@snowyroad/braid 0.98.1 → 0.98.2

package/dist/{chunk-3SHZYLWH.js → chunk-SAUKTY6P.js}

@@ -400,7 +400,7 @@ var InviteExpiredError = class extends Error {
   }
 };
 async function redeemInvite(relayHttpUrl, code) {
-  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-7QNDIXBN.js");
+  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-SAC6PMXK.js");
   const r = await boundedJsonFetch2(`${relayHttpUrl.replace(/\/$/, "")}/invites/redeem`, {
     method: "POST",
     headers: { "content-type": "application/json" },
@@ -492,7 +492,7 @@ function validateReplacementToken(newToken, currentToken, nowMs = Date.now()) {
   return { ok: true };
 }
 async function mintAccessToken(relayHttpUrl, agentKey, fetchFn = fetch, dpopProof) {
-  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-7QNDIXBN.js");
+  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-SAC6PMXK.js");
   const r = await boundedJsonFetch2(`${relayHttpUrl.replace(/\/$/, "")}/agents/token`, {
     method: "POST",
     headers: {
@@ -2114,6 +2114,19 @@ var AcpClient = class {
   get exited() {
     return this.exitError;
   }
+  /** D15 (git gateway): the mode of the most recently started turn (its override, else the
+   *  standing policy). Set in runTurn and deliberately NOT cleared when the turn settles:
+   *  claude-agent-acp runs autonomous model cycles between prompts (a background Bash
+   *  task's completion notification triggers a follow-up), and those must keep the
+   *  narrowing of the turn that started them. Reset by the next turn and by start(). */
+  lastTurnMode;
+  /** D15 (git gateway): the mode the broker's git readonly gate applies right now: the
+   *  running turn's override, else the last turn's mode (persisted between turns, see
+   *  lastTurnMode), else the standing policy. RESIDUAL: a background task started in a
+   *  readonly turn whose follow-up lands during a LATER full turn is judged full. */
+  effectiveToolMode() {
+    return this.currentTurnOverrideMode ?? this.lastTurnMode ?? this.policy.mode;
+  }
   /**
    * Spawn the adapter, build the connection, initialize, and open one session.
    * Any failure (spawn error, premature exit, protocol error) rejects.
@@ -2124,6 +2137,7 @@ var AcpClient = class {
     this.activeTurnBuffer = null;
     this.turnQueue = Promise.resolve();
     this.currentTurnOverrideMode = void 0;
+    this.lastTurnMode = void 0;
     this.exitRejecters.clear();
     try {
       await this.withWarmupCeiling(this.startInner());
@@ -2433,6 +2447,7 @@ var AcpClient = class {
     };
     this.activeTurnBuffer = buffer;
     this.currentTurnOverrideMode = overrideMode;
+    this.lastTurnMode = overrideMode ?? this.policy.mode;
     try {
       const resp = await this.guard(
         this.conn.prompt({
@@ -5817,6 +5832,18 @@ var RelayClient = class _RelayClient {
 };
 
 // src/mcp/broker.ts
+var CHANNEL_RESTRICTS = "This channel or message also restricts the agent to read-only, so a channel admin must allow writes too.";
+function gitReadonlyRefusal(cause, agentName, channelAlsoReadonly = false) {
+  if (cause === "channel") {
+    return {
+      error: "git_readonly",
+      text: "Git tools need full tool mode, and this turn runs read-only because this channel or message restricts the agent. Do not retry git in this turn."
+    };
+  }
+  const name = agentName && isShellSafeName(agentName) ? agentName : "<agent-name>";
+  const text = `Git tools need full tool mode. Do not retry. The operator can stop the bridge, run \`braid tools full ${name}\`, then start it again.` + (channelAlsoReadonly ? ` ${CHANNEL_RESTRICTS}` : "");
+  return { error: "git_readonly", text };
+}
 var MAX_NOTE_CHARS = 2e3;
 var MAX_PRIVATE_MEMORY_CONTENT_CHARS = 2e3;
 var MAX_REFLECTION_FIELD_CHARS = 2e3;
@@ -5858,6 +5885,16 @@ var SourceBroker = class {
   setGitEnabled(enabled) {
     this.gitDisabledDepth = Math.max(0, this.gitDisabledDepth + (enabled ? -1 : 1));
   }
+  /** D15: git routes need the session's EFFECTIVE tool mode to be full (standing mode,
+   *  narrowed by any per-turn readonly override). Read on every /git/ request. FAIL-CLOSED:
+   *  until a source is wired, every /git/ route answers 403 git_readonly. The bridge wires
+   *  it to ChannelSession.currentToolMode. */
+  toolModeSource = () => ({ mode: "readonly", cause: "operator" });
+  agentName;
+  setToolModeSource(source, agentName) {
+    this.toolModeSource = source;
+    this.agentName = agentName;
+  }
   async start() {
     if (this.server) throw new Error("SourceBroker already started");
     const isWin32 = this.platform === "win32";
@@ -5900,6 +5937,8 @@ var SourceBroker = class {
   // The /git/ routes (git gateway, D6/D7) are write and egress routes; they ARE gated
   // off lisa fresh turns: ChannelSession.onLisaFreshTurn calls setGitEnabled(false)
   // for the turn's duration, so a critic or builder round gets 403 git_disabled_for_turn (D15).
+  // They are also refused (403 git_readonly) whenever the session's effective tool mode is
+  // readonly, read per request from setToolModeSource (D15).
   async handle(req, res) {
     const send = (status, body2) => {
       const s = JSON.stringify(body2);
@@ -6154,6 +6193,8 @@ var SourceBroker = class {
       if (req.url?.startsWith("/git/")) {
         if (!this.gateway) return send(404, { error: "unknown route" });
         if (this.gitDisabledDepth > 0) return send(403, { error: "git_disabled_for_turn", text: "Git tools are unavailable during this turn." });
+        const { mode, cause, channelAlsoReadonly } = this.toolModeSource();
+        if (mode !== "full") return send(403, gitReadonlyRefusal(cause, this.agentName, channelAlsoReadonly));
         const str = (v) => typeof v === "string" ? v : void 0;
         const pathArg = str(body.path);
         if (req.url === "/git/pr/merge") {
@@ -6813,6 +6854,10 @@ var AcpAdapter = class {
       // --- Local session handoff (verified providers only; see interactiveResumeSpecFor) ---
       // liveSessionId is the ACP session id, which for claude IS the native `--resume` id.
       liveSessionId: () => this.client?.sessionId ?? null,
+      // D15: the client's enforced mode (running turn's override, else the last turn's mode,
+      // else standing), for the broker's git gate. Unconditional and fail-closed: a client
+      // that cannot report its mode reads as readonly.
+      effectiveToolMode: () => this.client?.effectiveToolMode?.() ?? "readonly",
       // Fully release the headless subprocess so an interactive `claude --resume` can own the
       // single-writer transcript. Set the guard FIRST so any in-flight/racing turn short-circuits.
       handoffPause: async () => {
@@ -7164,6 +7209,8 @@ var ClaudeAdapter = class {
       onTurn(cb) {
         turnCbs.push(cb);
       },
+      // D15: same head-of-queue mode canUseTool applies (override ?? standing).
+      effectiveToolMode: () => overrideQueue[0] ?? policy.mode,
       async stop() {
         input.end();
         try {

package/dist/cli.js

@@ -88,7 +88,7 @@ import {
   validateRelayWsUrl,
   withAgentGitEnv,
   wsToHttp
-} from "./chunk-3SHZYLWH.js";
+} from "./chunk-SAUKTY6P.js";
 import {
   clampUntrusted,
   externalSourceLabel,
@@ -821,6 +821,21 @@ Here is the recent discussion so far ` : `You just joined this Braid channel. He
   liveSessionId() {
     return this.session?.liveSessionId?.() ?? null;
   }
+  /** D15 (git gateway): the tool mode in force right now, for the broker's git readonly
+   *  gate. Narrowest of the adapter's live mode (the running turn's per-turn override,
+   *  else standing), the operator's standing mode, and the channel's last bound bundle
+   *  mode, so it can only narrow. `cause` mirrors flowModeAndCause: "channel" when the
+   *  operator granted full but this turn or channel is narrowed (BL-203: then
+   *  `braid tools full` is the wrong remedy). `channelAlsoReadonly`: the operator is readonly
+   *  AND the channel's bound bundle is readonly, so the refusal names both remedies. (A
+   *  Slack-origin turn under a readonly operator enqueues no override, so it is not seen
+   *  here; the operator remedy is still shown.) */
+  currentToolMode() {
+    const mode = narrowestMode(this.session?.effectiveToolMode?.(), this.toolMode, this.lastBundleMode);
+    const cause = mode === "readonly" && this.toolMode !== "readonly" ? "channel" : "operator";
+    const channelAlsoReadonly = this.toolMode === "readonly" && this.lastBundleMode === "readonly";
+    return { mode, cause, channelAlsoReadonly };
+  }
   /** True while a dispatched turn has not yet settled (its onTurn hasn't fired).
    *  The take-control banner uses this to warn that taking over interrupts work
    *  (which then re-runs via the hand-back catch-up). */
@@ -3681,6 +3696,7 @@ async function startBridge(cfg, relay, deps) {
         broker.setGitEnabled(!active);
         gitGateway.setChannelGitEnabled(channelId, !active);
       };
+      broker.setToolModeSource(() => session.currentToolMode(), cfg.agentName);
       const brokerInfo = await broker.start();
       const allowedReactions = await relay.fetchAllowedReactions?.().catch(() => []) ?? [];
       const mcpServers = [{

package/dist/{http-7QNDIXBN.js → http-SAC6PMXK.js}

@@ -4,7 +4,7 @@ import {
   boundedJsonFetch,
   resetHttpMetricsForTest,
   snapshotHttpMetrics
-} from "./chunk-3SHZYLWH.js";
+} from "./chunk-SAUKTY6P.js";
 import "./chunk-HQNAAXUM.js";
 export {
   assertHttpEndpoint,

package/dist/mcp/server.js

@@ -971,7 +971,7 @@ async function main() {
   server.registerTool(
     "braid_git_status",
     {
-      description: "Show the GitHub repository this agent may act on through Braid (granted by its owner), the autonomy mode, the current branch and HEAD, and how far it is from the remote. Read-only. Use before braid_git_push.",
+      description: "Show the GitHub repository this agent may act on through Braid (granted by its owner), the autonomy mode, the current branch and HEAD, and how far it is from the remote. Read-only. Use before braid_git_push. All Braid git tools (this one included) need full tool mode: in read-only mode every one is refused, so do not retry; tell the operator instead.",
       inputSchema: { path: gitPath }
     },
     async (args) => ({ content: [{ type: "text", text: await tools.braidGitStatus(args) }] })
@@ -979,7 +979,7 @@ async function main() {
   server.registerTool(
     "braid_git_fetch",
     {
-      description: "Fetch the granted repository's branches into the current worktree under refs/remotes/braid/* (for example braid/main). Braid runs git outside the sandbox with a credential you never see.",
+      description: "Fetch the granted repository's branches into the current worktree under refs/remotes/braid/* (for example braid/main). Braid runs git outside the sandbox with a credential you never see. Needs full tool mode; in read-only mode it is refused, so do not retry.",
       inputSchema: { path: gitPath }
     },
     async (args) => ({ content: [{ type: "text", text: await tools.braidGitFetch(args) }] })
@@ -987,7 +987,7 @@ async function main() {
   server.registerTool(
     "braid_git_push",
     {
-      description: "Push a local commit (default HEAD of the worktree) to a branch of the granted repository. Braid runs the push outside the sandbox with a credential you never see and enforces the owner's rules: fast-forward only, no deletes or tags; in pr-only mode only branches under braid/<agent>/ and never the default branch; .github/workflows changes only if the owner allowed them. On refusal the text tells you what to ask the owner for.",
+      description: "Push a local commit (default HEAD of the worktree) to a branch of the granted repository. Braid runs the push outside the sandbox with a credential you never see and enforces the owner's rules: fast-forward only, no deletes or tags; in pr-only mode only branches under braid/<agent>/ and never the default branch; .github/workflows changes only if the owner allowed them. On refusal the text tells you what to ask the owner for. Needs full tool mode; in read-only mode it is refused, so do not retry.",
       inputSchema: {
         path: gitPath,
         branch: z.string(),
@@ -999,7 +999,7 @@ async function main() {
   server.registerTool(
     "braid_open_pr",
     {
-      description: "Open a pull request from a branch you pushed to the granted repository (draft in pr-only mode). Returns the PR number and URL.",
+      description: "Open a pull request from a branch you pushed to the granted repository (draft in pr-only mode). Returns the PR number and URL. Needs full tool mode; in read-only mode it is refused, so do not retry.",
       inputSchema: {
         path: gitPath,
         branch: z.string(),
@@ -1013,7 +1013,7 @@ async function main() {
   server.registerTool(
     "braid_merge_pr",
     {
-      description: "Merge a pull request in the granted repository. Allowed only when the owner set autonomous mode; in pr-only mode a human merges. method is squash (default), merge, or rebase.",
+      description: "Merge a pull request in the granted repository. Allowed only when the owner set autonomous mode; in pr-only mode a human merges. method is squash (default), merge, or rebase. Needs full tool mode; in read-only mode it is refused, so do not retry.",
       inputSchema: {
         number: z.number().int(),
         method: z.enum(["merge", "squash", "rebase"]).optional()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.98.1",
+  "version": "0.98.2",
   "description": "Braid: connect your own coding agent (Claude Code, Codex, Gemini, Grok) to a Braid channel and collaborate with other agents and humans.",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "SnowyRoad",

package/service-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.98.1",
+  "version": "0.98.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@snowyroad/braid",
-      "version": "0.98.1",
+      "version": "0.98.2",
       "license": "SEE LICENSE IN LICENSE.md",
       "dependencies": {
         "@agentclientprotocol/sdk": "0.25.1",
@@ -247,9 +247,9 @@
       }
     },
     "node_modules/@babel/runtime": {
-      "version": "7.29.7",
-      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.7.tgz",
-      "integrity": "sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==",
+      "version": "7.29.10",
+      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.10.tgz",
+      "integrity": "sha512-NpugTzbKgGrNe45Ui32cN8vCFFMxVtP/9rtfwv0nP5FRDAjvYBxJcLVpYA9mr1jxP6cnIT7x9LUzuDTbWYYNRA==",
       "license": "MIT",
       "engines": {
         "node": ">=6.9.0"
@@ -815,9 +815,9 @@
       "license": "MIT"
     },
     "node_modules/@rollup/rollup-android-arm-eabi": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.64.0.tgz",
-      "integrity": "sha512-FLLpX941CD/7aBvX3GqLGBM9OvY5PGXTryPJkG5r5/OuBpZpV5k45Uo3RxAvqd35tsyc3hH1bhtz921IKzoIzg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.64.1.tgz",
+      "integrity": "sha512-QRU7UpoS9hd8Ij5I6fCVBxZ0UpdfAbZ5y7BWG5STFGMoM9jGzUP464yYAa3CzZxvG+jBwq1kI8L07xx0ReAdGA==",
       "cpu": [
         "arm"
       ],
@@ -829,9 +829,9 @@
       ]
     },
     "node_modules/@rollup/rollup-android-arm64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.64.0.tgz",
-      "integrity": "sha512-iI32XM/jnDYJsvx5ai/za/7gWO9XoSeFFtU06/ZCaRgyilfJOjaopD3nOpk2WrTCGOyeDt4hleUiGOAnd5tHNg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.64.1.tgz",
+      "integrity": "sha512-ttQF6Rp4MrNy9/2AOPmHmMXbNE8kIlNPYoGC3ksid9tonleMQALfrhTFJiQxobBvXYKG5Wcc8VGcHWTHR0ik8w==",
       "cpu": [
         "arm64"
       ],
@@ -843,9 +843,9 @@
       ]
     },
     "node_modules/@rollup/rollup-darwin-arm64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.64.0.tgz",
-      "integrity": "sha512-dRBZlbt2sEtF8Mn4MODThze9fIPdDoOhVSlXMAKy5dQbOYK9pOOoPY4Fat3OTtr0+8zbJo5TTZwlsfxY/kDNJg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.64.1.tgz",
+      "integrity": "sha512-MvzZ+qbBi5jrafURHsASUF1qW/58tOJFt/gFVJo2znQWrKX4CSf/Lt/qGONtoA4yHsNL5QzgdXMuITZxAs62Vg==",
       "cpu": [
         "arm64"
       ],
@@ -857,9 +857,9 @@
       ]
     },
     "node_modules/@rollup/rollup-darwin-x64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.64.0.tgz",
-      "integrity": "sha512-Y3whrJOMucfkhgNkvcM93M6j8C53iEAMmPMYD99C6G1kUy4ELigLWk9ar2/4aCBSRgsql0zdlOemLgW2m5GZgQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.64.1.tgz",
+      "integrity": "sha512-9uj1VBuiPK5ij/+g0mCK17X+V/4SbErvRQMXIQjZAtbl4VcUhv63RhPZsFSWHrCRkTd3FKDtaVTrtT0+8bIhhQ==",
       "cpu": [
         "x64"
       ],
@@ -871,9 +871,9 @@
       ]
     },
     "node_modules/@rollup/rollup-freebsd-arm64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.64.0.tgz",
-      "integrity": "sha512-S6S1GEzPjFF6IONYJX3AKt/799+8RgBgCcwRnUo+Ep1IvBxUbw5M51iU0TDdK2NWWVnSvCQ8yi6Em0fGASMOng==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.64.1.tgz",
+      "integrity": "sha512-FCoXm836IqcXWhWPRkqlLx3Hjnv9S7c8tg5MFwsgHB3aFCz1JjUy6b1ssrxEjEbqaHpnvRmNjUUHxsXuU85NYA==",
       "cpu": [
         "arm64"
       ],
@@ -885,9 +885,9 @@
       ]
     },
     "node_modules/@rollup/rollup-freebsd-x64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.64.0.tgz",
-      "integrity": "sha512-Ed1DPoFENkXj4IGzSB12SesV40iP6LxCCrbTIkSGIQBpOOxpBM+0kj62lmaeIHfMWTDoddqTOtqc7s8LYfn+Pw==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.64.1.tgz",
+      "integrity": "sha512-Xa6Oxo86Ilx1hq1vNb69541NOuUyhGEH3Sc0g7eGkfsfRblWh4hAa4Lj2GWwZyfUVYL+Z4xK3TxhwIuZ3fNPLg==",
       "cpu": [
         "x64"
       ],
@@ -899,9 +899,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm-gnueabihf": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.64.0.tgz",
-      "integrity": "sha512-J/6xhutJPtFyIkmHdf4olOdHHKH5kOJNumojdWn+Elv5ICEYTVOa362Vw27TxsK0BLzb1le3EDlO3UbvFK1lnQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.64.1.tgz",
+      "integrity": "sha512-Nkw7cVMu1yrczpzr42Mh1BZ5Ai5A4Fsz2Je/frbwHmazpQTJzP+qo7pNjdxHrxVj56ivKTJihNoN90OD1hGxBA==",
       "cpu": [
         "arm"
       ],
@@ -916,9 +916,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm-musleabihf": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.64.0.tgz",
-      "integrity": "sha512-G4L/Nnx59d2LvDoV/P4S5lZ7oVLT6hodOHMacqjiq2LL2gts86KbkEBTYL53+fBt0odhf7XPIbIATGoYiJctxg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.64.1.tgz",
+      "integrity": "sha512-JONaLM9mZPXbSetxMzYG3496qoJuWvG2ERCTrrVptfw/Fwe4UzrQoEx/mYEeZCRv/Xz0RldOLFeqDfqmH75/Zg==",
       "cpu": [
         "arm"
       ],
@@ -933,9 +933,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm64-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.64.0.tgz",
-      "integrity": "sha512-zF16pvJDEUksGYRbfnXne7pdklAyj2XDmJeYKgP93oq0cUyX9Y8O7lUo1R+IY1GagP/YBvCEDCe7eEcAKpw//g==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.64.1.tgz",
+      "integrity": "sha512-OfimHma+prmdoobHI3tfYud2enQ2LXYaMu+iMUQH7IjJkykJ6qUmAs1M/scdQaEKRWysiKwTctsDa2LXvaO0xw==",
       "cpu": [
         "arm64"
       ],
@@ -950,9 +950,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm64-musl": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.64.0.tgz",
-      "integrity": "sha512-nIggWn8n+w12+R5lsV+PYYoUY8vuObxPAQqJI7WES+9v0qspYuAHoZMfYM0yLxlipasT5BY9ht5W8t5c/rSCkg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.64.1.tgz",
+      "integrity": "sha512-X5fwh2HM8EHbgfFwpf4m2x2pG/AHdQ2aPDPk+JCDwV4DPeM8yxYmKG1vvm123JSc9gBSu8tu9NECA99wHPztsw==",
       "cpu": [
         "arm64"
       ],
@@ -967,9 +967,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-loong64-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.64.0.tgz",
-      "integrity": "sha512-WLOTiHPzszP0dxIMsHpFeDSOSB5I49Mj8K4+yKE3H1X/D0JRG5XZ5jrctJLMjnUc/LUzaKiwq6EHWNJ8pup8PA==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.64.1.tgz",
+      "integrity": "sha512-8dp2TxKdjiX/4f7Da9gF7BR29hygxOQlHxKNa8qxJHoqZ13ytrogFTpMPhtVEFrgFu9MSOabAn006PeoygavjA==",
       "cpu": [
         "loong64"
       ],
@@ -984,9 +984,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-loong64-musl": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.64.0.tgz",
-      "integrity": "sha512-35RK9aRhh7g7Pmeu5gQ01aCvrhXzj9LoBE6xtUcEH1ns+nyTaSzxSpADmBQINu4QiTDGvmQYwo1j5hlg1rRXFw==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.64.1.tgz",
+      "integrity": "sha512-YuYDpRSZnU9qLf6sqyhiBdMRCw5ImECGLNqRjM2hZrJIEwAckameWkRJ3SUnn0oxSewZIib/4iLwyEXj40QqQQ==",
       "cpu": [
         "loong64"
       ],
@@ -1001,9 +1001,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-ppc64-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.64.0.tgz",
-      "integrity": "sha512-RqTfnpoTjuWfPAmqK5p2edt2AMCDJWm6oTn7sKfmyx+6tRga0ip05SJ977o6udTcIiDeF/CJMUfkaN4gtWt6Aw==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.64.1.tgz",
+      "integrity": "sha512-gGj3v7YYkysy7IbfclMI4PDtHaa6YX4nU1D5NR1fyvXAGqM4TDk28ZWvrpOkkK92eoQRryAludWz6jNjsm77Qg==",
       "cpu": [
         "ppc64"
       ],
@@ -1018,9 +1018,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-ppc64-musl": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.64.0.tgz",
-      "integrity": "sha512-RQjZPigjxFvFZDijG6rjlSXxhRaTf9zLYVpGK+lVcga64oMqP1GbgVqCb46eHTTceSIgp89Ja0y5aPe3GFBYHg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.64.1.tgz",
+      "integrity": "sha512-DTZVwvS94FUYpP0CjCfz2iT0XTmBfQGc/arx9IdwUbDImpe9h8dWuMT/oPUvcGiwLKMQoNmuFBx3AVajm+FNjA==",
       "cpu": [
         "ppc64"
       ],
@@ -1035,9 +1035,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-riscv64-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.64.0.tgz",
-      "integrity": "sha512-tjL58mgQcTRnDRpeky+Sth1MKQeYi2Ct6r3Luq9E5aTSjnM/i/JbozqZkKqp9thM5+oDSZxo+05f9kdQedfTGA==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.64.1.tgz",
+      "integrity": "sha512-NWnyiq2moc8iEHGyTjIFadJTy8VCvCU/rUBfor+3l30JOQKAifpmKdxX4ZxRRPSPE/rLhFpLADdzNjS3Ldctdw==",
       "cpu": [
         "riscv64"
       ],
@@ -1052,9 +1052,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-riscv64-musl": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.64.0.tgz",
-      "integrity": "sha512-ictoRyVaoZ8C67myHef+8hhCa6IplXJJ/xUCkVCxziV4zxMZh+jvhkhGsPBLqj1S72fnqD0QH5zL4lcaa4X7DQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.64.1.tgz",
+      "integrity": "sha512-yIz+7L37g7bVOGLaUQmGqiYADH262krL4dtf5zU6QGldPgOairLEgW1FTs5pP0UFkHq5uf2qxDttOFsVAX6kxg==",
       "cpu": [
         "riscv64"
       ],
@@ -1069,9 +1069,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-s390x-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.64.0.tgz",
-      "integrity": "sha512-8aVvZ2hfr9RLFzBQkQNmYeHLDja8fLeQAmLt757zdKN/B+8L809KlLJKctQjS22wZotptV8G6o7fVPuAs8S1tQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.64.1.tgz",
+      "integrity": "sha512-sRK+GWovJZV6ijyV/k1Ft3FL5+4DscF5OYsJolTbhVTTLFxKOPVjS0wxUUHakvL0vRw/cbFxZNeZLfM/EzuQhA==",
       "cpu": [
         "s390x"
       ],
@@ -1086,9 +1086,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-x64-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.64.0.tgz",
-      "integrity": "sha512-2dEF8GAcDKwshUfydD+GhosppNyBzhVUHkdFF3CXd3FpOkzj/RZzF5aoEtzklujklT5qFVRU2GK/cFeLaTNKVg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.64.1.tgz",
+      "integrity": "sha512-T2C0NXqqD063yJdm8UGdcoudBATDODdphEXWS7rEoh0jOITfoEBv7LHfRBYVsy+pI7wwxgScoZpkFiQOf40ryQ==",
       "cpu": [
         "x64"
       ],
@@ -1103,9 +1103,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-x64-musl": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.64.0.tgz",
-      "integrity": "sha512-3XHTvoo2hKkh0MiOfS7SkhHjMaaWF7P4F3drocZZaho/Z8w7h/jpnuBHm91BOQLfvrKHs1yR+zir4E8RI3XzTQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.64.1.tgz",
+      "integrity": "sha512-05wl8uRZMkcobB6YZrzskr2SiM0VOdzlFw3bAxOjKKTt3M6o3O0X/hE/8xk15u8oQY17xUCdTKcNMMg45ZAFog==",
       "cpu": [
         "x64"
       ],
@@ -1120,9 +1120,9 @@
       ]
     },
     "node_modules/@rollup/rollup-openbsd-x64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.64.0.tgz",
-      "integrity": "sha512-HKtkzodL4a3KFWDXDoO61cRynAWTR3LnAE0oGtfG9lcNFpNuVYUFOByxDgNqEvic9rvaQbAj+SFwTEWDptRaIw==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.64.1.tgz",
+      "integrity": "sha512-NoRZK1VclOgn9x3b9vPJ3sTxwvQ/F+Hf93xurRKSFJKiwNZyQZnLxVpqlCejhDvesMLMF8VNN+Y4jHTFddV/Xg==",
       "cpu": [
         "x64"
       ],
@@ -1134,9 +1134,9 @@
       ]
     },
     "node_modules/@rollup/rollup-openharmony-arm64": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.64.0.tgz",
-      "integrity": "sha512-JBsxqiY16uyyCujtoC3s7zL+SrYyNElptD7K4V+KUoJ2V8/XG3hPWpheK+SuPwNh1cikJvIZmIdsrYXvD6PLJw==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.64.1.tgz",
+      "integrity": "sha512-SDkX4OkZBePUPf0/XsXVJLwS+O61CmkDKuIyk5CeWddK3vkE8AZjmWK+p1ILRez4wnbS5rTK+U9YmcbRyx2dHw==",
       "cpu": [
         "arm64"
       ],
@@ -1148,9 +1148,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-arm64-msvc": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.64.0.tgz",
-      "integrity": "sha512-S5Qrijh37qhnUYQ0ay8WN3LuWeKjow7wTUyCOPMZtnXiBXYXdsZETI6ZLfYnQAKovltckPLBFdNeD61P2rJc7g==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.64.1.tgz",
+      "integrity": "sha512-JQ7el/Plr3juYFxIVu9YXDPNl57XR2L8WIc87JX9wj0L3goV8fXQPQXb3DaHVXq61X/WCGWsTCQsQHo6/Mz5UQ==",
       "cpu": [
         "arm64"
       ],
@@ -1162,9 +1162,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-ia32-msvc": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.64.0.tgz",
-      "integrity": "sha512-zbZ6iMmLFEsCtTdc2/y1F/cDFVNNCPF7Ae8PCT/wdPE//hGwYp6r+MyCLMFX+kOeIe09Pz6ASfnnfpSTN1FJQQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.64.1.tgz",
+      "integrity": "sha512-oZSlQ2H3ZDOz3ce1jEyuOZKuD0tPY/D2cKGMcMl0jhHQauBvkHHKAGR1OeRiMluvu3itzLRU2xCTUZptLayObA==",
       "cpu": [
         "ia32"
       ],
@@ -1176,9 +1176,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-x64-gnu": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.64.0.tgz",
-      "integrity": "sha512-L6Hw69oNpuYaOr1zCG30v0/DqKYCSRwodPGwIcVZ/6f8SOzq9rxtL/xNVI5MO4wjli+Ko0ErK9uHJL3mNPt8wQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.64.1.tgz",
+      "integrity": "sha512-Do2m3jUeVAvUDpee/yVZYRqhO8Ecx4x5sX3EVGalqLx+OxecLDGx3sIwPEm1Nq+MFK2FV3pgdpwWP4624b85Og==",
       "cpu": [
         "x64"
       ],
@@ -1190,9 +1190,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-x64-msvc": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.64.0.tgz",
-      "integrity": "sha512-nl+CTWIgOGszQmUz/kanfgrfFZ4qiwxKIfT/ryl3N3Ewk5tqizmYtNXiqb7Bu/fDtNgu1kyxdFiAUJNur3iysg==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.64.1.tgz",
+      "integrity": "sha512-KpxCwRn1Qh3tmBHAqIAF4HtUCVKqZd0w57TsItWblx3QVeJLtXaSgeBFAj1WAvBSpBo+Mh9iZCjj6YW/HaBVMw==",
       "cpu": [
         "x64"
       ],
@@ -3174,9 +3174,9 @@
       }
     },
     "node_modules/rollup": {
-      "version": "4.64.0",
-      "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.64.0.tgz",
-      "integrity": "sha512-gjA/kFeDfffII8COoPsvLPvE16hWDTEc1+0QKQNKUkuV8iJjqsC4xXs8/FzuL0v9EV39kuxTbAgcFoTRyy2TGQ==",
+      "version": "4.64.1",
+      "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.64.1.tgz",
+      "integrity": "sha512-7s4V+3J8ux75WNj9qwSJnrWmlCmZ2YHr2fojtHy5RiIMvhJv6DGe7HKKz7L6G1sq1Eg1fLC8SjYtAtDis1F4CQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -3191,31 +3191,31 @@
       },
       "optionalDependencies": {
         "@napi-rs/lzma-linux-x64-gnu": "1.5.1",
-        "@rollup/rollup-android-arm-eabi": "4.64.0",
-        "@rollup/rollup-android-arm64": "4.64.0",
-        "@rollup/rollup-darwin-arm64": "4.64.0",
-        "@rollup/rollup-darwin-x64": "4.64.0",
-        "@rollup/rollup-freebsd-arm64": "4.64.0",
-        "@rollup/rollup-freebsd-x64": "4.64.0",
-        "@rollup/rollup-linux-arm-gnueabihf": "4.64.0",
-        "@rollup/rollup-linux-arm-musleabihf": "4.64.0",
-        "@rollup/rollup-linux-arm64-gnu": "4.64.0",
-        "@rollup/rollup-linux-arm64-musl": "4.64.0",
-        "@rollup/rollup-linux-loong64-gnu": "4.64.0",
-        "@rollup/rollup-linux-loong64-musl": "4.64.0",
-        "@rollup/rollup-linux-ppc64-gnu": "4.64.0",
-        "@rollup/rollup-linux-ppc64-musl": "4.64.0",
-        "@rollup/rollup-linux-riscv64-gnu": "4.64.0",
-        "@rollup/rollup-linux-riscv64-musl": "4.64.0",
-        "@rollup/rollup-linux-s390x-gnu": "4.64.0",
-        "@rollup/rollup-linux-x64-gnu": "4.64.0",
-        "@rollup/rollup-linux-x64-musl": "4.64.0",
-        "@rollup/rollup-openbsd-x64": "4.64.0",
-        "@rollup/rollup-openharmony-arm64": "4.64.0",
-        "@rollup/rollup-win32-arm64-msvc": "4.64.0",
-        "@rollup/rollup-win32-ia32-msvc": "4.64.0",
-        "@rollup/rollup-win32-x64-gnu": "4.64.0",
-        "@rollup/rollup-win32-x64-msvc": "4.64.0",
+        "@rollup/rollup-android-arm-eabi": "4.64.1",
+        "@rollup/rollup-android-arm64": "4.64.1",
+        "@rollup/rollup-darwin-arm64": "4.64.1",
+        "@rollup/rollup-darwin-x64": "4.64.1",
+        "@rollup/rollup-freebsd-arm64": "4.64.1",
+        "@rollup/rollup-freebsd-x64": "4.64.1",
+        "@rollup/rollup-linux-arm-gnueabihf": "4.64.1",
+        "@rollup/rollup-linux-arm-musleabihf": "4.64.1",
+        "@rollup/rollup-linux-arm64-gnu": "4.64.1",
+        "@rollup/rollup-linux-arm64-musl": "4.64.1",
+        "@rollup/rollup-linux-loong64-gnu": "4.64.1",
+        "@rollup/rollup-linux-loong64-musl": "4.64.1",
+        "@rollup/rollup-linux-ppc64-gnu": "4.64.1",
+        "@rollup/rollup-linux-ppc64-musl": "4.64.1",
+        "@rollup/rollup-linux-riscv64-gnu": "4.64.1",
+        "@rollup/rollup-linux-riscv64-musl": "4.64.1",
+        "@rollup/rollup-linux-s390x-gnu": "4.64.1",
+        "@rollup/rollup-linux-x64-gnu": "4.64.1",
+        "@rollup/rollup-linux-x64-musl": "4.64.1",
+        "@rollup/rollup-openbsd-x64": "4.64.1",
+        "@rollup/rollup-openharmony-arm64": "4.64.1",
+        "@rollup/rollup-win32-arm64-msvc": "4.64.1",
+        "@rollup/rollup-win32-ia32-msvc": "4.64.1",
+        "@rollup/rollup-win32-x64-gnu": "4.64.1",
+        "@rollup/rollup-win32-x64-msvc": "4.64.1",
         "fsevents": "~2.3.2"
       }
     },