@snowyroad/braid 0.98.0 → 0.98.2

package/dist/{chunk-3SHZYLWH.js → chunk-SAUKTY6P.js}

@@ -400,7 +400,7 @@ var InviteExpiredError = class extends Error {
   }
 };
 async function redeemInvite(relayHttpUrl, code) {
-  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-7QNDIXBN.js");
+  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-SAC6PMXK.js");
   const r = await boundedJsonFetch2(`${relayHttpUrl.replace(/\/$/, "")}/invites/redeem`, {
     method: "POST",
     headers: { "content-type": "application/json" },
@@ -492,7 +492,7 @@ function validateReplacementToken(newToken, currentToken, nowMs = Date.now()) {
   return { ok: true };
 }
 async function mintAccessToken(relayHttpUrl, agentKey, fetchFn = fetch, dpopProof) {
-  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-7QNDIXBN.js");
+  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-SAC6PMXK.js");
   const r = await boundedJsonFetch2(`${relayHttpUrl.replace(/\/$/, "")}/agents/token`, {
     method: "POST",
     headers: {
@@ -2114,6 +2114,19 @@ var AcpClient = class {
   get exited() {
     return this.exitError;
   }
+  /** D15 (git gateway): the mode of the most recently started turn (its override, else the
+   *  standing policy). Set in runTurn and deliberately NOT cleared when the turn settles:
+   *  claude-agent-acp runs autonomous model cycles between prompts (a background Bash
+   *  task's completion notification triggers a follow-up), and those must keep the
+   *  narrowing of the turn that started them. Reset by the next turn and by start(). */
+  lastTurnMode;
+  /** D15 (git gateway): the mode the broker's git readonly gate applies right now: the
+   *  running turn's override, else the last turn's mode (persisted between turns, see
+   *  lastTurnMode), else the standing policy. RESIDUAL: a background task started in a
+   *  readonly turn whose follow-up lands during a LATER full turn is judged full. */
+  effectiveToolMode() {
+    return this.currentTurnOverrideMode ?? this.lastTurnMode ?? this.policy.mode;
+  }
   /**
    * Spawn the adapter, build the connection, initialize, and open one session.
    * Any failure (spawn error, premature exit, protocol error) rejects.
@@ -2124,6 +2137,7 @@ var AcpClient = class {
     this.activeTurnBuffer = null;
     this.turnQueue = Promise.resolve();
     this.currentTurnOverrideMode = void 0;
+    this.lastTurnMode = void 0;
     this.exitRejecters.clear();
     try {
       await this.withWarmupCeiling(this.startInner());
@@ -2433,6 +2447,7 @@ var AcpClient = class {
     };
     this.activeTurnBuffer = buffer;
     this.currentTurnOverrideMode = overrideMode;
+    this.lastTurnMode = overrideMode ?? this.policy.mode;
     try {
       const resp = await this.guard(
         this.conn.prompt({
@@ -5817,6 +5832,18 @@ var RelayClient = class _RelayClient {
 };
 
 // src/mcp/broker.ts
+var CHANNEL_RESTRICTS = "This channel or message also restricts the agent to read-only, so a channel admin must allow writes too.";
+function gitReadonlyRefusal(cause, agentName, channelAlsoReadonly = false) {
+  if (cause === "channel") {
+    return {
+      error: "git_readonly",
+      text: "Git tools need full tool mode, and this turn runs read-only because this channel or message restricts the agent. Do not retry git in this turn."
+    };
+  }
+  const name = agentName && isShellSafeName(agentName) ? agentName : "<agent-name>";
+  const text = `Git tools need full tool mode. Do not retry. The operator can stop the bridge, run \`braid tools full ${name}\`, then start it again.` + (channelAlsoReadonly ? ` ${CHANNEL_RESTRICTS}` : "");
+  return { error: "git_readonly", text };
+}
 var MAX_NOTE_CHARS = 2e3;
 var MAX_PRIVATE_MEMORY_CONTENT_CHARS = 2e3;
 var MAX_REFLECTION_FIELD_CHARS = 2e3;
@@ -5858,6 +5885,16 @@ var SourceBroker = class {
   setGitEnabled(enabled) {
     this.gitDisabledDepth = Math.max(0, this.gitDisabledDepth + (enabled ? -1 : 1));
   }
+  /** D15: git routes need the session's EFFECTIVE tool mode to be full (standing mode,
+   *  narrowed by any per-turn readonly override). Read on every /git/ request. FAIL-CLOSED:
+   *  until a source is wired, every /git/ route answers 403 git_readonly. The bridge wires
+   *  it to ChannelSession.currentToolMode. */
+  toolModeSource = () => ({ mode: "readonly", cause: "operator" });
+  agentName;
+  setToolModeSource(source, agentName) {
+    this.toolModeSource = source;
+    this.agentName = agentName;
+  }
   async start() {
     if (this.server) throw new Error("SourceBroker already started");
     const isWin32 = this.platform === "win32";
@@ -5900,6 +5937,8 @@ var SourceBroker = class {
   // The /git/ routes (git gateway, D6/D7) are write and egress routes; they ARE gated
   // off lisa fresh turns: ChannelSession.onLisaFreshTurn calls setGitEnabled(false)
   // for the turn's duration, so a critic or builder round gets 403 git_disabled_for_turn (D15).
+  // They are also refused (403 git_readonly) whenever the session's effective tool mode is
+  // readonly, read per request from setToolModeSource (D15).
   async handle(req, res) {
     const send = (status, body2) => {
       const s = JSON.stringify(body2);
@@ -6154,6 +6193,8 @@ var SourceBroker = class {
       if (req.url?.startsWith("/git/")) {
         if (!this.gateway) return send(404, { error: "unknown route" });
         if (this.gitDisabledDepth > 0) return send(403, { error: "git_disabled_for_turn", text: "Git tools are unavailable during this turn." });
+        const { mode, cause, channelAlsoReadonly } = this.toolModeSource();
+        if (mode !== "full") return send(403, gitReadonlyRefusal(cause, this.agentName, channelAlsoReadonly));
         const str = (v) => typeof v === "string" ? v : void 0;
         const pathArg = str(body.path);
         if (req.url === "/git/pr/merge") {
@@ -6813,6 +6854,10 @@ var AcpAdapter = class {
       // --- Local session handoff (verified providers only; see interactiveResumeSpecFor) ---
       // liveSessionId is the ACP session id, which for claude IS the native `--resume` id.
       liveSessionId: () => this.client?.sessionId ?? null,
+      // D15: the client's enforced mode (running turn's override, else the last turn's mode,
+      // else standing), for the broker's git gate. Unconditional and fail-closed: a client
+      // that cannot report its mode reads as readonly.
+      effectiveToolMode: () => this.client?.effectiveToolMode?.() ?? "readonly",
       // Fully release the headless subprocess so an interactive `claude --resume` can own the
       // single-writer transcript. Set the guard FIRST so any in-flight/racing turn short-circuits.
       handoffPause: async () => {
@@ -7164,6 +7209,8 @@ var ClaudeAdapter = class {
       onTurn(cb) {
         turnCbs.push(cb);
       },
+      // D15: same head-of-queue mode canUseTool applies (override ?? standing).
+      effectiveToolMode: () => overrideQueue[0] ?? policy.mode,
       async stop() {
         input.end();
         try {

package/dist/cli.js

@@ -88,7 +88,7 @@ import {
   validateRelayWsUrl,
   withAgentGitEnv,
   wsToHttp
-} from "./chunk-3SHZYLWH.js";
+} from "./chunk-SAUKTY6P.js";
 import {
   clampUntrusted,
   externalSourceLabel,
@@ -821,6 +821,21 @@ Here is the recent discussion so far ` : `You just joined this Braid channel. He
   liveSessionId() {
     return this.session?.liveSessionId?.() ?? null;
   }
+  /** D15 (git gateway): the tool mode in force right now, for the broker's git readonly
+   *  gate. Narrowest of the adapter's live mode (the running turn's per-turn override,
+   *  else standing), the operator's standing mode, and the channel's last bound bundle
+   *  mode, so it can only narrow. `cause` mirrors flowModeAndCause: "channel" when the
+   *  operator granted full but this turn or channel is narrowed (BL-203: then
+   *  `braid tools full` is the wrong remedy). `channelAlsoReadonly`: the operator is readonly
+   *  AND the channel's bound bundle is readonly, so the refusal names both remedies. (A
+   *  Slack-origin turn under a readonly operator enqueues no override, so it is not seen
+   *  here; the operator remedy is still shown.) */
+  currentToolMode() {
+    const mode = narrowestMode(this.session?.effectiveToolMode?.(), this.toolMode, this.lastBundleMode);
+    const cause = mode === "readonly" && this.toolMode !== "readonly" ? "channel" : "operator";
+    const channelAlsoReadonly = this.toolMode === "readonly" && this.lastBundleMode === "readonly";
+    return { mode, cause, channelAlsoReadonly };
+  }
   /** True while a dispatched turn has not yet settled (its onTurn hasn't fired).
    *  The take-control banner uses this to warn that taking over interrupts work
    *  (which then re-runs via the hand-back catch-up). */
@@ -2613,6 +2628,17 @@ function oneLine(s, max = 300) {
 function errText(e) {
   return oneLine(e instanceof Error ? e.message : String(e));
 }
+var GH_OWNER_RE = /^[A-Za-z0-9-]{1,100}$/;
+var GH_REPO_RE = /^(?!\.\.?$)[A-Za-z0-9._-]{1,100}$/;
+function parseGitHubOrigin(url) {
+  const s = url.trim();
+  const m = /^https:\/\/(?:[^@/\s]+@)?github\.com\/(.+)$/i.exec(s) ?? /^ssh:\/\/(?:[^@/\s]+@)?github\.com(?::22)?\/(.+)$/i.exec(s) ?? /^(?:[^@/\s:]+@)?github\.com:(?!\/)(.+)$/i.exec(s);
+  if (!m) return null;
+  const parts = m[1].replace(/\/$/, "").replace(/\.git$/i, "").split("/");
+  if (parts.length !== 2) return null;
+  const [owner, name] = parts;
+  return GH_OWNER_RE.test(owner) && GH_REPO_RE.test(name) ? { owner, name } : null;
+}
 function shellQuote(p) {
   return `'${p.replace(/'/g, `'\\''`)}'`;
 }
@@ -2625,6 +2651,9 @@ function safeSegment(s) {
 function logSafe(s) {
   return s.replace(/[^A-Za-z0-9._\/-]/g, "?").slice(0, 200) || "-";
 }
+function repoKey(g) {
+  return `${g.repoOwner}/${g.repoName}`.toLowerCase();
+}
 function isAutonomous(g) {
   return g.mode === "autonomous";
 }
@@ -2677,7 +2706,7 @@ var GitGateway = class {
   async statusInner(channelId, args) {
     const gate = this.gateChecks(channelId);
     if (gate) return gate;
-    const grant = await this.singleGrant();
+    const grant = await this.resolveGrant(channelId, args.path, true);
     if (!grant.ok) return grant;
     const g = grant.grant;
     const wt = this.worktree(channelId, args.path);
@@ -2717,12 +2746,12 @@ var GitGateway = class {
       `Worktree ${wt.path}: branch ${branch ?? "unknown"}, HEAD ${head ?? "none"}.`,
       tracking
     ];
-    return { ok: true, text: lines.join("\n"), data: { repo, mode, branch, head, ahead, behind } };
+    return { ok: true, text: lines.join("\n"), data: { repo, mode, source: g.source, branch, head, ahead, behind } };
   }
   async fetchInner(channelId, args) {
     const gate = this.gateChecks(channelId);
     if (gate) return gate;
-    const grant = await this.singleGrant();
+    const grant = await this.resolveGrant(channelId, args.path, true);
     if (!grant.ok) return grant;
     const g = grant.grant;
     const mirror = this.mirrorPath(g);
@@ -2767,7 +2796,7 @@ ${shown}${more}`,
   async pushInner(channelId, branch, args, out) {
     const gate = this.gateChecks(channelId);
     if (gate) return gate;
-    const grant = await this.singleGrant();
+    const grant = await this.resolveGrant(channelId, args.path, true);
     if (!grant.ok) return grant;
     const listed = grant.grant;
     const repo = `${listed.repoOwner}/${listed.repoName}`;
@@ -2840,7 +2869,7 @@ Compare: https://github.com/${repo}/compare/${encodeURIComponent(branch)}`,
   async openPrInner(channelId, args) {
     const gate = this.gateChecks(channelId);
     if (gate) return gate;
-    const grant = await this.singleGrant();
+    const grant = await this.resolveGrant(channelId, args.path, false);
     if (!grant.ok) return grant;
     const branch = String(args.branch ?? "");
     const badHead = await this.checkBranch(branch);
@@ -2876,7 +2905,7 @@ Compare: https://github.com/${repo}/compare/${encodeURIComponent(branch)}`,
   async mergePrInner(channelId, args) {
     const gate = this.gateChecks(channelId);
     if (gate) return gate;
-    const grant = await this.singleGrant();
+    const grant = await this.resolveGrant(channelId, void 0, false);
     if (!grant.ok) return grant;
     const num = Number(args.number);
     if (!Number.isInteger(num) || num <= 0) return fail(400, "invalid_number", "Pass the pull request number as a positive integer.");
@@ -2963,17 +2992,70 @@ Compare: https://github.com/${repo}/compare/${encodeURIComponent(branch)}`,
     if (this.disabledDepth.has(channelId)) return fail(403, "git_disabled_for_turn", "Git tools are disabled for this turn. Describe the change in your reply instead, and a later turn can push it.");
     return null;
   }
-  /** D7: one grant per agent for now; the repo is never chosen by the model. */
-  async singleGrant() {
+  /** D11 + R15: exactly one grant (server or PAT) is used as is, whatever the worktree's
+   *  origin (a fork origin keeps working, as in 0.98.0). When every grant is for the same
+   *  repo (case-insensitive owner/name, e.g. a server grant plus a local PAT), the repo is
+   *  unambiguous: no origin lookup, and grantForRepo picks the server grant over the PAT.
+   *  With grants for two or more distinct repos, "the repo" is the
+   *  worktree's GitHub origin and its grant is the server grant when one exists, else the
+   *  local PAT (resolver.grantForRepo); an origin matching no grant is no_grant_for_repo and
+   *  no usable origin is no_grant_for_worktree. The grant is still the only source of the
+   *  push/fetch target (D8.1): the origin only selects among grants the owner already made,
+   *  never names a destination. Ops that do not need a worktree (open/merge PR without a
+   *  path) treat an unusable cwd as "no origin". */
+  async resolveGrant(channelId, path2, needWorktree) {
     let grants;
     try {
       grants = await this.deps.resolver.listGrants();
     } catch (e) {
       return fail(502, "grants_unavailable", `Could not load this agent's git grants (${errText(e)}). Try again in a minute.`);
     }
-    if (grants.length === 0) return fail(404, "no_grant", `No git grant for this agent. Your owner can add one under Agents > ${this.deps.agentName} > Git access.`);
-    if (grants.length > 1) return fail(409, "multiple_grants", `This agent has ${grants.length} git grants, and the gateway supports exactly one today. Ask the owner to keep one repository under Agents > ${this.deps.agentName} > Git access.`);
-    return { ok: true, grant: grants[0] };
+    const where = `Agents > ${this.deps.agentName} > Git access`;
+    if (grants.length === 0) return fail(404, "no_grant", `No git grant for this agent. Your owner can add one under ${where}.`);
+    if (grants.length === 1) return { ok: true, grant: grants[0] };
+    if (new Set(grants.map(repoKey)).size === 1) {
+      const only = grants[0];
+      let g2;
+      try {
+        g2 = await this.deps.resolver.grantForRepo(only.repoOwner, only.repoName);
+      } catch (e) {
+        return fail(502, "grants_unavailable", `Could not load this agent's git grants (${errText(e)}). Try again in a minute.`);
+      }
+      return { ok: true, grant: g2 ?? only };
+    }
+    const wt = this.worktree(channelId, path2);
+    if (!wt.ok && (needWorktree || path2 !== void 0)) return wt;
+    const origin = wt.ok ? await this.worktreeOrigin(wt) : null;
+    if (origin && !origin.ok) return origin;
+    const repo = origin?.repo ?? null;
+    if (!repo) {
+      const example = `${grants[0].repoOwner}/${grants[0].repoName}`;
+      return fail(404, "no_grant_for_worktree", `This worktree has no GitHub origin remote and the agent has ${grants.length} git grants (${this.grantList(grants)}). Add the granted repository as origin (git remote add origin https://github.com/${example}.git, using the repository you are working on) so the gateway knows which grant applies.`);
+    }
+    let g;
+    try {
+      g = await this.deps.resolver.grantForRepo(repo.owner, repo.name);
+    } catch (e) {
+      return fail(502, "grants_unavailable", `Could not load this agent's git grants (${errText(e)}). Try again in a minute.`);
+    }
+    if (!g) return fail(404, "no_grant_for_repo", `This worktree's origin is ${repo.owner}/${repo.name}, and the agent has no git grant for that repository (its grants: ${this.grantList(grants)}). Your owner can add ${repo.owner}/${repo.name} under ${where}.`);
+    return { ok: true, grant: g };
+  }
+  grantList(grants) {
+    const byKey = /* @__PURE__ */ new Map();
+    for (const x of grants) if (!byKey.has(repoKey(x))) byKey.set(repoKey(x), `${x.repoOwner}/${x.repoName}`);
+    const names = [...byKey.values()];
+    return names.slice(0, 10).join(", ") + (names.length > 10 ? `, and ${names.length - 10} more` : "");
+  }
+  /** R15: remote.origin.url of the validated worktree, read with the hardened runner while
+   *  the worktree identity is held; null repo = no usable (GitHub) origin. */
+  async worktreeOrigin(wt) {
+    const changed = fail(400, "invalid_path", "The worktree changed while its origin remote was being read (its .git was replaced or gained alternates or a config include). Make sure nothing else is modifying the repository, then try again.");
+    const id = this.identity(wt);
+    if (!id) return changed;
+    const r = await this.git(["config", "--get", "remote.origin.url"], { gitDir: wt.gitDir, cwd: wt.path });
+    if (!this.sameIdentity(wt, id)) return changed;
+    return { ok: true, repo: r.code === 0 ? parseGitHubOrigin(r.stdout) : null };
   }
   /** Credential plus the effective policy. When the listed grant is LOOSER than the
    *  policy the cached mint carries (the owner loosened the grant after the mint), the
@@ -3323,11 +3405,13 @@ var GrantResolver = class {
     }
     return out;
   }
+  /** D11: a server (app) grant for the repo wins; otherwise the local PAT grant.
+   *  GitHub owner and repo names are case-insensitive. */
   async grantForRepo(owner, name) {
     const o = owner.toLowerCase();
     const n = name.toLowerCase();
-    const all = await this.listGrants();
-    return all.find((g) => g.repoOwner.toLowerCase() === o && g.repoName.toLowerCase() === n) ?? null;
+    const matches = (await this.listGrants()).filter((g) => g.repoOwner.toLowerCase() === o && g.repoName.toLowerCase() === n);
+    return matches.find((g) => g.source === "app") ?? matches.find((g) => g.source === "pat") ?? null;
   }
   async credentialFor(grant) {
     if (grant.source === "pat") {
@@ -3612,6 +3696,7 @@ async function startBridge(cfg, relay, deps) {
         broker.setGitEnabled(!active);
         gitGateway.setChannelGitEnabled(channelId, !active);
       };
+      broker.setToolModeSource(() => session.currentToolMode(), cfg.agentName);
       const brokerInfo = await broker.start();
       const allowedReactions = await relay.fetchAllowedReactions?.().catch(() => []) ?? [];
       const mcpServers = [{

package/dist/{http-7QNDIXBN.js → http-SAC6PMXK.js}

@@ -4,7 +4,7 @@ import {
   boundedJsonFetch,
   resetHttpMetricsForTest,
   snapshotHttpMetrics
-} from "./chunk-3SHZYLWH.js";
+} from "./chunk-SAUKTY6P.js";
 import "./chunk-HQNAAXUM.js";
 export {
   assertHttpEndpoint,

package/dist/mcp/server.js

@@ -971,7 +971,7 @@ async function main() {
   server.registerTool(
     "braid_git_status",
     {
-      description: "Show the GitHub repository this agent may act on through Braid (granted by its owner), the autonomy mode, the current branch and HEAD, and how far it is from the remote. Read-only. Use before braid_git_push.",
+      description: "Show the GitHub repository this agent may act on through Braid (granted by its owner), the autonomy mode, the current branch and HEAD, and how far it is from the remote. Read-only. Use before braid_git_push. All Braid git tools (this one included) need full tool mode: in read-only mode every one is refused, so do not retry; tell the operator instead.",
       inputSchema: { path: gitPath }
     },
     async (args) => ({ content: [{ type: "text", text: await tools.braidGitStatus(args) }] })
@@ -979,7 +979,7 @@ async function main() {
   server.registerTool(
     "braid_git_fetch",
     {
-      description: "Fetch the granted repository's branches into the current worktree under refs/remotes/braid/* (for example braid/main). Braid runs git outside the sandbox with a credential you never see.",
+      description: "Fetch the granted repository's branches into the current worktree under refs/remotes/braid/* (for example braid/main). Braid runs git outside the sandbox with a credential you never see. Needs full tool mode; in read-only mode it is refused, so do not retry.",
       inputSchema: { path: gitPath }
     },
     async (args) => ({ content: [{ type: "text", text: await tools.braidGitFetch(args) }] })
@@ -987,7 +987,7 @@ async function main() {
   server.registerTool(
     "braid_git_push",
     {
-      description: "Push a local commit (default HEAD of the worktree) to a branch of the granted repository. Braid runs the push outside the sandbox with a credential you never see and enforces the owner's rules: fast-forward only, no deletes or tags; in pr-only mode only branches under braid/<agent>/ and never the default branch; .github/workflows changes only if the owner allowed them. On refusal the text tells you what to ask the owner for.",
+      description: "Push a local commit (default HEAD of the worktree) to a branch of the granted repository. Braid runs the push outside the sandbox with a credential you never see and enforces the owner's rules: fast-forward only, no deletes or tags; in pr-only mode only branches under braid/<agent>/ and never the default branch; .github/workflows changes only if the owner allowed them. On refusal the text tells you what to ask the owner for. Needs full tool mode; in read-only mode it is refused, so do not retry.",
       inputSchema: {
         path: gitPath,
         branch: z.string(),
@@ -999,7 +999,7 @@ async function main() {
   server.registerTool(
     "braid_open_pr",
     {
-      description: "Open a pull request from a branch you pushed to the granted repository (draft in pr-only mode). Returns the PR number and URL.",
+      description: "Open a pull request from a branch you pushed to the granted repository (draft in pr-only mode). Returns the PR number and URL. Needs full tool mode; in read-only mode it is refused, so do not retry.",
       inputSchema: {
         path: gitPath,
         branch: z.string(),
@@ -1013,7 +1013,7 @@ async function main() {
   server.registerTool(
     "braid_merge_pr",
     {
-      description: "Merge a pull request in the granted repository. Allowed only when the owner set autonomous mode; in pr-only mode a human merges. method is squash (default), merge, or rebase.",
+      description: "Merge a pull request in the granted repository. Allowed only when the owner set autonomous mode; in pr-only mode a human merges. method is squash (default), merge, or rebase. Needs full tool mode; in read-only mode it is refused, so do not retry.",
       inputSchema: {
         number: z.number().int(),
         method: z.enum(["merge", "squash", "rebase"]).optional()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.98.0",
+  "version": "0.98.2",
   "description": "Braid: connect your own coding agent (Claude Code, Codex, Gemini, Grok) to a Braid channel and collaborate with other agents and humans.",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "SnowyRoad",

package/service-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.98.0",
+  "version": "0.98.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@snowyroad/braid",
-      "version": "0.98.0",
+      "version": "0.98.2",
       "license": "SEE LICENSE IN LICENSE.md",
       "dependencies": {
         "@agentclientprotocol/sdk": "0.25.1",
@@ -247,9 +247,9 @@
       }
     },
     "node_modules/@babel/runtime": {
-      "version": "7.29.7",
-      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.7.tgz",
-      "integrity": "sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==",
+      "version": "7.29.10",
+      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.10.tgz",
+      "integrity": "sha512-NpugTzbKgGrNe45Ui32cN8vCFFMxVtP/9rtfwv0nP5FRDAjvYBxJcLVpYA9mr1jxP6cnIT7x9LUzuDTbWYYNRA==",
       "license": "MIT",
       "engines": {
         "node": ">=6.9.0"
@@ -815,9 +815,9 @@
       "license": "MIT"
     },
     "node_modules/@rollup/rollup-android-arm-eabi": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.64.0.tgz",
-      "integrity": "sha512-FLLpX941CD/7aBvX3GqLGBM9OvY5PGXTryPJkG5r5/OuBpZpV5k45Uo3RxAvqd35tsyc3hH1bhtz921IKzoIzg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.64.1.tgz",
+      "integrity": "sha512-QRU7UpoS9hd8Ij5I6fCVBxZ0UpdfAbZ5y7BWG5STFGMoM9jGzUP464yYAa3CzZxvG+jBwq1kI8L07xx0ReAdGA==",
       "cpu": [
         "arm"
       ],
@@ -829,9 +829,9 @@
       ]
     },
     "node_modules/@rollup/rollup-android-arm64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.64.0.tgz",
-      "integrity": "sha512-iI32XM/jnDYJsvx5ai/za/7gWO9XoSeFFtU06/ZCaRgyilfJOjaopD3nOpk2WrTCGOyeDt4hleUiGOAnd5tHNg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.64.1.tgz",
+      "integrity": "sha512-ttQF6Rp4MrNy9/2AOPmHmMXbNE8kIlNPYoGC3ksid9tonleMQALfrhTFJiQxobBvXYKG5Wcc8VGcHWTHR0ik8w==",
       "cpu": [
         "arm64"
       ],
@@ -843,9 +843,9 @@
       ]
     },
     "node_modules/@rollup/rollup-darwin-arm64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.64.0.tgz",
-      "integrity": "sha512-dRBZlbt2sEtF8Mn4MODThze9fIPdDoOhVSlXMAKy5dQbOYK9pOOoPY4Fat3OTtr0+8zbJo5TTZwlsfxY/kDNJg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.64.1.tgz",
+      "integrity": "sha512-MvzZ+qbBi5jrafURHsASUF1qW/58tOJFt/gFVJo2znQWrKX4CSf/Lt/qGONtoA4yHsNL5QzgdXMuITZxAs62Vg==",
       "cpu": [
         "arm64"
       ],
@@ -857,9 +857,9 @@
       ]
     },
     "node_modules/@rollup/rollup-darwin-x64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.64.0.tgz",
-      "integrity": "sha512-Y3whrJOMucfkhgNkvcM93M6j8C53iEAMmPMYD99C6G1kUy4ELigLWk9ar2/4aCBSRgsql0zdlOemLgW2m5GZgQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.64.1.tgz",
+      "integrity": "sha512-9uj1VBuiPK5ij/+g0mCK17X+V/4SbErvRQMXIQjZAtbl4VcUhv63RhPZsFSWHrCRkTd3FKDtaVTrtT0+8bIhhQ==",
       "cpu": [
         "x64"
       ],
@@ -871,9 +871,9 @@
       ]
     },
     "node_modules/@rollup/rollup-freebsd-arm64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.64.0.tgz",
-      "integrity": "sha512-S6S1GEzPjFF6IONYJX3AKt/799+8RgBgCcwRnUo+Ep1IvBxUbw5M51iU0TDdK2NWWVnSvCQ8yi6Em0fGASMOng==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.64.1.tgz",
+      "integrity": "sha512-FCoXm836IqcXWhWPRkqlLx3Hjnv9S7c8tg5MFwsgHB3aFCz1JjUy6b1ssrxEjEbqaHpnvRmNjUUHxsXuU85NYA==",
       "cpu": [
         "arm64"
       ],
@@ -885,9 +885,9 @@
       ]
     },
     "node_modules/@rollup/rollup-freebsd-x64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.64.0.tgz",
-      "integrity": "sha512-Ed1DPoFENkXj4IGzSB12SesV40iP6LxCCrbTIkSGIQBpOOxpBM+0kj62lmaeIHfMWTDoddqTOtqc7s8LYfn+Pw==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.64.1.tgz",
+      "integrity": "sha512-Xa6Oxo86Ilx1hq1vNb69541NOuUyhGEH3Sc0g7eGkfsfRblWh4hAa4Lj2GWwZyfUVYL+Z4xK3TxhwIuZ3fNPLg==",
       "cpu": [
         "x64"
       ],
@@ -899,9 +899,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm-gnueabihf": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.64.0.tgz",
-      "integrity": "sha512-J/6xhutJPtFyIkmHdf4olOdHHKH5kOJNumojdWn+Elv5ICEYTVOa362Vw27TxsK0BLzb1le3EDlO3UbvFK1lnQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.64.1.tgz",
+      "integrity": "sha512-Nkw7cVMu1yrczpzr42Mh1BZ5Ai5A4Fsz2Je/frbwHmazpQTJzP+qo7pNjdxHrxVj56ivKTJihNoN90OD1hGxBA==",
       "cpu": [
         "arm"
       ],
@@ -916,9 +916,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm-musleabihf": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.64.0.tgz",
-      "integrity": "sha512-G4L/Nnx59d2LvDoV/P4S5lZ7oVLT6hodOHMacqjiq2LL2gts86KbkEBTYL53+fBt0odhf7XPIbIATGoYiJctxg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.64.1.tgz",
+      "integrity": "sha512-JONaLM9mZPXbSetxMzYG3496qoJuWvG2ERCTrrVptfw/Fwe4UzrQoEx/mYEeZCRv/Xz0RldOLFeqDfqmH75/Zg==",
       "cpu": [
         "arm"
       ],
@@ -933,9 +933,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm64-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.64.0.tgz",
-      "integrity": "sha512-zF16pvJDEUksGYRbfnXne7pdklAyj2XDmJeYKgP93oq0cUyX9Y8O7lUo1R+IY1GagP/YBvCEDCe7eEcAKpw//g==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.64.1.tgz",
+      "integrity": "sha512-OfimHma+prmdoobHI3tfYud2enQ2LXYaMu+iMUQH7IjJkykJ6qUmAs1M/scdQaEKRWysiKwTctsDa2LXvaO0xw==",
       "cpu": [
         "arm64"
       ],
@@ -950,9 +950,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm64-musl": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.64.0.tgz",
-      "integrity": "sha512-nIggWn8n+w12+R5lsV+PYYoUY8vuObxPAQqJI7WES+9v0qspYuAHoZMfYM0yLxlipasT5BY9ht5W8t5c/rSCkg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.64.1.tgz",
+      "integrity": "sha512-X5fwh2HM8EHbgfFwpf4m2x2pG/AHdQ2aPDPk+JCDwV4DPeM8yxYmKG1vvm123JSc9gBSu8tu9NECA99wHPztsw==",
       "cpu": [
         "arm64"
       ],
@@ -967,9 +967,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-loong64-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.64.0.tgz",
-      "integrity": "sha512-WLOTiHPzszP0dxIMsHpFeDSOSB5I49Mj8K4+yKE3H1X/D0JRG5XZ5jrctJLMjnUc/LUzaKiwq6EHWNJ8pup8PA==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.64.1.tgz",
+      "integrity": "sha512-8dp2TxKdjiX/4f7Da9gF7BR29hygxOQlHxKNa8qxJHoqZ13ytrogFTpMPhtVEFrgFu9MSOabAn006PeoygavjA==",
       "cpu": [
         "loong64"
       ],
@@ -984,9 +984,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-loong64-musl": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.64.0.tgz",
-      "integrity": "sha512-35RK9aRhh7g7Pmeu5gQ01aCvrhXzj9LoBE6xtUcEH1ns+nyTaSzxSpADmBQINu4QiTDGvmQYwo1j5hlg1rRXFw==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.64.1.tgz",
+      "integrity": "sha512-YuYDpRSZnU9qLf6sqyhiBdMRCw5ImECGLNqRjM2hZrJIEwAckameWkRJ3SUnn0oxSewZIib/4iLwyEXj40QqQQ==",
       "cpu": [
         "loong64"
       ],
@@ -1001,9 +1001,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-ppc64-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.64.0.tgz",
-      "integrity": "sha512-RqTfnpoTjuWfPAmqK5p2edt2AMCDJWm6oTn7sKfmyx+6tRga0ip05SJ977o6udTcIiDeF/CJMUfkaN4gtWt6Aw==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.64.1.tgz",
+      "integrity": "sha512-gGj3v7YYkysy7IbfclMI4PDtHaa6YX4nU1D5NR1fyvXAGqM4TDk28ZWvrpOkkK92eoQRryAludWz6jNjsm77Qg==",
       "cpu": [
         "ppc64"
       ],
@@ -1018,9 +1018,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-ppc64-musl": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.64.0.tgz",
-      "integrity": "sha512-RQjZPigjxFvFZDijG6rjlSXxhRaTf9zLYVpGK+lVcga64oMqP1GbgVqCb46eHTTceSIgp89Ja0y5aPe3GFBYHg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.64.1.tgz",
+      "integrity": "sha512-DTZVwvS94FUYpP0CjCfz2iT0XTmBfQGc/arx9IdwUbDImpe9h8dWuMT/oPUvcGiwLKMQoNmuFBx3AVajm+FNjA==",
       "cpu": [
         "ppc64"
       ],
@@ -1035,9 +1035,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-riscv64-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.64.0.tgz",
-      "integrity": "sha512-tjL58mgQcTRnDRpeky+Sth1MKQeYi2Ct6r3Luq9E5aTSjnM/i/JbozqZkKqp9thM5+oDSZxo+05f9kdQedfTGA==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.64.1.tgz",
+      "integrity": "sha512-NWnyiq2moc8iEHGyTjIFadJTy8VCvCU/rUBfor+3l30JOQKAifpmKdxX4ZxRRPSPE/rLhFpLADdzNjS3Ldctdw==",
       "cpu": [
         "riscv64"
       ],
@@ -1052,9 +1052,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-riscv64-musl": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.64.0.tgz",
-      "integrity": "sha512-ictoRyVaoZ8C67myHef+8hhCa6IplXJJ/xUCkVCxziV4zxMZh+jvhkhGsPBLqj1S72fnqD0QH5zL4lcaa4X7DQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.64.1.tgz",
+      "integrity": "sha512-yIz+7L37g7bVOGLaUQmGqiYADH262krL4dtf5zU6QGldPgOairLEgW1FTs5pP0UFkHq5uf2qxDttOFsVAX6kxg==",
       "cpu": [
         "riscv64"
       ],
@@ -1069,9 +1069,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-s390x-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.64.0.tgz",
-      "integrity": "sha512-8aVvZ2hfr9RLFzBQkQNmYeHLDja8fLeQAmLt757zdKN/B+8L809KlLJKctQjS22wZotptV8G6o7fVPuAs8S1tQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.64.1.tgz",
+      "integrity": "sha512-sRK+GWovJZV6ijyV/k1Ft3FL5+4DscF5OYsJolTbhVTTLFxKOPVjS0wxUUHakvL0vRw/cbFxZNeZLfM/EzuQhA==",
       "cpu": [
         "s390x"
       ],
@@ -1086,9 +1086,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-x64-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.64.0.tgz",
-      "integrity": "sha512-2dEF8GAcDKwshUfydD+GhosppNyBzhVUHkdFF3CXd3FpOkzj/RZzF5aoEtzklujklT5qFVRU2GK/cFeLaTNKVg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.64.1.tgz",
+      "integrity": "sha512-T2C0NXqqD063yJdm8UGdcoudBATDODdphEXWS7rEoh0jOITfoEBv7LHfRBYVsy+pI7wwxgScoZpkFiQOf40ryQ==",
       "cpu": [
         "x64"
       ],
@@ -1103,9 +1103,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-x64-musl": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.64.0.tgz",
-      "integrity": "sha512-3XHTvoo2hKkh0MiOfS7SkhHjMaaWF7P4F3drocZZaho/Z8w7h/jpnuBHm91BOQLfvrKHs1yR+zir4E8RI3XzTQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.64.1.tgz",
+      "integrity": "sha512-05wl8uRZMkcobB6YZrzskr2SiM0VOdzlFw3bAxOjKKTt3M6o3O0X/hE/8xk15u8oQY17xUCdTKcNMMg45ZAFog==",
       "cpu": [
         "x64"
       ],
@@ -1120,9 +1120,9 @@
       ]
     },
     "node_modules/@rollup/rollup-openbsd-x64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.64.0.tgz",
-      "integrity": "sha512-HKtkzodL4a3KFWDXDoO61cRynAWTR3LnAE0oGtfG9lcNFpNuVYUFOByxDgNqEvic9rvaQbAj+SFwTEWDptRaIw==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.64.1.tgz",
+      "integrity": "sha512-NoRZK1VclOgn9x3b9vPJ3sTxwvQ/F+Hf93xurRKSFJKiwNZyQZnLxVpqlCejhDvesMLMF8VNN+Y4jHTFddV/Xg==",
       "cpu": [
         "x64"
       ],
@@ -1134,9 +1134,9 @@
       ]
     },
     "node_modules/@rollup/rollup-openharmony-arm64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.64.0.tgz",
-      "integrity": "sha512-JBsxqiY16uyyCujtoC3s7zL+SrYyNElptD7K4V+KUoJ2V8/XG3hPWpheK+SuPwNh1cikJvIZmIdsrYXvD6PLJw==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.64.1.tgz",
+      "integrity": "sha512-SDkX4OkZBePUPf0/XsXVJLwS+O61CmkDKuIyk5CeWddK3vkE8AZjmWK+p1ILRez4wnbS5rTK+U9YmcbRyx2dHw==",
       "cpu": [
         "arm64"
       ],
@@ -1148,9 +1148,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-arm64-msvc": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.64.0.tgz",
-      "integrity": "sha512-S5Qrijh37qhnUYQ0ay8WN3LuWeKjow7wTUyCOPMZtnXiBXYXdsZETI6ZLfYnQAKovltckPLBFdNeD61P2rJc7g==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.64.1.tgz",
+      "integrity": "sha512-JQ7el/Plr3juYFxIVu9YXDPNl57XR2L8WIc87JX9wj0L3goV8fXQPQXb3DaHVXq61X/WCGWsTCQsQHo6/Mz5UQ==",
       "cpu": [
         "arm64"
       ],
@@ -1162,9 +1162,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-ia32-msvc": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.64.0.tgz",
-      "integrity": "sha512-zbZ6iMmLFEsCtTdc2/y1F/cDFVNNCPF7Ae8PCT/wdPE//hGwYp6r+MyCLMFX+kOeIe09Pz6ASfnnfpSTN1FJQQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.64.1.tgz",
+      "integrity": "sha512-oZSlQ2H3ZDOz3ce1jEyuOZKuD0tPY/D2cKGMcMl0jhHQauBvkHHKAGR1OeRiMluvu3itzLRU2xCTUZptLayObA==",
       "cpu": [
         "ia32"
       ],
@@ -1176,9 +1176,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-x64-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.64.0.tgz",
-      "integrity": "sha512-L6Hw69oNpuYaOr1zCG30v0/DqKYCSRwodPGwIcVZ/6f8SOzq9rxtL/xNVI5MO4wjli+Ko0ErK9uHJL3mNPt8wQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.64.1.tgz",
+      "integrity": "sha512-Do2m3jUeVAvUDpee/yVZYRqhO8Ecx4x5sX3EVGalqLx+OxecLDGx3sIwPEm1Nq+MFK2FV3pgdpwWP4624b85Og==",
       "cpu": [
         "x64"
       ],
@@ -1190,9 +1190,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-x64-msvc": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.64.0.tgz",
-      "integrity": "sha512-nl+CTWIgOGszQmUz/kanfgrfFZ4qiwxKIfT/ryl3N3Ewk5tqizmYtNXiqb7Bu/fDtNgu1kyxdFiAUJNur3iysg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.64.1.tgz",
+      "integrity": "sha512-KpxCwRn1Qh3tmBHAqIAF4HtUCVKqZd0w57TsItWblx3QVeJLtXaSgeBFAj1WAvBSpBo+Mh9iZCjj6YW/HaBVMw==",
       "cpu": [
         "x64"
       ],
@@ -3174,9 +3174,9 @@
       }
     },
     "node_modules/rollup": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.64.0.tgz",
-      "integrity": "sha512-gjA/kFeDfffII8COoPsvLPvE16hWDTEc1+0QKQNKUkuV8iJjqsC4xXs8/FzuL0v9EV39kuxTbAgcFoTRyy2TGQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.64.1.tgz",
+      "integrity": "sha512-7s4V+3J8ux75WNj9qwSJnrWmlCmZ2YHr2fojtHy5RiIMvhJv6DGe7HKKz7L6G1sq1Eg1fLC8SjYtAtDis1F4CQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -3191,31 +3191,31 @@
       },
       "optionalDependencies": {
         "@napi-rs/lzma-linux-x64-gnu": "1.5.1",
-        "@rollup/rollup-android-arm-eabi": "4.64.0",
-        "@rollup/rollup-android-arm64": "4.64.0",
-        "@rollup/rollup-darwin-arm64": "4.64.0",
-        "@rollup/rollup-darwin-x64": "4.64.0",
-        "@rollup/rollup-freebsd-arm64": "4.64.0",
-        "@rollup/rollup-freebsd-x64": "4.64.0",
-        "@rollup/rollup-linux-arm-gnueabihf": "4.64.0",
-        "@rollup/rollup-linux-arm-musleabihf": "4.64.0",
-        "@rollup/rollup-linux-arm64-gnu": "4.64.0",
-        "@rollup/rollup-linux-arm64-musl": "4.64.0",
-        "@rollup/rollup-linux-loong64-gnu": "4.64.0",
-        "@rollup/rollup-linux-loong64-musl": "4.64.0",
-        "@rollup/rollup-linux-ppc64-gnu": "4.64.0",
-        "@rollup/rollup-linux-ppc64-musl": "4.64.0",
-        "@rollup/rollup-linux-riscv64-gnu": "4.64.0",
-        "@rollup/rollup-linux-riscv64-musl": "4.64.0",
-        "@rollup/rollup-linux-s390x-gnu": "4.64.0",
-        "@rollup/rollup-linux-x64-gnu": "4.64.0",
-        "@rollup/rollup-linux-x64-musl": "4.64.0",
-        "@rollup/rollup-openbsd-x64": "4.64.0",
-        "@rollup/rollup-openharmony-arm64": "4.64.0",
-        "@rollup/rollup-win32-arm64-msvc": "4.64.0",
-        "@rollup/rollup-win32-ia32-msvc": "4.64.0",
-        "@rollup/rollup-win32-x64-gnu": "4.64.0",
-        "@rollup/rollup-win32-x64-msvc": "4.64.0",
+        "@rollup/rollup-android-arm-eabi": "4.64.1",
+        "@rollup/rollup-android-arm64": "4.64.1",
+        "@rollup/rollup-darwin-arm64": "4.64.1",
+        "@rollup/rollup-darwin-x64": "4.64.1",
+        "@rollup/rollup-freebsd-arm64": "4.64.1",
+        "@rollup/rollup-freebsd-x64": "4.64.1",
+        "@rollup/rollup-linux-arm-gnueabihf": "4.64.1",
+        "@rollup/rollup-linux-arm-musleabihf": "4.64.1",
+        "@rollup/rollup-linux-arm64-gnu": "4.64.1",
+        "@rollup/rollup-linux-arm64-musl": "4.64.1",
+        "@rollup/rollup-linux-loong64-gnu": "4.64.1",
+        "@rollup/rollup-linux-loong64-musl": "4.64.1",
+        "@rollup/rollup-linux-ppc64-gnu": "4.64.1",
+        "@rollup/rollup-linux-ppc64-musl": "4.64.1",
+        "@rollup/rollup-linux-riscv64-gnu": "4.64.1",
+        "@rollup/rollup-linux-riscv64-musl": "4.64.1",
+        "@rollup/rollup-linux-s390x-gnu": "4.64.1",
+        "@rollup/rollup-linux-x64-gnu": "4.64.1",
+        "@rollup/rollup-linux-x64-musl": "4.64.1",
+        "@rollup/rollup-openbsd-x64": "4.64.1",
+        "@rollup/rollup-openharmony-arm64": "4.64.1",
+        "@rollup/rollup-win32-arm64-msvc": "4.64.1",
+        "@rollup/rollup-win32-ia32-msvc": "4.64.1",
+        "@rollup/rollup-win32-x64-gnu": "4.64.1",
+        "@rollup/rollup-win32-x64-msvc": "4.64.1",
         "fsevents": "~2.3.2"
       }
     },