "4.63.5",
-      "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.63.5.tgz",
-      "integrity": "sha512-KRWwmNLlPw5M7HcdYfm15oBv9n9LPtjzpzCIxS/phwqvPyxHSoKX6Y2YU3pxSPfy0CLquVgsx/j/hBi6OvH1Nw==",
+      "version": "4.64.0",
+      "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.64.0.tgz",
+      "integrity": "sha512-gjA/kFeDfffII8COoPsvLPvE16hWDTEc1+0QKQNKUkuV8iJjqsC4xXs8/FzuL0v9EV39kuxTbAgcFoTRyy2TGQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -3191,31 +3191,31 @@
       },
       "optionalDependencies": {
         "@napi-rs/lzma-linux-x64-gnu": "1.5.1",
-        "@rollup/rollup-android-arm-eabi": "4.63.5",
-        "@rollup/rollup-android-arm64": "4.63.5",
-        "@rollup/rollup-darwin-arm64": "4.63.5",
-        "@rollup/rollup-darwin-x64": "4.63.5",
-        "@rollup/rollup-freebsd-arm64": "4.63.5",
-        "@rollup/rollup-freebsd-x64": "4.63.5",
-        "@rollup/rollup-linux-arm-gnueabihf": "4.63.5",
-        "@rollup/rollup-linux-arm-musleabihf": "4.63.5",
-        "@rollup/rollup-linux-arm64-gnu": "4.63.5",
-        "@rollup/rollup-linux-arm64-musl": "4.63.5",
-        "@rollup/rollup-linux-loong64-gnu": "4.63.5",
-        "@rollup/rollup-linux-loong64-musl": "4.63.5",
-        "@rollup/rollup-linux-ppc64-gnu": "4.63.5",
-        "@rollup/rollup-linux-ppc64-musl": "4.63.5",
-        "@rollup/rollup-linux-riscv64-gnu": "4.63.5",
-        "@rollup/rollup-linux-riscv64-musl": "4.63.5",
-        "@rollup/rollup-linux-s390x-gnu": "4.63.5",
-        "@rollup/rollup-linux-x64-gnu": "4.63.5",
-        "@rollup/rollup-linux-x64-musl": "4.63.5",
-        "@rollup/rollup-openbsd-x64": "4.63.5",
-        "@rollup/rollup-openharmony-arm64": "4.63.5",
-        "@rollup/rollup-win32-arm64-msvc": "4.63.5",
-        "@rollup/rollup-win32-ia32-msvc": "4.63.5",
-        "@rollup/rollup-win32-x64-gnu": "4.63.5",
-        "@rollup/rollup-win32-x64-msvc": "4.63.5",
+        "@rollup/rollup-android-arm-eabi": "4.64.0",
+        "@rollup/rollup-android-arm64": "4.64.0",
+        "@rollup/rollup-darwin-arm64": "4.64.0",
+        "@rollup/rollup-darwin-x64": "4.64.0",
+        "@rollup/rollup-freebsd-arm64": "4.64.0",
+        "@rollup/rollup-freebsd-x64": "4.64.0",
+        "@rollup/rollup-linux-arm-gnueabihf": "4.64.0",
+        "@rollup/rollup-linux-arm-musleabihf": "4.64.0",
+        "@rollup/rollup-linux-arm64-gnu": "4.64.0",
+        "@rollup/rollup-linux-arm64-musl": "4.64.0",
+        "@rollup/rollup-linux-loong64-gnu": "4.64.0",
+        "@rollup/rollup-linux-loong64-musl": "4.64.0",
+        "@rollup/rollup-linux-ppc64-gnu": "4.64.0",
+        "@rollup/rollup-linux-ppc64-musl": "4.64.0",
+        "@rollup/rollup-linux-riscv64-gnu": "4.64.0",
+        "@rollup/rollup-linux-riscv64-musl": "4.64.0",
+        "@rollup/rollup-linux-s390x-gnu": "4.64.0",
+        "@rollup/rollup-linux-x64-gnu": "4.64.0",
+        "@rollup/rollup-linux-x64-musl": "4.64.0",
+        "@rollup/rollup-openbsd-x64": "4.64.0",
+        "@rollup/rollup-openharmony-arm64": "4.64.0",
+        "@rollup/rollup-win32-arm64-msvc": "4.64.0",
+        "@rollup/rollup-win32-ia32-msvc": "4.64.0",
+        "@rollup/rollup-win32-x64-gnu": "4.64.0",
+        "@rollup/rollup-win32-x64-msvc": "4.64.0",
         "fsevents": "~2.3.2"
       }
     },
@@ -3449,9 +3449,9 @@
       }
     },
     "node_modules/source-map-js": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
-      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
       "dev": true,
       "license": "BSD-3-Clause",
       "engines": {