@zenbujs/core 0.0.5 → 0.0.8

package/dist/launcher.mjs

@@ -1,11 +1,11 @@
 import { createRequire } from "node:module";
-import { app } from "electron";
-import crypto$1 from "node:crypto";
-import { spawn } from "node:child_process";
+import { BaseWindow, WebContentsView, app } from "electron";
 import fs, { existsSync } from "node:fs";
 import fsp from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
+import crypto$1 from "node:crypto";
+import { spawn } from "node:child_process";
 //#region \0rolldown/runtime.js
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -317,7 +317,7 @@ var require_eval = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 }));
 //#endregion
 //#region ../../node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/range.js
-var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+var require_range$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	/** @type {import('./range')} */
 	module.exports = RangeError;
 }));
@@ -626,7 +626,7 @@ var require_get_intrinsic = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 	var $Object = require_es_object_atoms();
 	var $Error = require_es_errors();
 	var $EvalError = require_eval();
-	var $RangeError = require_range();
+	var $RangeError = require_range$1();
 	var $ReferenceError = require_ref();
 	var $SyntaxError = require_syntax();
 	var $TypeError = require_type();
@@ -5134,7 +5134,7 @@ var require_inflate$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 //#endregion
 //#region ../../node_modules/.pnpm/pako@1.0.11/node_modules/pako/lib/zlib/constants.js
-var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+var require_constants$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = {
 		Z_NO_FLUSH: 0,
 		Z_PARTIAL_FLUSH: 1,
@@ -5188,7 +5188,7 @@ var require_inflate = /* @__PURE__ */ __commonJSMin(((exports) => {
 	var zlib_inflate = require_inflate$1();
 	var utils = require_common();
 	var strings = require_strings();
-	var c = require_constants();
+	var c = require_constants$1();
 	var msg = require_messages();
 	var ZStream = require_zstream();
 	var GZheader = require_gzheader();
@@ -5488,7 +5488,7 @@ var require_pako = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var assign = require_common().assign;
 	var deflate = require_deflate();
 	var inflate = require_inflate();
-	var constants = require_constants();
+	var constants = require_constants$1();
 	var pako = {};
 	assign(pako, deflate, inflate, constants);
 	module.exports = pako;
@@ -10012,6 +10012,100 @@ ${obj.gpgsig ? obj.gpgsig : ""}`;
 			return ignoredStatus;
 		}
 	};
+	async function resolveCommit({ fs, cache, gitdir, oid }) {
+		const { type, object } = await _readObject({
+			fs,
+			cache,
+			gitdir,
+			oid
+		});
+		if (type === "tag") {
+			oid = GitAnnotatedTag.from(object).parse().object;
+			return resolveCommit({
+				fs,
+				cache,
+				gitdir,
+				oid
+			});
+		}
+		if (type !== "commit") throw new ObjectTypeError(oid, type, "commit");
+		return {
+			commit: GitCommit.from(object),
+			oid
+		};
+	}
+	/**
+	* @param {object} args
+	* @param {import('../models/FileSystem.js').FileSystem} args.fs
+	* @param {any} args.cache
+	* @param {string} args.gitdir
+	* @param {string} args.oid
+	*
+	* @returns {Promise<ReadCommitResult>} Resolves successfully with a git commit object
+	* @see ReadCommitResult
+	* @see CommitObject
+	*
+	*/
+	async function _readCommit({ fs, cache, gitdir, oid }) {
+		const { commit, oid: commitOid } = await resolveCommit({
+			fs,
+			cache,
+			gitdir,
+			oid
+		});
+		return {
+			oid: commitOid,
+			commit: commit.parse(),
+			payload: commit.withoutSignature()
+		};
+	}
+	async function resolveFilepath({ fs, cache, gitdir, oid, filepath }) {
+		if (filepath.startsWith("/")) throw new InvalidFilepathError("leading-slash");
+		else if (filepath.endsWith("/")) throw new InvalidFilepathError("trailing-slash");
+		const _oid = oid;
+		const result = await resolveTree({
+			fs,
+			cache,
+			gitdir,
+			oid
+		});
+		const tree = result.tree;
+		if (filepath === "") oid = result.oid;
+		else oid = await _resolveFilepath({
+			fs,
+			cache,
+			gitdir,
+			tree,
+			pathArray: filepath.split("/"),
+			oid: _oid,
+			filepath
+		});
+		return oid;
+	}
+	async function _resolveFilepath({ fs, cache, gitdir, tree, pathArray, oid, filepath }) {
+		const name = pathArray.shift();
+		for (const entry of tree) if (entry.path === name) if (pathArray.length === 0) return entry.oid;
+		else {
+			const { type, object } = await _readObject({
+				fs,
+				cache,
+				gitdir,
+				oid: entry.oid
+			});
+			if (type !== "tree") throw new ObjectTypeError(oid, type, "tree", filepath);
+			tree = GitTree.from(object);
+			return _resolveFilepath({
+				fs,
+				cache,
+				gitdir,
+				tree,
+				pathArray,
+				oid,
+				filepath
+			});
+		}
+		throw new NotFoundError(`file or directory found at "${oid}:${filepath}"`);
+	}
 	const bad = /(^|[/.])([/.]|$)|^@$|@{|[\x00-\x20\x7f~^:?*[\\]|\.lock(\/|$)/;
 	function isValidRef(name, onelevel) {
 		if (typeof name !== "string") throw new TypeError("Reference name must be a string");
@@ -11858,6 +11952,361 @@ ${obj.gpgsig ? obj.gpgsig : ""}`;
 			throw err;
 		}
 	}
+	function compareAge(a, b) {
+		return a.committer.timestamp - b.committer.timestamp;
+	}
+	const EMPTY_OID = "e69de29bb2d1d6434b8b29ae775ad8c2e48c5391";
+	async function resolveFileIdInTree({ fs, cache, gitdir, oid, fileId }) {
+		if (fileId === EMPTY_OID) return;
+		const _oid = oid;
+		let filepath;
+		const result = await resolveTree({
+			fs,
+			cache,
+			gitdir,
+			oid
+		});
+		const tree = result.tree;
+		if (fileId === result.oid) filepath = result.path;
+		else {
+			filepath = await _resolveFileId({
+				fs,
+				cache,
+				gitdir,
+				tree,
+				fileId,
+				oid: _oid
+			});
+			if (Array.isArray(filepath)) {
+				if (filepath.length === 0) filepath = void 0;
+				else if (filepath.length === 1) filepath = filepath[0];
+			}
+		}
+		return filepath;
+	}
+	async function _resolveFileId({ fs, cache, gitdir, tree, fileId, oid, filepaths = [], parentPath = "" }) {
+		const walks = tree.entries().map(function(entry) {
+			let result;
+			if (entry.oid === fileId) {
+				result = join(parentPath, entry.path);
+				filepaths.push(result);
+			} else if (entry.type === "tree") result = _readObject({
+				fs,
+				cache,
+				gitdir,
+				oid: entry.oid
+			}).then(function({ object }) {
+				return _resolveFileId({
+					fs,
+					cache,
+					gitdir,
+					tree: GitTree.from(object),
+					fileId,
+					oid,
+					filepaths,
+					parentPath: join(parentPath, entry.path)
+				});
+			});
+			return result;
+		});
+		await Promise.all(walks);
+		return filepaths;
+	}
+	/**
+	* Get commit descriptions from the git history
+	*
+	* @param {object} args
+	* @param {import('../models/FileSystem.js').FileSystem} args.fs
+	* @param {any} args.cache
+	* @param {string} args.gitdir
+	* @param {string=} args.filepath optional get the commit for the filepath only
+	* @param {string} args.ref
+	* @param {number|void} args.depth
+	* @param {boolean=} [args.force=false] do not throw error if filepath is not exist (works only for a single file). defaults to false
+	* @param {boolean=} [args.follow=false] Continue listing the history of a file beyond renames (works only for a single file). defaults to false
+	* @param {boolean=} args.follow Continue listing the history of a file beyond renames (works only for a single file). defaults to false
+	*
+	* @returns {Promise<Array<ReadCommitResult>>} Resolves to an array of ReadCommitResult objects
+	* @see ReadCommitResult
+	* @see CommitObject
+	*
+	* @example
+	* let commits = await git.log({ dir: '$input((/))', depth: $input((5)), ref: '$input((master))' })
+	* console.log(commits)
+	*
+	*/
+	async function _log({ fs, cache, gitdir, filepath, ref, depth, since, force, follow }) {
+		const sinceTimestamp = typeof since === "undefined" ? void 0 : Math.floor(since.valueOf() / 1e3);
+		const commits = [];
+		const shallowCommits = await GitShallowManager.read({
+			fs,
+			gitdir
+		});
+		const tips = [await _readCommit({
+			fs,
+			cache,
+			gitdir,
+			oid: await GitRefManager.resolve({
+				fs,
+				gitdir,
+				ref
+			})
+		})];
+		let lastFileOid;
+		let lastCommit;
+		let isOk;
+		function endCommit(commit) {
+			if (isOk && filepath) commits.push(commit);
+		}
+		while (tips.length > 0) {
+			const commit = tips.pop();
+			if (sinceTimestamp !== void 0 && commit.commit.committer.timestamp <= sinceTimestamp) break;
+			if (filepath) {
+				let vFileOid;
+				try {
+					vFileOid = await resolveFilepath({
+						fs,
+						cache,
+						gitdir,
+						oid: commit.commit.tree,
+						filepath
+					});
+					if (lastCommit && lastFileOid !== vFileOid) commits.push(lastCommit);
+					lastFileOid = vFileOid;
+					lastCommit = commit;
+					isOk = true;
+				} catch (e) {
+					if (e instanceof NotFoundError) {
+						let found = follow && lastFileOid;
+						if (found) {
+							found = await resolveFileIdInTree({
+								fs,
+								cache,
+								gitdir,
+								oid: commit.commit.tree,
+								fileId: lastFileOid
+							});
+							if (found) if (Array.isArray(found)) {
+								if (lastCommit) {
+									const lastFound = await resolveFileIdInTree({
+										fs,
+										cache,
+										gitdir,
+										oid: lastCommit.commit.tree,
+										fileId: lastFileOid
+									});
+									if (Array.isArray(lastFound)) {
+										found = found.filter((p) => lastFound.indexOf(p) === -1);
+										if (found.length === 1) {
+											found = found[0];
+											filepath = found;
+											if (lastCommit) commits.push(lastCommit);
+										} else {
+											found = false;
+											if (lastCommit) commits.push(lastCommit);
+											break;
+										}
+									}
+								}
+							} else {
+								filepath = found;
+								if (lastCommit) commits.push(lastCommit);
+							}
+						}
+						if (!found) {
+							if (isOk && lastFileOid) {
+								commits.push(lastCommit);
+								if (!force) break;
+							}
+							if (!force && !follow) throw e;
+						}
+						lastCommit = commit;
+						isOk = false;
+					} else throw e;
+				}
+			} else commits.push(commit);
+			if (depth !== void 0 && commits.length === depth) {
+				endCommit(commit);
+				break;
+			}
+			if (!shallowCommits.has(commit.oid)) for (const oid of commit.commit.parent) {
+				const commit = await _readCommit({
+					fs,
+					cache,
+					gitdir,
+					oid
+				});
+				if (!tips.map((commit) => commit.oid).includes(commit.oid)) tips.push(commit);
+			}
+			if (tips.length === 0) endCommit(commit);
+			tips.sort((a, b) => compareAge(a.commit, b.commit));
+		}
+		return commits;
+	}
+	/**
+	* Get commit descriptions from the git history
+	*
+	* @param {object} args
+	* @param {FsClient} args.fs - a file system client
+	* @param {string} [args.dir] - The [working tree](dir-vs-gitdir.md) directory path
+	* @param {string} [args.gitdir=join(dir,'.git')] - [required] The [git directory](dir-vs-gitdir.md) path
+	* @param {string=} args.filepath optional get the commit for the filepath only
+	* @param {string} [args.ref = 'HEAD'] - The commit to begin walking backwards through the history from
+	* @param {number=} [args.depth] - Limit the number of commits returned. No limit by default.
+	* @param {Date} [args.since] - Return history newer than the given date. Can be combined with `depth` to get whichever is shorter.
+	* @param {boolean=} [args.force=false] do not throw error if filepath is not exist (works only for a single file). defaults to false
+	* @param {boolean=} [args.follow=false] Continue listing the history of a file beyond renames (works only for a single file). defaults to false
+	* @param {object} [args.cache] - a [cache](cache.md) object
+	*
+	* @returns {Promise<Array<ReadCommitResult>>} Resolves to an array of ReadCommitResult objects
+	* @see ReadCommitResult
+	* @see CommitObject
+	*
+	* @example
+	* let commits = await git.log({
+	*   fs,
+	*   dir: '/tutorial',
+	*   depth: 5,
+	*   ref: 'main'
+	* })
+	* console.log(commits)
+	*
+	*/
+	async function log({ fs, dir, gitdir = join(dir, ".git"), filepath, ref = "HEAD", depth, since, force, follow, cache = {} }) {
+		try {
+			assertParameter("fs", fs);
+			assertParameter("gitdir", gitdir);
+			assertParameter("ref", ref);
+			const fsp = new FileSystem(fs);
+			return await _log({
+				fs: fsp,
+				cache,
+				gitdir: await discoverGitdir({
+					fsp,
+					dotgit: gitdir
+				}),
+				filepath,
+				ref,
+				depth,
+				since,
+				force,
+				follow
+			});
+		} catch (err) {
+			err.caller = "git.log";
+			throw err;
+		}
+	}
+	async function resolveBlob({ fs, cache, gitdir, oid }) {
+		const { type, object } = await _readObject({
+			fs,
+			cache,
+			gitdir,
+			oid
+		});
+		if (type === "tag") {
+			oid = GitAnnotatedTag.from(object).parse().object;
+			return resolveBlob({
+				fs,
+				cache,
+				gitdir,
+				oid
+			});
+		}
+		if (type !== "blob") throw new ObjectTypeError(oid, type, "blob");
+		return {
+			oid,
+			blob: new Uint8Array(object)
+		};
+	}
+	/**
+	*
+	* @typedef {Object} ReadBlobResult - The object returned has the following schema:
+	* @property {string} oid
+	* @property {Uint8Array} blob
+	*
+	*/
+	/**
+	* @param {object} args
+	* @param {import('../models/FileSystem.js').FileSystem} args.fs
+	* @param {any} args.cache
+	* @param {string} args.gitdir
+	* @param {string} args.oid
+	* @param {string} [args.filepath]
+	*
+	* @returns {Promise<ReadBlobResult>} Resolves successfully with a blob object description
+	* @see ReadBlobResult
+	*/
+	async function _readBlob({ fs, cache, gitdir, oid, filepath = void 0 }) {
+		if (filepath !== void 0) oid = await resolveFilepath({
+			fs,
+			cache,
+			gitdir,
+			oid,
+			filepath
+		});
+		return await resolveBlob({
+			fs,
+			cache,
+			gitdir,
+			oid
+		});
+	}
+	/**
+	*
+	* @typedef {Object} ReadBlobResult - The object returned has the following schema:
+	* @property {string} oid
+	* @property {Uint8Array} blob
+	*
+	*/
+	/**
+	* Read a blob object directly
+	*
+	* @param {object} args
+	* @param {FsClient} args.fs - a file system client
+	* @param {string} [args.dir] - The [working tree](dir-vs-gitdir.md) directory path
+	* @param {string} [args.gitdir=join(dir,'.git')] - [required] The [git directory](dir-vs-gitdir.md) path
+	* @param {string} args.oid - The SHA-1 object id to get. Annotated tags, commits, and trees are peeled.
+	* @param {string} [args.filepath] - Don't return the object with `oid` itself, but resolve `oid` to a tree and then return the blob object at that filepath.
+	* @param {object} [args.cache] - a [cache](cache.md) object
+	*
+	* @returns {Promise<ReadBlobResult>} Resolves successfully with a blob object description
+	* @see ReadBlobResult
+	*
+	* @example
+	* // Get the contents of 'README.md' in the main branch.
+	* let commitOid = await git.resolveRef({ fs, dir: '/tutorial', ref: 'main' })
+	* console.log(commitOid)
+	* let { blob } = await git.readBlob({
+	*   fs,
+	*   dir: '/tutorial',
+	*   oid: commitOid,
+	*   filepath: 'README.md'
+	* })
+	* console.log(Buffer.from(blob).toString('utf8'))
+	*
+	*/
+	async function readBlob({ fs, dir, gitdir = join(dir, ".git"), oid, filepath, cache = {} }) {
+		try {
+			assertParameter("fs", fs);
+			assertParameter("gitdir", gitdir);
+			assertParameter("oid", oid);
+			const fsp = new FileSystem(fs);
+			return await _readBlob({
+				fs: fsp,
+				cache,
+				gitdir: await discoverGitdir({
+					fsp,
+					dotgit: gitdir
+				}),
+				oid,
+				filepath
+			});
+		} catch (err) {
+			err.caller = "git.readBlob";
+			throw err;
+		}
+	}
 	/**
 	* Get the value of a symbolic ref or resolve a ref to its SHA-1 object id
 	*
@@ -12113,6 +12562,8 @@ ${obj.gpgsig ? obj.gpgsig : ""}`;
 	exports.checkout = checkout;
 	exports.clone = clone;
 	exports.fetch = fetch;
+	exports.log = log;
+	exports.readBlob = readBlob;
 	exports.resolveRef = resolveRef;
 	exports.statusMatrix = statusMatrix;
 }));
@@ -18011,9 +18462,1940 @@ async function request({ onProgress, url, method = "GET", headers = {}, agent, b
 }
 var index = { request };
 //#endregion
-//#region src/launcher.ts
+//#region src/shared/pm-install.ts
 /**
-* Zenbu launcher shim.
+* Bundled-toolchain `<pm> install` helpers.
+*
+* Imported by both:
+*   - `packages/core/src/launcher.ts` (tsdown inlines this into
+*     `dist/launcher.mjs`; the launcher cannot `import "@zenbujs/core"`)
+*   - `packages/core/src/services/updater.ts` (resolved through normal
+*     `@zenbujs/core/...` resolution at runtime)
+*
+* Both call sites operate on the apps-dir (`~/.zenbu/apps/<name>/`) and
+* the .app's `Resources/` (where `provisionToolchain` staged
+* `bun`, `pnpm`, etc.). The launcher kicks off the FIRST install at
+* launch; the updater service runs the SAME logic when an `update()`
+* lockfile-diff says deps drifted.
+*/
+function lockfileFor(type) {
+	switch (type) {
+		case "pnpm": return "pnpm-lock.yaml";
+		case "npm": return "package-lock.json";
+		case "yarn": return "yarn.lock";
+		case "bun": return "bun.lock";
+	}
+}
+function isYarnBerry(version) {
+	const major = parseInt(version.split(".")[0] ?? "", 10);
+	return Number.isFinite(major) && major >= 2;
+}
+function bundledToolPath(name, resourcesPath) {
+	const candidates = [path.join(resourcesPath, "toolchain", "bin", name), path.join(resourcesPath, "toolchain", name)];
+	for (const candidate of candidates) if (existsSync(candidate)) return candidate;
+	return null;
+}
+/**
+* Resolve the entrypoint we'll exec for a given PM, mirroring the layout
+* `provisionToolchain` writes into the bundle's `Resources/toolchain/`.
+*/
+function bundledPmEntry(pm, resourcesPath) {
+	switch (pm.type) {
+		case "pnpm": {
+			const p = path.join(resourcesPath, "toolchain", "pnpm", "bin", "pnpm.cjs");
+			if (!existsSync(p)) throw new Error(`bundled pnpm entry not found at ${p}. The .app's toolchain is incomplete.`);
+			return {
+				kind: "js",
+				path: p
+			};
+		}
+		case "npm": {
+			const p = path.join(resourcesPath, "toolchain", "npm", "bin", "npm-cli.js");
+			if (!existsSync(p)) throw new Error(`bundled npm entry not found at ${p}. The .app's toolchain is incomplete.`);
+			return {
+				kind: "js",
+				path: p
+			};
+		}
+		case "yarn": {
+			if (isYarnBerry(pm.version)) {
+				const p = path.join(resourcesPath, "toolchain", "yarn.cjs");
+				if (!existsSync(p)) throw new Error(`bundled yarn (berry) entry not found at ${p}. The .app's toolchain is incomplete.`);
+				return {
+					kind: "js",
+					path: p
+				};
+			}
+			const p = path.join(resourcesPath, "toolchain", "yarn", "bin", "yarn.js");
+			if (!existsSync(p)) throw new Error(`bundled yarn (classic) entry not found at ${p}. The .app's toolchain is incomplete.`);
+			return {
+				kind: "js",
+				path: p
+			};
+		}
+		case "bun": return { kind: "bun" };
+	}
+}
+function electronTargetVersion(appsDir) {
+	if (process.versions.electron) return process.versions.electron;
+	try {
+		const pkg = JSON.parse(fs.readFileSync(path.join(appsDir, "package.json"), "utf8"));
+		return (pkg.devDependencies?.electron ?? pkg.dependencies?.electron ?? "").replace(/^[^\d]*/, "") || "42.0.0";
+	} catch {
+		return "42.0.0";
+	}
+}
+function buildInstallEnv(appsDir) {
+	const target = electronTargetVersion(appsDir);
+	return {
+		...process.env,
+		CI: "true",
+		HOME: path.join(appsDir, ".zenbu", ".node-gyp"),
+		npm_config_runtime: "electron",
+		npm_config_target: target,
+		npm_config_disturl: "https://electronjs.org/headers",
+		npm_config_arch: process.arch
+	};
+}
+/**
+* Best-effort progress regex per package manager. We pass each stdout line
+* through these and return a `progress` payload when one matches; otherwise
+* `null`. Failing to match is fine — the UI just won't show fine-grained
+* progress for that PM.
+*/
+const PNPM_RESOLVED_RE = /Progress:\s+resolved\s+(\d+),\s+reused\s+(\d+),\s+downloaded\s+(\d+)/i;
+const PNPM_PROGRESS_RE = /(\d+)\s*\/\s*(\d+)/;
+function parseInstallProgress(pm, line) {
+	if (pm === "pnpm") {
+		const m = line.match(PNPM_RESOLVED_RE);
+		if (m) {
+			const resolved = parseInt(m[1], 10);
+			const reused = parseInt(m[2], 10);
+			const downloaded = parseInt(m[3], 10);
+			return {
+				phase: "resolve",
+				loaded: reused + downloaded,
+				total: resolved,
+				ratio: resolved > 0 ? (reused + downloaded) / resolved : void 0
+			};
+		}
+	}
+	const m = line.match(PNPM_PROGRESS_RE);
+	if (m) {
+		const loaded = parseInt(m[1], 10);
+		const total = parseInt(m[2], 10);
+		if (total > 0) return {
+			loaded,
+			total,
+			ratio: loaded / total
+		};
+	}
+	return null;
+}
+function spawnInstall(args) {
+	const { bin, cliArgs, cwd, env, label, pmType, reporter, signal } = args;
+	return new Promise((resolve, reject) => {
+		if (signal?.aborted) {
+			reject(/* @__PURE__ */ new Error(`${label} aborted before start`));
+			return;
+		}
+		const usePiped = reporter != null;
+		const child = spawn(bin, cliArgs, {
+			cwd,
+			stdio: usePiped ? [
+				"inherit",
+				"pipe",
+				"pipe"
+			] : "inherit",
+			env
+		});
+		const onAbort = () => {
+			try {
+				child.kill("SIGTERM");
+			} catch {}
+		};
+		signal?.addEventListener("abort", onAbort, { once: true });
+		if (usePiped) {
+			const wireStream = (stream, which) => {
+				if (!stream) return;
+				let buf = "";
+				stream.setEncoding("utf8");
+				stream.on("data", (chunk) => {
+					buf += chunk;
+					let nl;
+					while ((nl = buf.indexOf("\n")) >= 0) {
+						const rawLine = buf.slice(0, nl);
+						buf = buf.slice(nl + 1);
+						reporter?.rawLine?.(which, rawLine);
+						const line = rawLine.replace(/\r/g, "").trimEnd();
+						if (!line) continue;
+						reporter?.message?.(line);
+						const progress = parseInstallProgress(pmType, line);
+						if (progress) reporter?.progress?.(progress);
+					}
+				});
+				stream.on("end", () => {
+					if (buf.length > 0) {
+						reporter?.rawLine?.(which, buf);
+						const line = buf.replace(/\r/g, "").trimEnd();
+						if (line) reporter?.message?.(line);
+					}
+				});
+			};
+			wireStream(child.stdout, "stdout");
+			wireStream(child.stderr, "stderr");
+		}
+		child.on("error", (err) => {
+			signal?.removeEventListener("abort", onAbort);
+			reject(err);
+		});
+		child.on("close", (code, sig) => {
+			signal?.removeEventListener("abort", onAbort);
+			if (code === 0) resolve();
+			else if (signal?.aborted) reject(/* @__PURE__ */ new Error(`${label} aborted (${sig ?? code})`));
+			else reject(/* @__PURE__ */ new Error(`${label} exited with code ${code}`));
+		});
+	});
+}
+async function runInstall(opts) {
+	const { appsDir, resourcesPath, pm, reporter = null, signal } = opts;
+	const env = buildInstallEnv(appsDir);
+	const entry = bundledPmEntry(pm, resourcesPath);
+	switch (pm.type) {
+		case "pnpm": {
+			if (entry.kind !== "js") throw new Error("internal: pnpm entry shape");
+			const bun = bundledToolPath("bun", resourcesPath);
+			if (!bun) throw new Error(`bundled bun not found in ${resourcesPath}/toolchain (required to host the pnpm.cjs entry)`);
+			await spawnInstall({
+				bin: bun,
+				cliArgs: [
+					entry.path,
+					"install",
+					"--reporter=append-only"
+				],
+				cwd: appsDir,
+				env,
+				label: "pnpm install",
+				pmType: pm.type,
+				reporter,
+				signal
+			});
+			return;
+		}
+		case "npm": {
+			if (entry.kind !== "js") throw new Error("internal: npm entry shape");
+			const bun = bundledToolPath("bun", resourcesPath);
+			if (!bun) throw new Error(`bundled bun not found in ${resourcesPath}/toolchain (required to host the npm-cli.js entry)`);
+			await spawnInstall({
+				bin: bun,
+				cliArgs: [
+					entry.path,
+					"install",
+					"--no-audit",
+					"--no-fund",
+					"--no-progress"
+				],
+				cwd: appsDir,
+				env,
+				label: "npm install",
+				pmType: pm.type,
+				reporter,
+				signal
+			});
+			return;
+		}
+		case "yarn": {
+			if (entry.kind !== "js") throw new Error("internal: yarn entry shape");
+			const bun = bundledToolPath("bun", resourcesPath);
+			if (!bun) throw new Error(`bundled bun not found in ${resourcesPath}/toolchain (required to host the yarn.js entry)`);
+			if (isYarnBerry(pm.version)) await spawnInstall({
+				bin: bun,
+				cliArgs: [entry.path, "install"],
+				cwd: appsDir,
+				env: {
+					...env,
+					YARN_ENABLE_IMMUTABLE_INSTALLS: "false"
+				},
+				label: `yarn install (${pm.version})`,
+				pmType: pm.type,
+				reporter,
+				signal
+			});
+			else {
+				const rcPath = path.join(appsDir, ".zenbu", "yarn-classic-bun.yarnrc");
+				await fsp.mkdir(path.dirname(rcPath), { recursive: true });
+				await fsp.writeFile(rcPath, "strict-ssl false\n");
+				await spawnInstall({
+					bin: bun,
+					cliArgs: [
+						entry.path,
+						"install",
+						"--non-interactive",
+						"--no-progress",
+						"--network-timeout",
+						"600000",
+						"--use-yarnrc",
+						rcPath,
+						"--registry",
+						"https://registry.npmjs.org/"
+					],
+					cwd: appsDir,
+					env,
+					label: `yarn install (${pm.version})`,
+					pmType: pm.type,
+					reporter,
+					signal
+				});
+			}
+			return;
+		}
+		case "bun": {
+			const bun = bundledToolPath("bun", resourcesPath);
+			if (!bun) throw new Error(`bundled bun not found in ${resourcesPath}/toolchain. The .app is missing required toolchain binaries.`);
+			await spawnInstall({
+				bin: bun,
+				cliArgs: ["install", "--no-progress"],
+				cwd: appsDir,
+				env,
+				label: "bun install",
+				pmType: pm.type,
+				reporter,
+				signal
+			});
+			return;
+		}
+	}
+}
+async function fileHash(hash, filePath) {
+	hash.update(filePath);
+	hash.update("\0");
+	try {
+		hash.update(await fsp.readFile(filePath));
+	} catch {}
+	hash.update("\0");
+}
+async function depsSignature(appsDir, pm) {
+	const hash = crypto$1.createHash("sha256");
+	await fileHash(hash, path.join(appsDir, "package.json"));
+	await fileHash(hash, path.join(appsDir, lockfileFor(pm.type)));
+	hash.update(`${pm.type}@${pm.version}`);
+	hash.update("\0");
+	hash.update(process.versions.electron ?? "no-electron");
+	hash.update("\0");
+	hash.update(process.platform);
+	hash.update("\0");
+	hash.update(process.arch);
+	return hash.digest("hex");
+}
+/**
+* Read `<appsDir>/.zenbu/deps-sig` (the signature recorded after the
+* last successful install). Returns `null` when missing.
+*/
+async function readDepsSig(appsDir) {
+	const sigPath = path.join(appsDir, ".zenbu", "deps-sig");
+	try {
+		return await fsp.readFile(sigPath, "utf8");
+	} catch {
+		return null;
+	}
+}
+async function writeDepsSig(appsDir, sig) {
+	const sigPath = path.join(appsDir, ".zenbu", "deps-sig");
+	await fsp.mkdir(path.dirname(sigPath), { recursive: true });
+	await fsp.writeFile(sigPath, sig);
+}
+//#endregion
+//#region src/shared/host-version.ts
+/**
+* Single source of truth for reading the .app's "host version" — the
+* concrete semver string the developer authored on
+* `defineBuildConfig({ hostVersion: "..." })` and that
+* `zen build:electron` baked into `<bundle>/host.json`.
+*
+* Imported by both:
+*   - `packages/core/src/launcher.ts` (tsdown inlines this into
+*     `dist/launcher.mjs`; the launcher cannot `import "@zenbujs/core"`)
+*   - `packages/core/src/services/updater.ts` (resolved through normal
+*     `@zenbujs/core/...` resolution at runtime)
+*
+* The file lives at the bundle root (`<APP_PATH>/host.json`, where
+* `APP_PATH = app.getAppPath()`), separate from `app-config.json` so
+* its single purpose stays obvious.
+*/
+const HOST_VERSION_FILENAME = "host.json";
+/**
+* Read `<appPath>/host.json` and return its `version` field. Throws an
+* informative error if the file is missing, unreadable, malformed, or
+* the `version` field is missing/empty. Callers in dev mode should
+* check for the file's existence first (or use `tryReadHostVersion`).
+*/
+function readHostVersion(appPath) {
+	const filePath = path.join(appPath, HOST_VERSION_FILENAME);
+	let raw;
+	try {
+		raw = fs.readFileSync(filePath, "utf8");
+	} catch (err) {
+		const e = err;
+		if (e.code === "ENOENT") throw new Error(`[host-version] missing ${filePath}. Was this .app built with a recent \`zen build:electron\`? The build step is responsible for writing host.json.`);
+		throw new Error(`[host-version] failed to read ${filePath}: ${e.message ?? String(e)}`);
+	}
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch (err) {
+		throw new Error(`[host-version] ${filePath} is not valid JSON: ${err.message}`);
+	}
+	if (typeof parsed !== "object" || parsed === null || typeof parsed.version !== "string" || parsed.version.trim().length === 0) throw new Error(`[host-version] ${filePath} is missing a non-empty \`version\` string.`);
+	return {
+		version: parsed.version.trim(),
+		path: filePath
+	};
+}
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/internal/constants.js
+var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SEMVER_SPEC_VERSION = "2.0.0";
+	const MAX_LENGTH = 256;
+	const MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER || 9007199254740991;
+	module.exports = {
+		MAX_LENGTH,
+		MAX_SAFE_COMPONENT_LENGTH: 16,
+		MAX_SAFE_BUILD_LENGTH: MAX_LENGTH - 6,
+		MAX_SAFE_INTEGER,
+		RELEASE_TYPES: [
+			"major",
+			"premajor",
+			"minor",
+			"preminor",
+			"patch",
+			"prepatch",
+			"prerelease"
+		],
+		SEMVER_SPEC_VERSION,
+		FLAG_INCLUDE_PRERELEASE: 1,
+		FLAG_LOOSE: 2
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/internal/debug.js
+var require_debug = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	module.exports = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () => {};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/internal/re.js
+var require_re = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const { MAX_SAFE_COMPONENT_LENGTH, MAX_SAFE_BUILD_LENGTH, MAX_LENGTH } = require_constants();
+	const debug = require_debug();
+	exports = module.exports = {};
+	const re = exports.re = [];
+	const safeRe = exports.safeRe = [];
+	const src = exports.src = [];
+	const safeSrc = exports.safeSrc = [];
+	const t = exports.t = {};
+	let R = 0;
+	const LETTERDASHNUMBER = "[a-zA-Z0-9-]";
+	const safeRegexReplacements = [
+		["\\s", 1],
+		["\\d", MAX_LENGTH],
+		[LETTERDASHNUMBER, MAX_SAFE_BUILD_LENGTH]
+	];
+	const makeSafeRegex = (value) => {
+		for (const [token, max] of safeRegexReplacements) value = value.split(`${token}*`).join(`${token}{0,${max}}`).split(`${token}+`).join(`${token}{1,${max}}`);
+		return value;
+	};
+	const createToken = (name, value, isGlobal) => {
+		const safe = makeSafeRegex(value);
+		const index = R++;
+		debug(name, index, value);
+		t[name] = index;
+		src[index] = value;
+		safeSrc[index] = safe;
+		re[index] = new RegExp(value, isGlobal ? "g" : void 0);
+		safeRe[index] = new RegExp(safe, isGlobal ? "g" : void 0);
+	};
+	createToken("NUMERICIDENTIFIER", "0|[1-9]\\d*");
+	createToken("NUMERICIDENTIFIERLOOSE", "\\d+");
+	createToken("NONNUMERICIDENTIFIER", `\\d*[a-zA-Z-]${LETTERDASHNUMBER}*`);
+	createToken("MAINVERSION", `(${src[t.NUMERICIDENTIFIER]})\\.(${src[t.NUMERICIDENTIFIER]})\\.(${src[t.NUMERICIDENTIFIER]})`);
+	createToken("MAINVERSIONLOOSE", `(${src[t.NUMERICIDENTIFIERLOOSE]})\\.(${src[t.NUMERICIDENTIFIERLOOSE]})\\.(${src[t.NUMERICIDENTIFIERLOOSE]})`);
+	createToken("PRERELEASEIDENTIFIER", `(?:${src[t.NONNUMERICIDENTIFIER]}|${src[t.NUMERICIDENTIFIER]})`);
+	createToken("PRERELEASEIDENTIFIERLOOSE", `(?:${src[t.NONNUMERICIDENTIFIER]}|${src[t.NUMERICIDENTIFIERLOOSE]})`);
+	createToken("PRERELEASE", `(?:-(${src[t.PRERELEASEIDENTIFIER]}(?:\\.${src[t.PRERELEASEIDENTIFIER]})*))`);
+	createToken("PRERELEASELOOSE", `(?:-?(${src[t.PRERELEASEIDENTIFIERLOOSE]}(?:\\.${src[t.PRERELEASEIDENTIFIERLOOSE]})*))`);
+	createToken("BUILDIDENTIFIER", `${LETTERDASHNUMBER}+`);
+	createToken("BUILD", `(?:\\+(${src[t.BUILDIDENTIFIER]}(?:\\.${src[t.BUILDIDENTIFIER]})*))`);
+	createToken("FULLPLAIN", `v?${src[t.MAINVERSION]}${src[t.PRERELEASE]}?${src[t.BUILD]}?`);
+	createToken("FULL", `^${src[t.FULLPLAIN]}$`);
+	createToken("LOOSEPLAIN", `[v=\\s]*${src[t.MAINVERSIONLOOSE]}${src[t.PRERELEASELOOSE]}?${src[t.BUILD]}?`);
+	createToken("LOOSE", `^${src[t.LOOSEPLAIN]}$`);
+	createToken("GTLT", "((?:<|>)?=?)");
+	createToken("XRANGEIDENTIFIERLOOSE", `${src[t.NUMERICIDENTIFIERLOOSE]}|x|X|\\*`);
+	createToken("XRANGEIDENTIFIER", `${src[t.NUMERICIDENTIFIER]}|x|X|\\*`);
+	createToken("XRANGEPLAIN", `[v=\\s]*(${src[t.XRANGEIDENTIFIER]})(?:\\.(${src[t.XRANGEIDENTIFIER]})(?:\\.(${src[t.XRANGEIDENTIFIER]})(?:${src[t.PRERELEASE]})?${src[t.BUILD]}?)?)?`);
+	createToken("XRANGEPLAINLOOSE", `[v=\\s]*(${src[t.XRANGEIDENTIFIERLOOSE]})(?:\\.(${src[t.XRANGEIDENTIFIERLOOSE]})(?:\\.(${src[t.XRANGEIDENTIFIERLOOSE]})(?:${src[t.PRERELEASELOOSE]})?${src[t.BUILD]}?)?)?`);
+	createToken("XRANGE", `^${src[t.GTLT]}\\s*${src[t.XRANGEPLAIN]}$`);
+	createToken("XRANGELOOSE", `^${src[t.GTLT]}\\s*${src[t.XRANGEPLAINLOOSE]}$`);
+	createToken("COERCEPLAIN", `(^|[^\\d])(\\d{1,${MAX_SAFE_COMPONENT_LENGTH}})(?:\\.(\\d{1,${MAX_SAFE_COMPONENT_LENGTH}}))?(?:\\.(\\d{1,${MAX_SAFE_COMPONENT_LENGTH}}))?`);
+	createToken("COERCE", `${src[t.COERCEPLAIN]}(?:$|[^\\d])`);
+	createToken("COERCEFULL", src[t.COERCEPLAIN] + `(?:${src[t.PRERELEASE]})?(?:${src[t.BUILD]})?(?:$|[^\\d])`);
+	createToken("COERCERTL", src[t.COERCE], true);
+	createToken("COERCERTLFULL", src[t.COERCEFULL], true);
+	createToken("LONETILDE", "(?:~>?)");
+	createToken("TILDETRIM", `(\\s*)${src[t.LONETILDE]}\\s+`, true);
+	exports.tildeTrimReplace = "$1~";
+	createToken("TILDE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAIN]}$`);
+	createToken("TILDELOOSE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAINLOOSE]}$`);
+	createToken("LONECARET", "(?:\\^)");
+	createToken("CARETTRIM", `(\\s*)${src[t.LONECARET]}\\s+`, true);
+	exports.caretTrimReplace = "$1^";
+	createToken("CARET", `^${src[t.LONECARET]}${src[t.XRANGEPLAIN]}$`);
+	createToken("CARETLOOSE", `^${src[t.LONECARET]}${src[t.XRANGEPLAINLOOSE]}$`);
+	createToken("COMPARATORLOOSE", `^${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]})$|^$`);
+	createToken("COMPARATOR", `^${src[t.GTLT]}\\s*(${src[t.FULLPLAIN]})$|^$`);
+	createToken("COMPARATORTRIM", `(\\s*)${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]}|${src[t.XRANGEPLAIN]})`, true);
+	exports.comparatorTrimReplace = "$1$2$3";
+	createToken("HYPHENRANGE", `^\\s*(${src[t.XRANGEPLAIN]})\\s+-\\s+(${src[t.XRANGEPLAIN]})\\s*$`);
+	createToken("HYPHENRANGELOOSE", `^\\s*(${src[t.XRANGEPLAINLOOSE]})\\s+-\\s+(${src[t.XRANGEPLAINLOOSE]})\\s*$`);
+	createToken("STAR", "(<|>)?=?\\s*\\*");
+	createToken("GTE0", "^\\s*>=\\s*0\\.0\\.0\\s*$");
+	createToken("GTE0PRE", "^\\s*>=\\s*0\\.0\\.0-0\\s*$");
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/internal/parse-options.js
+var require_parse_options = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const looseOption = Object.freeze({ loose: true });
+	const emptyOpts = Object.freeze({});
+	const parseOptions = (options) => {
+		if (!options) return emptyOpts;
+		if (typeof options !== "object") return looseOption;
+		return options;
+	};
+	module.exports = parseOptions;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/internal/identifiers.js
+var require_identifiers = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const numeric = /^[0-9]+$/;
+	const compareIdentifiers = (a, b) => {
+		if (typeof a === "number" && typeof b === "number") return a === b ? 0 : a < b ? -1 : 1;
+		const anum = numeric.test(a);
+		const bnum = numeric.test(b);
+		if (anum && bnum) {
+			a = +a;
+			b = +b;
+		}
+		return a === b ? 0 : anum && !bnum ? -1 : bnum && !anum ? 1 : a < b ? -1 : 1;
+	};
+	const rcompareIdentifiers = (a, b) => compareIdentifiers(b, a);
+	module.exports = {
+		compareIdentifiers,
+		rcompareIdentifiers
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/classes/semver.js
+var require_semver$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const debug = require_debug();
+	const { MAX_LENGTH, MAX_SAFE_INTEGER } = require_constants();
+	const { safeRe: re, t } = require_re();
+	const parseOptions = require_parse_options();
+	const { compareIdentifiers } = require_identifiers();
+	module.exports = class SemVer {
+		constructor(version, options) {
+			options = parseOptions(options);
+			if (version instanceof SemVer) if (version.loose === !!options.loose && version.includePrerelease === !!options.includePrerelease) return version;
+			else version = version.version;
+			else if (typeof version !== "string") throw new TypeError(`Invalid version. Must be a string. Got type "${typeof version}".`);
+			if (version.length > MAX_LENGTH) throw new TypeError(`version is longer than ${MAX_LENGTH} characters`);
+			debug("SemVer", version, options);
+			this.options = options;
+			this.loose = !!options.loose;
+			this.includePrerelease = !!options.includePrerelease;
+			const m = version.trim().match(options.loose ? re[t.LOOSE] : re[t.FULL]);
+			if (!m) throw new TypeError(`Invalid Version: ${version}`);
+			this.raw = version;
+			this.major = +m[1];
+			this.minor = +m[2];
+			this.patch = +m[3];
+			if (this.major > MAX_SAFE_INTEGER || this.major < 0) throw new TypeError("Invalid major version");
+			if (this.minor > MAX_SAFE_INTEGER || this.minor < 0) throw new TypeError("Invalid minor version");
+			if (this.patch > MAX_SAFE_INTEGER || this.patch < 0) throw new TypeError("Invalid patch version");
+			if (!m[4]) this.prerelease = [];
+			else this.prerelease = m[4].split(".").map((id) => {
+				if (/^[0-9]+$/.test(id)) {
+					const num = +id;
+					if (num >= 0 && num < MAX_SAFE_INTEGER) return num;
+				}
+				return id;
+			});
+			this.build = m[5] ? m[5].split(".") : [];
+			this.format();
+		}
+		format() {
+			this.version = `${this.major}.${this.minor}.${this.patch}`;
+			if (this.prerelease.length) this.version += `-${this.prerelease.join(".")}`;
+			return this.version;
+		}
+		toString() {
+			return this.version;
+		}
+		compare(other) {
+			debug("SemVer.compare", this.version, this.options, other);
+			if (!(other instanceof SemVer)) {
+				if (typeof other === "string" && other === this.version) return 0;
+				other = new SemVer(other, this.options);
+			}
+			if (other.version === this.version) return 0;
+			return this.compareMain(other) || this.comparePre(other);
+		}
+		compareMain(other) {
+			if (!(other instanceof SemVer)) other = new SemVer(other, this.options);
+			if (this.major < other.major) return -1;
+			if (this.major > other.major) return 1;
+			if (this.minor < other.minor) return -1;
+			if (this.minor > other.minor) return 1;
+			if (this.patch < other.patch) return -1;
+			if (this.patch > other.patch) return 1;
+			return 0;
+		}
+		comparePre(other) {
+			if (!(other instanceof SemVer)) other = new SemVer(other, this.options);
+			if (this.prerelease.length && !other.prerelease.length) return -1;
+			else if (!this.prerelease.length && other.prerelease.length) return 1;
+			else if (!this.prerelease.length && !other.prerelease.length) return 0;
+			let i = 0;
+			do {
+				const a = this.prerelease[i];
+				const b = other.prerelease[i];
+				debug("prerelease compare", i, a, b);
+				if (a === void 0 && b === void 0) return 0;
+				else if (b === void 0) return 1;
+				else if (a === void 0) return -1;
+				else if (a === b) continue;
+				else return compareIdentifiers(a, b);
+			} while (++i);
+		}
+		compareBuild(other) {
+			if (!(other instanceof SemVer)) other = new SemVer(other, this.options);
+			let i = 0;
+			do {
+				const a = this.build[i];
+				const b = other.build[i];
+				debug("build compare", i, a, b);
+				if (a === void 0 && b === void 0) return 0;
+				else if (b === void 0) return 1;
+				else if (a === void 0) return -1;
+				else if (a === b) continue;
+				else return compareIdentifiers(a, b);
+			} while (++i);
+		}
+		inc(release, identifier, identifierBase) {
+			if (release.startsWith("pre")) {
+				if (!identifier && identifierBase === false) throw new Error("invalid increment argument: identifier is empty");
+				if (identifier) {
+					const match = `-${identifier}`.match(this.options.loose ? re[t.PRERELEASELOOSE] : re[t.PRERELEASE]);
+					if (!match || match[1] !== identifier) throw new Error(`invalid identifier: ${identifier}`);
+				}
+			}
+			switch (release) {
+				case "premajor":
+					this.prerelease.length = 0;
+					this.patch = 0;
+					this.minor = 0;
+					this.major++;
+					this.inc("pre", identifier, identifierBase);
+					break;
+				case "preminor":
+					this.prerelease.length = 0;
+					this.patch = 0;
+					this.minor++;
+					this.inc("pre", identifier, identifierBase);
+					break;
+				case "prepatch":
+					this.prerelease.length = 0;
+					this.inc("patch", identifier, identifierBase);
+					this.inc("pre", identifier, identifierBase);
+					break;
+				case "prerelease":
+					if (this.prerelease.length === 0) this.inc("patch", identifier, identifierBase);
+					this.inc("pre", identifier, identifierBase);
+					break;
+				case "release":
+					if (this.prerelease.length === 0) throw new Error(`version ${this.raw} is not a prerelease`);
+					this.prerelease.length = 0;
+					break;
+				case "major":
+					if (this.minor !== 0 || this.patch !== 0 || this.prerelease.length === 0) this.major++;
+					this.minor = 0;
+					this.patch = 0;
+					this.prerelease = [];
+					break;
+				case "minor":
+					if (this.patch !== 0 || this.prerelease.length === 0) this.minor++;
+					this.patch = 0;
+					this.prerelease = [];
+					break;
+				case "patch":
+					if (this.prerelease.length === 0) this.patch++;
+					this.prerelease = [];
+					break;
+				case "pre": {
+					const base = Number(identifierBase) ? 1 : 0;
+					if (this.prerelease.length === 0) this.prerelease = [base];
+					else {
+						let i = this.prerelease.length;
+						while (--i >= 0) if (typeof this.prerelease[i] === "number") {
+							this.prerelease[i]++;
+							i = -2;
+						}
+						if (i === -1) {
+							if (identifier === this.prerelease.join(".") && identifierBase === false) throw new Error("invalid increment argument: identifier already exists");
+							this.prerelease.push(base);
+						}
+					}
+					if (identifier) {
+						let prerelease = [identifier, base];
+						if (identifierBase === false) prerelease = [identifier];
+						if (compareIdentifiers(this.prerelease[0], identifier) === 0) {
+							if (isNaN(this.prerelease[1])) this.prerelease = prerelease;
+						} else this.prerelease = prerelease;
+					}
+					break;
+				}
+				default: throw new Error(`invalid increment argument: ${release}`);
+			}
+			this.raw = this.format();
+			if (this.build.length) this.raw += `+${this.build.join(".")}`;
+			return this;
+		}
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/parse.js
+var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SemVer = require_semver$1();
+	const parse = (version, options, throwErrors = false) => {
+		if (version instanceof SemVer) return version;
+		try {
+			return new SemVer(version, options);
+		} catch (er) {
+			if (!throwErrors) return null;
+			throw er;
+		}
+	};
+	module.exports = parse;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/valid.js
+var require_valid$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const parse = require_parse();
+	const valid = (version, options) => {
+		const v = parse(version, options);
+		return v ? v.version : null;
+	};
+	module.exports = valid;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/clean.js
+var require_clean = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const parse = require_parse();
+	const clean = (version, options) => {
+		const s = parse(version.trim().replace(/^[=v]+/, ""), options);
+		return s ? s.version : null;
+	};
+	module.exports = clean;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/inc.js
+var require_inc = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SemVer = require_semver$1();
+	const inc = (version, release, options, identifier, identifierBase) => {
+		if (typeof options === "string") {
+			identifierBase = identifier;
+			identifier = options;
+			options = void 0;
+		}
+		try {
+			return new SemVer(version instanceof SemVer ? version.version : version, options).inc(release, identifier, identifierBase).version;
+		} catch (er) {
+			return null;
+		}
+	};
+	module.exports = inc;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/diff.js
+var require_diff = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const parse = require_parse();
+	const diff = (version1, version2) => {
+		const v1 = parse(version1, null, true);
+		const v2 = parse(version2, null, true);
+		const comparison = v1.compare(v2);
+		if (comparison === 0) return null;
+		const v1Higher = comparison > 0;
+		const highVersion = v1Higher ? v1 : v2;
+		const lowVersion = v1Higher ? v2 : v1;
+		const highHasPre = !!highVersion.prerelease.length;
+		if (!!lowVersion.prerelease.length && !highHasPre) {
+			if (!lowVersion.patch && !lowVersion.minor) return "major";
+			if (lowVersion.compareMain(highVersion) === 0) {
+				if (lowVersion.minor && !lowVersion.patch) return "minor";
+				return "patch";
+			}
+		}
+		const prefix = highHasPre ? "pre" : "";
+		if (v1.major !== v2.major) return prefix + "major";
+		if (v1.minor !== v2.minor) return prefix + "minor";
+		if (v1.patch !== v2.patch) return prefix + "patch";
+		return "prerelease";
+	};
+	module.exports = diff;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/major.js
+var require_major = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SemVer = require_semver$1();
+	const major = (a, loose) => new SemVer(a, loose).major;
+	module.exports = major;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/minor.js
+var require_minor = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SemVer = require_semver$1();
+	const minor = (a, loose) => new SemVer(a, loose).minor;
+	module.exports = minor;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/patch.js
+var require_patch = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SemVer = require_semver$1();
+	const patch = (a, loose) => new SemVer(a, loose).patch;
+	module.exports = patch;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/prerelease.js
+var require_prerelease = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const parse = require_parse();
+	const prerelease = (version, options) => {
+		const parsed = parse(version, options);
+		return parsed && parsed.prerelease.length ? parsed.prerelease : null;
+	};
+	module.exports = prerelease;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/compare.js
+var require_compare = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SemVer = require_semver$1();
+	const compare = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
+	module.exports = compare;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/rcompare.js
+var require_rcompare = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const compare = require_compare();
+	const rcompare = (a, b, loose) => compare(b, a, loose);
+	module.exports = rcompare;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/compare-loose.js
+var require_compare_loose = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const compare = require_compare();
+	const compareLoose = (a, b) => compare(a, b, true);
+	module.exports = compareLoose;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/compare-build.js
+var require_compare_build = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SemVer = require_semver$1();
+	const compareBuild = (a, b, loose) => {
+		const versionA = new SemVer(a, loose);
+		const versionB = new SemVer(b, loose);
+		return versionA.compare(versionB) || versionA.compareBuild(versionB);
+	};
+	module.exports = compareBuild;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/sort.js
+var require_sort = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const compareBuild = require_compare_build();
+	const sort = (list, loose) => list.sort((a, b) => compareBuild(a, b, loose));
+	module.exports = sort;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/rsort.js
+var require_rsort = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const compareBuild = require_compare_build();
+	const rsort = (list, loose) => list.sort((a, b) => compareBuild(b, a, loose));
+	module.exports = rsort;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/gt.js
+var require_gt = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const compare = require_compare();
+	const gt = (a, b, loose) => compare(a, b, loose) > 0;
+	module.exports = gt;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/lt.js
+var require_lt = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const compare = require_compare();
+	const lt = (a, b, loose) => compare(a, b, loose) < 0;
+	module.exports = lt;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/eq.js
+var require_eq = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const compare = require_compare();
+	const eq = (a, b, loose) => compare(a, b, loose) === 0;
+	module.exports = eq;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/neq.js
+var require_neq = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const compare = require_compare();
+	const neq = (a, b, loose) => compare(a, b, loose) !== 0;
+	module.exports = neq;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/gte.js
+var require_gte = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const compare = require_compare();
+	const gte = (a, b, loose) => compare(a, b, loose) >= 0;
+	module.exports = gte;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/lte.js
+var require_lte = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const compare = require_compare();
+	const lte = (a, b, loose) => compare(a, b, loose) <= 0;
+	module.exports = lte;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/cmp.js
+var require_cmp = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const eq = require_eq();
+	const neq = require_neq();
+	const gt = require_gt();
+	const gte = require_gte();
+	const lt = require_lt();
+	const lte = require_lte();
+	const cmp = (a, op, b, loose) => {
+		switch (op) {
+			case "===":
+				if (typeof a === "object") a = a.version;
+				if (typeof b === "object") b = b.version;
+				return a === b;
+			case "!==":
+				if (typeof a === "object") a = a.version;
+				if (typeof b === "object") b = b.version;
+				return a !== b;
+			case "":
+			case "=":
+			case "==": return eq(a, b, loose);
+			case "!=": return neq(a, b, loose);
+			case ">": return gt(a, b, loose);
+			case ">=": return gte(a, b, loose);
+			case "<": return lt(a, b, loose);
+			case "<=": return lte(a, b, loose);
+			default: throw new TypeError(`Invalid operator: ${op}`);
+		}
+	};
+	module.exports = cmp;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/coerce.js
+var require_coerce = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SemVer = require_semver$1();
+	const parse = require_parse();
+	const { safeRe: re, t } = require_re();
+	const coerce = (version, options) => {
+		if (version instanceof SemVer) return version;
+		if (typeof version === "number") version = String(version);
+		if (typeof version !== "string") return null;
+		options = options || {};
+		let match = null;
+		if (!options.rtl) match = version.match(options.includePrerelease ? re[t.COERCEFULL] : re[t.COERCE]);
+		else {
+			const coerceRtlRegex = options.includePrerelease ? re[t.COERCERTLFULL] : re[t.COERCERTL];
+			let next;
+			while ((next = coerceRtlRegex.exec(version)) && (!match || match.index + match[0].length !== version.length)) {
+				if (!match || next.index + next[0].length !== match.index + match[0].length) match = next;
+				coerceRtlRegex.lastIndex = next.index + next[1].length + next[2].length;
+			}
+			coerceRtlRegex.lastIndex = -1;
+		}
+		if (match === null) return null;
+		const major = match[2];
+		return parse(`${major}.${match[3] || "0"}.${match[4] || "0"}${options.includePrerelease && match[5] ? `-${match[5]}` : ""}${options.includePrerelease && match[6] ? `+${match[6]}` : ""}`, options);
+	};
+	module.exports = coerce;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/truncate.js
+var require_truncate = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const parse = require_parse();
+	const constants = require_constants();
+	const SemVer = require_semver$1();
+	const truncate = (version, truncation, options) => {
+		if (!constants.RELEASE_TYPES.includes(truncation)) return null;
+		const clonedVersion = cloneInputVersion(version, options);
+		return clonedVersion && doTruncation(clonedVersion, truncation);
+	};
+	const cloneInputVersion = (version, options) => {
+		return parse(version instanceof SemVer ? version.version : version, options);
+	};
+	const doTruncation = (version, truncation) => {
+		if (isPrerelease(truncation)) return version.version;
+		version.prerelease = [];
+		switch (truncation) {
+			case "major":
+				version.minor = 0;
+				version.patch = 0;
+				break;
+			case "minor":
+				version.patch = 0;
+				break;
+		}
+		return version.format();
+	};
+	const isPrerelease = (type) => {
+		return type.startsWith("pre");
+	};
+	module.exports = truncate;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/internal/lrucache.js
+var require_lrucache = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var LRUCache = class {
+		constructor() {
+			this.max = 1e3;
+			this.map = /* @__PURE__ */ new Map();
+		}
+		get(key) {
+			const value = this.map.get(key);
+			if (value === void 0) return;
+			else {
+				this.map.delete(key);
+				this.map.set(key, value);
+				return value;
+			}
+		}
+		delete(key) {
+			return this.map.delete(key);
+		}
+		set(key, value) {
+			if (!this.delete(key) && value !== void 0) {
+				if (this.map.size >= this.max) {
+					const firstKey = this.map.keys().next().value;
+					this.delete(firstKey);
+				}
+				this.map.set(key, value);
+			}
+			return this;
+		}
+	};
+	module.exports = LRUCache;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/classes/range.js
+var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SPACE_CHARACTERS = /\s+/g;
+	module.exports = class Range {
+		constructor(range, options) {
+			options = parseOptions(options);
+			if (range instanceof Range) if (range.loose === !!options.loose && range.includePrerelease === !!options.includePrerelease) return range;
+			else return new Range(range.raw, options);
+			if (range instanceof Comparator) {
+				this.raw = range.value;
+				this.set = [[range]];
+				this.formatted = void 0;
+				return this;
+			}
+			this.options = options;
+			this.loose = !!options.loose;
+			this.includePrerelease = !!options.includePrerelease;
+			this.raw = range.trim().replace(SPACE_CHARACTERS, " ");
+			this.set = this.raw.split("||").map((r) => this.parseRange(r.trim())).filter((c) => c.length);
+			if (!this.set.length) throw new TypeError(`Invalid SemVer Range: ${this.raw}`);
+			if (this.set.length > 1) {
+				const first = this.set[0];
+				this.set = this.set.filter((c) => !isNullSet(c[0]));
+				if (this.set.length === 0) this.set = [first];
+				else if (this.set.length > 1) {
+					for (const c of this.set) if (c.length === 1 && isAny(c[0])) {
+						this.set = [c];
+						break;
+					}
+				}
+			}
+			this.formatted = void 0;
+		}
+		get range() {
+			if (this.formatted === void 0) {
+				this.formatted = "";
+				for (let i = 0; i < this.set.length; i++) {
+					if (i > 0) this.formatted += "||";
+					const comps = this.set[i];
+					for (let k = 0; k < comps.length; k++) {
+						if (k > 0) this.formatted += " ";
+						this.formatted += comps[k].toString().trim();
+					}
+				}
+			}
+			return this.formatted;
+		}
+		format() {
+			return this.range;
+		}
+		toString() {
+			return this.range;
+		}
+		parseRange(range) {
+			const memoKey = ((this.options.includePrerelease && FLAG_INCLUDE_PRERELEASE) | (this.options.loose && FLAG_LOOSE)) + ":" + range;
+			const cached = cache.get(memoKey);
+			if (cached) return cached;
+			const loose = this.options.loose;
+			const hr = loose ? re[t.HYPHENRANGELOOSE] : re[t.HYPHENRANGE];
+			range = range.replace(hr, hyphenReplace(this.options.includePrerelease));
+			debug("hyphen replace", range);
+			range = range.replace(re[t.COMPARATORTRIM], comparatorTrimReplace);
+			debug("comparator trim", range);
+			range = range.replace(re[t.TILDETRIM], tildeTrimReplace);
+			debug("tilde trim", range);
+			range = range.replace(re[t.CARETTRIM], caretTrimReplace);
+			debug("caret trim", range);
+			let rangeList = range.split(" ").map((comp) => parseComparator(comp, this.options)).join(" ").split(/\s+/).map((comp) => replaceGTE0(comp, this.options));
+			if (loose) rangeList = rangeList.filter((comp) => {
+				debug("loose invalid filter", comp, this.options);
+				return !!comp.match(re[t.COMPARATORLOOSE]);
+			});
+			debug("range list", rangeList);
+			const rangeMap = /* @__PURE__ */ new Map();
+			const comparators = rangeList.map((comp) => new Comparator(comp, this.options));
+			for (const comp of comparators) {
+				if (isNullSet(comp)) return [comp];
+				rangeMap.set(comp.value, comp);
+			}
+			if (rangeMap.size > 1 && rangeMap.has("")) rangeMap.delete("");
+			const result = [...rangeMap.values()];
+			cache.set(memoKey, result);
+			return result;
+		}
+		intersects(range, options) {
+			if (!(range instanceof Range)) throw new TypeError("a Range is required");
+			return this.set.some((thisComparators) => {
+				return isSatisfiable(thisComparators, options) && range.set.some((rangeComparators) => {
+					return isSatisfiable(rangeComparators, options) && thisComparators.every((thisComparator) => {
+						return rangeComparators.every((rangeComparator) => {
+							return thisComparator.intersects(rangeComparator, options);
+						});
+					});
+				});
+			});
+		}
+		test(version) {
+			if (!version) return false;
+			if (typeof version === "string") try {
+				version = new SemVer(version, this.options);
+			} catch (er) {
+				return false;
+			}
+			for (let i = 0; i < this.set.length; i++) if (testSet(this.set[i], version, this.options)) return true;
+			return false;
+		}
+	};
+	const cache = new (require_lrucache())();
+	const parseOptions = require_parse_options();
+	const Comparator = require_comparator();
+	const debug = require_debug();
+	const SemVer = require_semver$1();
+	const { safeRe: re, t, comparatorTrimReplace, tildeTrimReplace, caretTrimReplace } = require_re();
+	const { FLAG_INCLUDE_PRERELEASE, FLAG_LOOSE } = require_constants();
+	const isNullSet = (c) => c.value === "<0.0.0-0";
+	const isAny = (c) => c.value === "";
+	const isSatisfiable = (comparators, options) => {
+		let result = true;
+		const remainingComparators = comparators.slice();
+		let testComparator = remainingComparators.pop();
+		while (result && remainingComparators.length) {
+			result = remainingComparators.every((otherComparator) => {
+				return testComparator.intersects(otherComparator, options);
+			});
+			testComparator = remainingComparators.pop();
+		}
+		return result;
+	};
+	const parseComparator = (comp, options) => {
+		comp = comp.replace(re[t.BUILD], "");
+		debug("comp", comp, options);
+		comp = replaceCarets(comp, options);
+		debug("caret", comp);
+		comp = replaceTildes(comp, options);
+		debug("tildes", comp);
+		comp = replaceXRanges(comp, options);
+		debug("xrange", comp);
+		comp = replaceStars(comp, options);
+		debug("stars", comp);
+		return comp;
+	};
+	const isX = (id) => !id || id.toLowerCase() === "x" || id === "*";
+	const replaceTildes = (comp, options) => {
+		return comp.trim().split(/\s+/).map((c) => replaceTilde(c, options)).join(" ");
+	};
+	const replaceTilde = (comp, options) => {
+		const r = options.loose ? re[t.TILDELOOSE] : re[t.TILDE];
+		return comp.replace(r, (_, M, m, p, pr) => {
+			debug("tilde", comp, _, M, m, p, pr);
+			let ret;
+			if (isX(M)) ret = "";
+			else if (isX(m)) ret = `>=${M}.0.0 <${+M + 1}.0.0-0`;
+			else if (isX(p)) ret = `>=${M}.${m}.0 <${M}.${+m + 1}.0-0`;
+			else if (pr) {
+				debug("replaceTilde pr", pr);
+				ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
+			} else ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
+			debug("tilde return", ret);
+			return ret;
+		});
+	};
+	const replaceCarets = (comp, options) => {
+		return comp.trim().split(/\s+/).map((c) => replaceCaret(c, options)).join(" ");
+	};
+	const replaceCaret = (comp, options) => {
+		debug("caret", comp, options);
+		const r = options.loose ? re[t.CARETLOOSE] : re[t.CARET];
+		const z = options.includePrerelease ? "-0" : "";
+		return comp.replace(r, (_, M, m, p, pr) => {
+			debug("caret", comp, _, M, m, p, pr);
+			let ret;
+			if (isX(M)) ret = "";
+			else if (isX(m)) ret = `>=${M}.0.0${z} <${+M + 1}.0.0-0`;
+			else if (isX(p)) if (M === "0") ret = `>=${M}.${m}.0${z} <${M}.${+m + 1}.0-0`;
+			else ret = `>=${M}.${m}.0${z} <${+M + 1}.0.0-0`;
+			else if (pr) {
+				debug("replaceCaret pr", pr);
+				if (M === "0") if (m === "0") ret = `>=${M}.${m}.${p}-${pr} <${M}.${m}.${+p + 1}-0`;
+				else ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
+				else ret = `>=${M}.${m}.${p}-${pr} <${+M + 1}.0.0-0`;
+			} else {
+				debug("no pr");
+				if (M === "0") if (m === "0") ret = `>=${M}.${m}.${p}${z} <${M}.${m}.${+p + 1}-0`;
+				else ret = `>=${M}.${m}.${p}${z} <${M}.${+m + 1}.0-0`;
+				else ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
+			}
+			debug("caret return", ret);
+			return ret;
+		});
+	};
+	const replaceXRanges = (comp, options) => {
+		debug("replaceXRanges", comp, options);
+		return comp.split(/\s+/).map((c) => replaceXRange(c, options)).join(" ");
+	};
+	const replaceXRange = (comp, options) => {
+		comp = comp.trim();
+		const r = options.loose ? re[t.XRANGELOOSE] : re[t.XRANGE];
+		return comp.replace(r, (ret, gtlt, M, m, p, pr) => {
+			debug("xRange", comp, ret, gtlt, M, m, p, pr);
+			const xM = isX(M);
+			const xm = xM || isX(m);
+			const xp = xm || isX(p);
+			const anyX = xp;
+			if (gtlt === "=" && anyX) gtlt = "";
+			pr = options.includePrerelease ? "-0" : "";
+			if (xM) if (gtlt === ">" || gtlt === "<") ret = "<0.0.0-0";
+			else ret = "*";
+			else if (gtlt && anyX) {
+				if (xm) m = 0;
+				p = 0;
+				if (gtlt === ">") {
+					gtlt = ">=";
+					if (xm) {
+						M = +M + 1;
+						m = 0;
+						p = 0;
+					} else {
+						m = +m + 1;
+						p = 0;
+					}
+				} else if (gtlt === "<=") {
+					gtlt = "<";
+					if (xm) M = +M + 1;
+					else m = +m + 1;
+				}
+				if (gtlt === "<") pr = "-0";
+				ret = `${gtlt + M}.${m}.${p}${pr}`;
+			} else if (xm) ret = `>=${M}.0.0${pr} <${+M + 1}.0.0-0`;
+			else if (xp) ret = `>=${M}.${m}.0${pr} <${M}.${+m + 1}.0-0`;
+			debug("xRange return", ret);
+			return ret;
+		});
+	};
+	const replaceStars = (comp, options) => {
+		debug("replaceStars", comp, options);
+		return comp.trim().replace(re[t.STAR], "");
+	};
+	const replaceGTE0 = (comp, options) => {
+		debug("replaceGTE0", comp, options);
+		return comp.trim().replace(re[options.includePrerelease ? t.GTE0PRE : t.GTE0], "");
+	};
+	const hyphenReplace = (incPr) => ($0, from, fM, fm, fp, fpr, fb, to, tM, tm, tp, tpr) => {
+		if (isX(fM)) from = "";
+		else if (isX(fm)) from = `>=${fM}.0.0${incPr ? "-0" : ""}`;
+		else if (isX(fp)) from = `>=${fM}.${fm}.0${incPr ? "-0" : ""}`;
+		else if (fpr) from = `>=${from}`;
+		else from = `>=${from}${incPr ? "-0" : ""}`;
+		if (isX(tM)) to = "";
+		else if (isX(tm)) to = `<${+tM + 1}.0.0-0`;
+		else if (isX(tp)) to = `<${tM}.${+tm + 1}.0-0`;
+		else if (tpr) to = `<=${tM}.${tm}.${tp}-${tpr}`;
+		else if (incPr) to = `<${tM}.${tm}.${+tp + 1}-0`;
+		else to = `<=${to}`;
+		return `${from} ${to}`.trim();
+	};
+	const testSet = (set, version, options) => {
+		for (let i = 0; i < set.length; i++) if (!set[i].test(version)) return false;
+		if (version.prerelease.length && !options.includePrerelease) {
+			for (let i = 0; i < set.length; i++) {
+				debug(set[i].semver);
+				if (set[i].semver === Comparator.ANY) continue;
+				if (set[i].semver.prerelease.length > 0) {
+					const allowed = set[i].semver;
+					if (allowed.major === version.major && allowed.minor === version.minor && allowed.patch === version.patch) return true;
+				}
+			}
+			return false;
+		}
+		return true;
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/classes/comparator.js
+var require_comparator = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const ANY = Symbol("SemVer ANY");
+	module.exports = class Comparator {
+		static get ANY() {
+			return ANY;
+		}
+		constructor(comp, options) {
+			options = parseOptions(options);
+			if (comp instanceof Comparator) if (comp.loose === !!options.loose) return comp;
+			else comp = comp.value;
+			comp = comp.trim().split(/\s+/).join(" ");
+			debug("comparator", comp, options);
+			this.options = options;
+			this.loose = !!options.loose;
+			this.parse(comp);
+			if (this.semver === ANY) this.value = "";
+			else this.value = this.operator + this.semver.version;
+			debug("comp", this);
+		}
+		parse(comp) {
+			const r = this.options.loose ? re[t.COMPARATORLOOSE] : re[t.COMPARATOR];
+			const m = comp.match(r);
+			if (!m) throw new TypeError(`Invalid comparator: ${comp}`);
+			this.operator = m[1] !== void 0 ? m[1] : "";
+			if (this.operator === "=") this.operator = "";
+			if (!m[2]) this.semver = ANY;
+			else this.semver = new SemVer(m[2], this.options.loose);
+		}
+		toString() {
+			return this.value;
+		}
+		test(version) {
+			debug("Comparator.test", version, this.options.loose);
+			if (this.semver === ANY || version === ANY) return true;
+			if (typeof version === "string") try {
+				version = new SemVer(version, this.options);
+			} catch (er) {
+				return false;
+			}
+			return cmp(version, this.operator, this.semver, this.options);
+		}
+		intersects(comp, options) {
+			if (!(comp instanceof Comparator)) throw new TypeError("a Comparator is required");
+			if (this.operator === "") {
+				if (this.value === "") return true;
+				return new Range(comp.value, options).test(this.value);
+			} else if (comp.operator === "") {
+				if (comp.value === "") return true;
+				return new Range(this.value, options).test(comp.semver);
+			}
+			options = parseOptions(options);
+			if (options.includePrerelease && (this.value === "<0.0.0-0" || comp.value === "<0.0.0-0")) return false;
+			if (!options.includePrerelease && (this.value.startsWith("<0.0.0") || comp.value.startsWith("<0.0.0"))) return false;
+			if (this.operator.startsWith(">") && comp.operator.startsWith(">")) return true;
+			if (this.operator.startsWith("<") && comp.operator.startsWith("<")) return true;
+			if (this.semver.version === comp.semver.version && this.operator.includes("=") && comp.operator.includes("=")) return true;
+			if (cmp(this.semver, "<", comp.semver, options) && this.operator.startsWith(">") && comp.operator.startsWith("<")) return true;
+			if (cmp(this.semver, ">", comp.semver, options) && this.operator.startsWith("<") && comp.operator.startsWith(">")) return true;
+			return false;
+		}
+	};
+	const parseOptions = require_parse_options();
+	const { safeRe: re, t } = require_re();
+	const cmp = require_cmp();
+	const debug = require_debug();
+	const SemVer = require_semver$1();
+	const Range = require_range();
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/satisfies.js
+var require_satisfies = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const Range = require_range();
+	const satisfies = (version, range, options) => {
+		try {
+			range = new Range(range, options);
+		} catch (er) {
+			return false;
+		}
+		return range.test(version);
+	};
+	module.exports = satisfies;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/ranges/to-comparators.js
+var require_to_comparators = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const Range = require_range();
+	const toComparators = (range, options) => new Range(range, options).set.map((comp) => comp.map((c) => c.value).join(" ").trim().split(" "));
+	module.exports = toComparators;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/ranges/max-satisfying.js
+var require_max_satisfying = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SemVer = require_semver$1();
+	const Range = require_range();
+	const maxSatisfying = (versions, range, options) => {
+		let max = null;
+		let maxSV = null;
+		let rangeObj = null;
+		try {
+			rangeObj = new Range(range, options);
+		} catch (er) {
+			return null;
+		}
+		versions.forEach((v) => {
+			if (rangeObj.test(v)) {
+				if (!max || maxSV.compare(v) === -1) {
+					max = v;
+					maxSV = new SemVer(max, options);
+				}
+			}
+		});
+		return max;
+	};
+	module.exports = maxSatisfying;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/ranges/min-satisfying.js
+var require_min_satisfying = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SemVer = require_semver$1();
+	const Range = require_range();
+	const minSatisfying = (versions, range, options) => {
+		let min = null;
+		let minSV = null;
+		let rangeObj = null;
+		try {
+			rangeObj = new Range(range, options);
+		} catch (er) {
+			return null;
+		}
+		versions.forEach((v) => {
+			if (rangeObj.test(v)) {
+				if (!min || minSV.compare(v) === 1) {
+					min = v;
+					minSV = new SemVer(min, options);
+				}
+			}
+		});
+		return min;
+	};
+	module.exports = minSatisfying;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/ranges/min-version.js
+var require_min_version = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SemVer = require_semver$1();
+	const Range = require_range();
+	const gt = require_gt();
+	const minVersion = (range, loose) => {
+		range = new Range(range, loose);
+		let minver = new SemVer("0.0.0");
+		if (range.test(minver)) return minver;
+		minver = new SemVer("0.0.0-0");
+		if (range.test(minver)) return minver;
+		minver = null;
+		for (let i = 0; i < range.set.length; ++i) {
+			const comparators = range.set[i];
+			let setMin = null;
+			comparators.forEach((comparator) => {
+				const compver = new SemVer(comparator.semver.version);
+				switch (comparator.operator) {
+					case ">":
+						if (compver.prerelease.length === 0) compver.patch++;
+						else compver.prerelease.push(0);
+						compver.raw = compver.format();
+					case "":
+					case ">=":
+						if (!setMin || gt(compver, setMin)) setMin = compver;
+						break;
+					case "<":
+					case "<=": break;
+					/* istanbul ignore next */
+					default: throw new Error(`Unexpected operation: ${comparator.operator}`);
+				}
+			});
+			if (setMin && (!minver || gt(minver, setMin))) minver = setMin;
+		}
+		if (minver && range.test(minver)) return minver;
+		return null;
+	};
+	module.exports = minVersion;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/ranges/valid.js
+var require_valid = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const Range = require_range();
+	const validRange = (range, options) => {
+		try {
+			return new Range(range, options).range || "*";
+		} catch (er) {
+			return null;
+		}
+	};
+	module.exports = validRange;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/ranges/outside.js
+var require_outside = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const SemVer = require_semver$1();
+	const Comparator = require_comparator();
+	const { ANY } = Comparator;
+	const Range = require_range();
+	const satisfies = require_satisfies();
+	const gt = require_gt();
+	const lt = require_lt();
+	const lte = require_lte();
+	const gte = require_gte();
+	const outside = (version, range, hilo, options) => {
+		version = new SemVer(version, options);
+		range = new Range(range, options);
+		let gtfn, ltefn, ltfn, comp, ecomp;
+		switch (hilo) {
+			case ">":
+				gtfn = gt;
+				ltefn = lte;
+				ltfn = lt;
+				comp = ">";
+				ecomp = ">=";
+				break;
+			case "<":
+				gtfn = lt;
+				ltefn = gte;
+				ltfn = gt;
+				comp = "<";
+				ecomp = "<=";
+				break;
+			default: throw new TypeError("Must provide a hilo val of \"<\" or \">\"");
+		}
+		if (satisfies(version, range, options)) return false;
+		for (let i = 0; i < range.set.length; ++i) {
+			const comparators = range.set[i];
+			let high = null;
+			let low = null;
+			comparators.forEach((comparator) => {
+				if (comparator.semver === ANY) comparator = new Comparator(">=0.0.0");
+				high = high || comparator;
+				low = low || comparator;
+				if (gtfn(comparator.semver, high.semver, options)) high = comparator;
+				else if (ltfn(comparator.semver, low.semver, options)) low = comparator;
+			});
+			if (high.operator === comp || high.operator === ecomp) return false;
+			if ((!low.operator || low.operator === comp) && ltefn(version, low.semver)) return false;
+			else if (low.operator === ecomp && ltfn(version, low.semver)) return false;
+		}
+		return true;
+	};
+	module.exports = outside;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/ranges/gtr.js
+var require_gtr = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const outside = require_outside();
+	const gtr = (version, range, options) => outside(version, range, ">", options);
+	module.exports = gtr;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/ranges/ltr.js
+var require_ltr = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const outside = require_outside();
+	const ltr = (version, range, options) => outside(version, range, "<", options);
+	module.exports = ltr;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/ranges/intersects.js
+var require_intersects = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const Range = require_range();
+	const intersects = (r1, r2, options) => {
+		r1 = new Range(r1, options);
+		r2 = new Range(r2, options);
+		return r1.intersects(r2, options);
+	};
+	module.exports = intersects;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/ranges/simplify.js
+var require_simplify = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const satisfies = require_satisfies();
+	const compare = require_compare();
+	module.exports = (versions, range, options) => {
+		const set = [];
+		let first = null;
+		let prev = null;
+		const v = versions.sort((a, b) => compare(a, b, options));
+		for (const version of v) if (satisfies(version, range, options)) {
+			prev = version;
+			if (!first) first = version;
+		} else {
+			if (prev) set.push([first, prev]);
+			prev = null;
+			first = null;
+		}
+		if (first) set.push([first, null]);
+		const ranges = [];
+		for (const [min, max] of set) if (min === max) ranges.push(min);
+		else if (!max && min === v[0]) ranges.push("*");
+		else if (!max) ranges.push(`>=${min}`);
+		else if (min === v[0]) ranges.push(`<=${max}`);
+		else ranges.push(`${min} - ${max}`);
+		const simplified = ranges.join(" || ");
+		const original = typeof range.raw === "string" ? range.raw : String(range);
+		return simplified.length < original.length ? simplified : range;
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/ranges/subset.js
+var require_subset = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const Range = require_range();
+	const Comparator = require_comparator();
+	const { ANY } = Comparator;
+	const satisfies = require_satisfies();
+	const compare = require_compare();
+	const subset = (sub, dom, options = {}) => {
+		if (sub === dom) return true;
+		sub = new Range(sub, options);
+		dom = new Range(dom, options);
+		let sawNonNull = false;
+		OUTER: for (const simpleSub of sub.set) {
+			for (const simpleDom of dom.set) {
+				const isSub = simpleSubset(simpleSub, simpleDom, options);
+				sawNonNull = sawNonNull || isSub !== null;
+				if (isSub) continue OUTER;
+			}
+			if (sawNonNull) return false;
+		}
+		return true;
+	};
+	const minimumVersionWithPreRelease = [new Comparator(">=0.0.0-0")];
+	const minimumVersion = [new Comparator(">=0.0.0")];
+	const simpleSubset = (sub, dom, options) => {
+		if (sub === dom) return true;
+		if (sub.length === 1 && sub[0].semver === ANY) if (dom.length === 1 && dom[0].semver === ANY) return true;
+		else if (options.includePrerelease) sub = minimumVersionWithPreRelease;
+		else sub = minimumVersion;
+		if (dom.length === 1 && dom[0].semver === ANY) if (options.includePrerelease) return true;
+		else dom = minimumVersion;
+		const eqSet = /* @__PURE__ */ new Set();
+		let gt, lt;
+		for (const c of sub) if (c.operator === ">" || c.operator === ">=") gt = higherGT(gt, c, options);
+		else if (c.operator === "<" || c.operator === "<=") lt = lowerLT(lt, c, options);
+		else eqSet.add(c.semver);
+		if (eqSet.size > 1) return null;
+		let gtltComp;
+		if (gt && lt) {
+			gtltComp = compare(gt.semver, lt.semver, options);
+			if (gtltComp > 0) return null;
+			else if (gtltComp === 0 && (gt.operator !== ">=" || lt.operator !== "<=")) return null;
+		}
+		for (const eq of eqSet) {
+			if (gt && !satisfies(eq, String(gt), options)) return null;
+			if (lt && !satisfies(eq, String(lt), options)) return null;
+			for (const c of dom) if (!satisfies(eq, String(c), options)) return false;
+			return true;
+		}
+		let higher, lower;
+		let hasDomLT, hasDomGT;
+		let needDomLTPre = lt && !options.includePrerelease && lt.semver.prerelease.length ? lt.semver : false;
+		let needDomGTPre = gt && !options.includePrerelease && gt.semver.prerelease.length ? gt.semver : false;
+		if (needDomLTPre && needDomLTPre.prerelease.length === 1 && lt.operator === "<" && needDomLTPre.prerelease[0] === 0) needDomLTPre = false;
+		for (const c of dom) {
+			hasDomGT = hasDomGT || c.operator === ">" || c.operator === ">=";
+			hasDomLT = hasDomLT || c.operator === "<" || c.operator === "<=";
+			if (gt) {
+				if (needDomGTPre) {
+					if (c.semver.prerelease && c.semver.prerelease.length && c.semver.major === needDomGTPre.major && c.semver.minor === needDomGTPre.minor && c.semver.patch === needDomGTPre.patch) needDomGTPre = false;
+				}
+				if (c.operator === ">" || c.operator === ">=") {
+					higher = higherGT(gt, c, options);
+					if (higher === c && higher !== gt) return false;
+				} else if (gt.operator === ">=" && !satisfies(gt.semver, String(c), options)) return false;
+			}
+			if (lt) {
+				if (needDomLTPre) {
+					if (c.semver.prerelease && c.semver.prerelease.length && c.semver.major === needDomLTPre.major && c.semver.minor === needDomLTPre.minor && c.semver.patch === needDomLTPre.patch) needDomLTPre = false;
+				}
+				if (c.operator === "<" || c.operator === "<=") {
+					lower = lowerLT(lt, c, options);
+					if (lower === c && lower !== lt) return false;
+				} else if (lt.operator === "<=" && !satisfies(lt.semver, String(c), options)) return false;
+			}
+			if (!c.operator && (lt || gt) && gtltComp !== 0) return false;
+		}
+		if (gt && hasDomLT && !lt && gtltComp !== 0) return false;
+		if (lt && hasDomGT && !gt && gtltComp !== 0) return false;
+		if (needDomGTPre || needDomLTPre) return false;
+		return true;
+	};
+	const higherGT = (a, b, options) => {
+		if (!a) return b;
+		const comp = compare(a.semver, b.semver, options);
+		return comp > 0 ? a : comp < 0 ? b : b.operator === ">" && a.operator === ">=" ? b : a;
+	};
+	const lowerLT = (a, b, options) => {
+		if (!a) return b;
+		const comp = compare(a.semver, b.semver, options);
+		return comp < 0 ? a : comp > 0 ? b : b.operator === "<" && a.operator === "<=" ? b : a;
+	};
+	module.exports = subset;
+}));
+//#endregion
+//#region src/shared/range-resolver.ts
+/**
+* Resolves the latest commit on a source-mirror branch whose
+* `package.json#zenbu.host` semver range still satisfies the running
+* .app's `host.json#version`. Pure functions over `isomorphic-git` plus
+* `semver` — no Electron dependency.
+*
+* Imported by both:
+*   - `packages/core/src/launcher.ts` (tsdown inlines this into
+*     `dist/launcher.mjs`; the launcher cannot `import "@zenbujs/core"`)
+*   - `packages/core/src/services/updater.ts` (resolved through normal
+*     `@zenbujs/core/...` resolution at runtime)
+*
+* Algorithm:
+*   1. Hot path — resolve `refs/remotes/origin/<branch>` (caller is
+*      responsible for an upstream-fresh ref; the launcher and updater
+*      both `git.fetch` before invoking us). If the tip's
+*      `package.json#zenbu.host` already satisfies `hostVersion`,
+*      return tip.
+*   2. Cold path — deepen the local shallow history geometrically
+*      (`git.fetch({depth: nextDepth, relative: false})`), running
+*      `git.log({depth: nextDepth})` to enumerate the now-known history.
+*      Lower-bound binary search inside that window for the smallest
+*      index whose commit is compatible — i.e. the LATEST compatible
+*      commit. The search assumes monotonic ranges (newer commits'
+*      `zenbu.host` is equal-or-stricter than older commits'); if a
+*      project violates this, the resolver may pick a slightly older
+*      compatible commit than the absolute latest.
+*   3. If deepen exhausts the branch's history without finding a
+*      compatible commit, return `targetSha: null`. The caller decides
+*      what to do (the launcher errors out; the updater service surfaces
+*      `phase: "incompatible"`).
+*/
+var import_semver = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const internalRe = require_re();
+	const constants = require_constants();
+	const SemVer = require_semver$1();
+	const identifiers = require_identifiers();
+	module.exports = {
+		parse: require_parse(),
+		valid: require_valid$1(),
+		clean: require_clean(),
+		inc: require_inc(),
+		diff: require_diff(),
+		major: require_major(),
+		minor: require_minor(),
+		patch: require_patch(),
+		prerelease: require_prerelease(),
+		compare: require_compare(),
+		rcompare: require_rcompare(),
+		compareLoose: require_compare_loose(),
+		compareBuild: require_compare_build(),
+		sort: require_sort(),
+		rsort: require_rsort(),
+		gt: require_gt(),
+		lt: require_lt(),
+		eq: require_eq(),
+		neq: require_neq(),
+		gte: require_gte(),
+		lte: require_lte(),
+		cmp: require_cmp(),
+		coerce: require_coerce(),
+		truncate: require_truncate(),
+		Comparator: require_comparator(),
+		Range: require_range(),
+		satisfies: require_satisfies(),
+		toComparators: require_to_comparators(),
+		maxSatisfying: require_max_satisfying(),
+		minSatisfying: require_min_satisfying(),
+		minVersion: require_min_version(),
+		validRange: require_valid(),
+		outside: require_outside(),
+		gtr: require_gtr(),
+		ltr: require_ltr(),
+		intersects: require_intersects(),
+		simplifyRange: require_simplify(),
+		subset: require_subset(),
+		SemVer,
+		re: internalRe.re,
+		src: internalRe.src,
+		tokens: internalRe.t,
+		SEMVER_SPEC_VERSION: constants.SEMVER_SPEC_VERSION,
+		RELEASE_TYPES: constants.RELEASE_TYPES,
+		compareIdentifiers: identifiers.compareIdentifiers,
+		rcompareIdentifiers: identifiers.rcompareIdentifiers
+	};
+})))(), 1);
+const FIRST_DEEPEN_DEPTH = 16;
+const MAX_DEEPEN_DEPTH = 4096;
+async function readZenbuHostAt(args) {
+	try {
+		const { blob } = await import_isomorphic_git.readBlob({
+			fs: args.fs,
+			dir: args.dir,
+			oid: args.commitOid,
+			filepath: "package.json"
+		});
+		const text = Buffer.from(blob).toString("utf8");
+		const raw = JSON.parse(text).zenbu?.host;
+		if (typeof raw !== "string" || raw.trim().length === 0) return {
+			range: null,
+			missing: true
+		};
+		return {
+			range: raw.trim(),
+			missing: false
+		};
+	} catch {
+		return {
+			range: null,
+			missing: true
+		};
+	}
+}
+function isCompatible(hostVersion, range) {
+	if (!range) return true;
+	try {
+		return import_semver.default.satisfies(hostVersion, range, { includePrerelease: true });
+	} catch {
+		return false;
+	}
+}
+async function resolveTargetSha(input) {
+	const { fs, http, dir, mirror, hostVersion, reporter = null, signal } = input;
+	const remoteRef = `refs/remotes/origin/${mirror.branch}`;
+	reporter?.step?.("resolve", `Resolving compatible commit (host=${hostVersion})`);
+	const tipSha = await import_isomorphic_git.resolveRef({
+		fs,
+		dir,
+		ref: remoteRef
+	});
+	let consideredCommits = 1;
+	const tipInfo = await readZenbuHostAt({
+		fs,
+		dir,
+		commitOid: tipSha
+	});
+	if (isCompatible(hostVersion, tipInfo.range)) {
+		reporter?.message?.(`[resolve] tip ${tipSha.slice(0, 7)} ` + (tipInfo.range ? `range="${tipInfo.range}" ok for host=${hostVersion}` : `no zenbu.host declared; assuming compatible`));
+		reporter?.done?.("resolve");
+		return {
+			targetSha: tipSha,
+			tipSha,
+			consideredCommits,
+			exhaustedHistory: false
+		};
+	}
+	reporter?.message?.(`[resolve] tip ${tipSha.slice(0, 7)} range="${tipInfo.range}" does not satisfy host=${hostVersion}; deepening history...`);
+	let depth = FIRST_DEEPEN_DEPTH;
+	let lastSeen = 1;
+	let exhausted = false;
+	while (depth <= MAX_DEEPEN_DEPTH) {
+		if (signal?.aborted) throw new Error("resolveTargetSha aborted");
+		reporter?.progress?.({
+			phase: "resolve",
+			loaded: depth,
+			total: MAX_DEEPEN_DEPTH
+		});
+		try {
+			await import_isomorphic_git.fetch({
+				fs,
+				http,
+				dir,
+				url: mirror.url,
+				ref: mirror.branch,
+				singleBranch: true,
+				depth,
+				relative: false,
+				tags: false
+			});
+		} catch (err) {
+			reporter?.message?.(`[resolve] deepen depth=${depth} failed: ${err.message}`);
+			break;
+		}
+		const log = await import_isomorphic_git.log({
+			fs,
+			dir,
+			ref: remoteRef,
+			depth
+		});
+		if (log.length <= lastSeen) {
+			exhausted = true;
+			break;
+		}
+		lastSeen = log.length;
+		consideredCommits = log.length;
+		const oids = log.map((c) => c.oid);
+		let lo = 0;
+		let hi = oids.length;
+		while (lo < hi) {
+			if (signal?.aborted) throw new Error("resolveTargetSha aborted");
+			const mid = lo + hi >>> 1;
+			if (isCompatible(hostVersion, (await readZenbuHostAt({
+				fs,
+				dir,
+				commitOid: oids[mid]
+			})).range)) hi = mid;
+			else lo = mid + 1;
+		}
+		if (lo < oids.length) {
+			const targetSha = oids[lo];
+			reporter?.message?.(`[resolve] picked ${targetSha.slice(0, 7)} (${oids.length - lo} commits behind tip; host=${hostVersion} ok)`);
+			reporter?.done?.("resolve");
+			return {
+				targetSha,
+				tipSha,
+				consideredCommits,
+				exhaustedHistory: false
+			};
+		}
+		depth *= 2;
+	}
+	reporter?.message?.(`[resolve] no compatible commit found in ${consideredCommits} commits on origin/${mirror.branch} (host=${hostVersion})`);
+	reporter?.error?.({
+		id: "resolve",
+		message: `no commit on origin/${mirror.branch} declares zenbu.host that satisfies host=${hostVersion}`
+	});
+	return {
+		targetSha: null,
+		tipSha,
+		consideredCommits,
+		exhaustedHistory: exhausted
+	};
+}
+//#endregion
+//#region src/launcher.ts
+/**
+* Zenbu launcher shim.
 *
 * Shipped inside `@zenbujs/core/dist/launcher.mjs` and copied into the .app
 * bundle by `zen build:electron`. The bundle's `package.json#main` points
@@ -18072,8 +20454,128 @@ process.on("unhandledRejection", (reason) => {
 		_logStream.write("[UNHANDLED] " + (err?.stack ?? err?.message ?? String(reason)) + "\n");
 	} catch {}
 });
+const LEGACY_PACKAGE_MANAGER = {
+	type: "pnpm",
+	version: "10.33.0"
+};
 const APP_PATH = app.getAppPath();
 const RESOURCES_PATH = path.dirname(APP_PATH);
+function readBgColor(htmlPath, fallback) {
+	try {
+		const match = fs.readFileSync(htmlPath, "utf8").match(/<meta\s+name=["']zenbu-bg["']\s+content=["']([^"']+)["']/i);
+		if (match?.[1]) return match[1];
+	} catch {}
+	return fallback;
+}
+async function maybeOpenInstallingWindow(cfg) {
+	if (!cfg.installingHtml) return null;
+	const htmlPath = path.join(RESOURCES_PATH, cfg.installingHtml);
+	if (!existsSync(htmlPath)) {
+		_logStream.write(`[installer] installing.html not found at ${htmlPath}; skipping window\n`);
+		return null;
+	}
+	const preloadPath = cfg.installingPreload ? path.join(RESOURCES_PATH, cfg.installingPreload) : null;
+	if (!preloadPath || !existsSync(preloadPath)) {
+		_logStream.write(`[installer] installing-preload.cjs not found at ${preloadPath}; skipping window\n`);
+		return null;
+	}
+	const win = new BaseWindow({
+		width: 1100,
+		height: 750,
+		titleBarStyle: "hidden",
+		trafficLightPosition: {
+			x: 14,
+			y: 10
+		},
+		backgroundColor: readBgColor(htmlPath, "#F4F4F4")
+	});
+	const view = new WebContentsView({ webPreferences: {
+		preload: preloadPath,
+		contextIsolation: true,
+		sandbox: true,
+		nodeIntegration: false
+	} });
+	win.contentView.addChildView(view);
+	const layout = () => {
+		const { width, height } = win.getContentBounds();
+		view.setBounds({
+			x: 0,
+			y: 0,
+			width,
+			height
+		});
+	};
+	layout();
+	win.on("resize", layout);
+	let ready = false;
+	const pending = [];
+	view.webContents.once("did-finish-load", () => {
+		ready = true;
+		for (const p of pending) try {
+			if (view.webContents.isDestroyed()) break;
+			view.webContents.send(`zenbu:install:${p.event}`, p.payload);
+		} catch {}
+		pending.length = 0;
+	});
+	view.webContents.once("did-fail-load", (_e, _code, desc) => {
+		_logStream.write(`[installer] did-fail-load: ${desc}\n`);
+		pending.length = 0;
+		ready = true;
+	});
+	view.webContents.loadFile(htmlPath).catch((err) => {
+		_logStream.write(`[installer] loadFile failed: ${err.message ?? err}\n`);
+	});
+	const emit = (event, payload) => {
+		if (!ready) {
+			pending.push({
+				event,
+				payload
+			});
+			return;
+		}
+		try {
+			if (view.webContents.isDestroyed()) return;
+			view.webContents.send(`zenbu:install:${event}`, payload);
+		} catch {}
+	};
+	let currentStep = null;
+	return {
+		emit,
+		get currentStep() {
+			return currentStep;
+		},
+		step(id, label) {
+			currentStep = id;
+			emit("step", {
+				id,
+				label
+			});
+		},
+		done(id) {
+			emit("done", { id });
+		},
+		message(text) {
+			emit("message", { text });
+		},
+		progress(payload) {
+			emit("progress", payload);
+		},
+		fail(err, id) {
+			const message = err instanceof Error ? err.stack ?? err.message : String(err);
+			emit("error", {
+				id: id ?? currentStep ?? void 0,
+				message
+			});
+		},
+		handoff() {
+			const slot = globalThis;
+			slot.__zenbu_boot_windows__ = [...slot.__zenbu_boot_windows__ ?? [], {
+				windowId: "main",
+				win
+			}];
+		}
+	};
+}
 function readAppConfig() {
 	const configPath = path.join(APP_PATH, "app-config.json");
 	return JSON.parse(fs.readFileSync(configPath, "utf8"));
@@ -18082,64 +20584,6 @@ function appsDirFor(name) {
 	if (process.env.ZENBU_APPS_DIR) return path.resolve(process.env.ZENBU_APPS_DIR);
 	return path.join(os.homedir(), ".zenbu", "apps", name);
 }
-async function fileHash(hash, filePath) {
-	hash.update(filePath);
-	hash.update("\0");
-	try {
-		hash.update(await fsp.readFile(filePath));
-	} catch {}
-	hash.update("\0");
-}
-async function depsSignature(appsDir) {
-	const hash = crypto$1.createHash("sha256");
-	await fileHash(hash, path.join(appsDir, "package.json"));
-	await fileHash(hash, path.join(appsDir, "pnpm-lock.yaml"));
-	hash.update(process.versions.electron ?? "no-electron");
-	hash.update("\0");
-	hash.update(process.platform);
-	hash.update("\0");
-	hash.update(process.arch);
-	return hash.digest("hex");
-}
-function bundledToolPath(name) {
-	const candidates = [path.join(RESOURCES_PATH, "toolchain", "bin", name), path.join(RESOURCES_PATH, "toolchain", name)];
-	for (const candidate of candidates) if (existsSync(candidate)) return candidate;
-	return null;
-}
-function electronTargetVersion(appsDir) {
-	if (process.versions.electron) return process.versions.electron;
-	try {
-		const pkg = JSON.parse(fs.readFileSync(path.join(appsDir, "package.json"), "utf8"));
-		return (pkg.devDependencies?.electron ?? pkg.dependencies?.electron ?? "").replace(/^[^\d]*/, "") || "42.0.0";
-	} catch {
-		return "42.0.0";
-	}
-}
-async function runPnpmInstall(appsDir) {
-	const pnpm = bundledToolPath("pnpm");
-	if (!pnpm) throw new Error(`bundled pnpm not found in ${RESOURCES_PATH}/toolchain. The .app is missing required toolchain binaries.`);
-	const target = electronTargetVersion(appsDir);
-	await new Promise((resolve, reject) => {
-		const child = spawn(pnpm, ["install", "--no-frozen-lockfile"], {
-			cwd: appsDir,
-			stdio: "inherit",
-			env: {
-				...process.env,
-				CI: "true",
-				HOME: path.join(appsDir, ".zenbu", ".node-gyp"),
-				npm_config_runtime: "electron",
-				npm_config_target: target,
-				npm_config_disturl: "https://electronjs.org/headers",
-				npm_config_arch: process.arch
-			}
-		});
-		child.on("error", reject);
-		child.on("close", (code) => {
-			if (code === 0) resolve();
-			else reject(/* @__PURE__ */ new Error(`pnpm install exited with code ${code}`));
-		});
-	});
-}
 function resolveMirror(cfg) {
 	if (!cfg.mirrorUrl) throw new Error("[launcher] no mirror configured. The .app's app-config.json must contain `mirrorUrl` (the GitHub repo cloned on first launch). Configure `mirror.target` in zenbu.build.ts and rebuild.");
 	return {
@@ -18168,8 +20612,9 @@ async function hasLocalModifications(dir) {
 		return false;
 	}
 }
-async function cloneMirror(dir, mirror) {
+async function cloneMirror(dir, mirror, installer) {
 	console.log(`[launcher] cloning ${mirror.url}#${mirror.branch} -> ${dir}`);
+	installer?.step("clone", `Cloning ${mirror.url}#${mirror.branch}`);
 	await fsp.mkdir(dir, { recursive: true });
 	await import_isomorphic_git.clone({
 		fs,
@@ -18178,21 +20623,29 @@ async function cloneMirror(dir, mirror) {
 		url: mirror.url,
 		ref: mirror.branch,
 		singleBranch: true,
-		depth: 1
+		depth: 1,
+		onProgress: installer ? (e) => {
+			const ratio = e.total ? e.loaded / e.total : void 0;
+			installer.progress({
+				phase: e.phase,
+				loaded: e.loaded,
+				total: e.total,
+				ratio
+			});
+		} : void 0,
+		onMessage: installer ? (msg) => installer.message(msg.replace(/\n+$/g, "")) : void 0
 	});
 	console.log(`[launcher] clone complete`);
+	installer?.done("clone");
 }
 /**
-* Fast-forward `dir` to the remote tip when:
-*   1. We have a working tree (otherwise we'd be cloning, not pulling).
-*   2. The local HEAD differs from origin/<branch>.
-*   3. The working tree is clean — never silently overwrite user edits.
-*
-* On clean trees with new commits, we `checkout --force` the remote sha.
-* That's equivalent to `git reset --hard origin/<branch>` for a fast-forward
-* scenario and avoids isomorphic-git's lack of a built-in pull operation.
+* Best-effort `git fetch --depth=1` against `origin/<branch>`. Failures
+* are non-fatal — the resolver runs next and may still find a local
+* compatible commit on a previously-deepened working tree. Skips the
+* remote checkout entirely (the resolver decides which sha to land on).
 */
-async function fetchAndUpdate(dir, mirror) {
+async function fetchTip(dir, mirror, installer) {
+	installer?.step("fetch", `Updating from ${mirror.url}#${mirror.branch}`);
 	try {
 		await import_isomorphic_git.fetch({
 			fs,
@@ -18202,67 +20655,97 @@ async function fetchAndUpdate(dir, mirror) {
 			ref: mirror.branch,
 			singleBranch: true,
 			depth: 1,
-			tags: false
+			tags: false,
+			onProgress: installer ? (e) => {
+				const ratio = e.total ? e.loaded / e.total : void 0;
+				installer.progress({
+					phase: e.phase,
+					loaded: e.loaded,
+					total: e.total,
+					ratio
+				});
+			} : void 0,
+			onMessage: installer ? (msg) => installer.message(msg.replace(/\n+$/g, "")) : void 0
 		});
 	} catch (err) {
 		console.warn(`[launcher] fetch failed (${err.message}); using local state`);
-		return;
+	} finally {
+		installer?.done("fetch");
 	}
-	let localSha;
-	let remoteSha;
+}
+/**
+* Resolve the latest commit on origin/<branch> whose
+* `package.json#zenbu.host` satisfies the running .app's `hostVersion`,
+* and check it out if HEAD isn't already there. Pure delegation to
+* `resolveTargetSha` from `shared/range-resolver.ts` — same code path
+* used by `UpdaterService.update()` at runtime.
+*/
+async function resolveAndCheckout(dir, mirror, hostVersion, installer) {
+	const result = await resolveTargetSha({
+		fs,
+		http: index,
+		dir,
+		mirror: {
+			url: mirror.url,
+			branch: mirror.branch
+		},
+		hostVersion,
+		reporter: installer
+	});
+	if (result.targetSha === null) throw new Error(`[launcher] no commit on origin/${mirror.branch} declares a package.json#zenbu.host range that satisfies host=${hostVersion}. Update the .app to a newer build, or push a compatible source commit to the mirror.`);
+	let localSha = null;
 	try {
 		localSha = await import_isomorphic_git.resolveRef({
 			fs,
 			dir,
 			ref: "HEAD"
 		});
-		remoteSha = await import_isomorphic_git.resolveRef({
-			fs,
-			dir,
-			ref: `refs/remotes/origin/${mirror.branch}`
-		});
-	} catch (err) {
-		console.warn(`[launcher] could not resolve refs (${err.message}); using local state`);
-		return;
-	}
-	if (localSha === remoteSha) {
+	} catch {}
+	if (localSha === result.targetSha) {
 		console.log(`[launcher] up to date (${localSha.slice(0, 7)})`);
 		return;
 	}
-	if (await hasLocalModifications(dir)) {
-		console.warn(`[launcher] working tree at ${dir} has uncommitted modifications; skipping fast-forward to ${remoteSha.slice(0, 7)}.`);
-		return;
-	}
-	console.log(`[launcher] fast-forwarding ${localSha.slice(0, 7)} -> ${remoteSha.slice(0, 7)}`);
+	console.log(`[launcher] checking out ${result.targetSha.slice(0, 7)}` + (localSha ? ` (was ${localSha.slice(0, 7)})` : "") + (result.targetSha === result.tipSha ? "" : ` (tip=${result.tipSha.slice(0, 7)})`));
 	await import_isomorphic_git.checkout({
 		fs,
 		dir,
-		ref: remoteSha,
+		ref: result.targetSha,
 		force: true
 	});
 }
-async function ensureAppsDir(appsDir, mirror) {
+async function ensureAppsDir(appsDir, mirror, hostVersion, installer) {
 	if (isExistingClone(appsDir)) {
-		await fetchAndUpdate(appsDir, mirror);
-		return;
-	}
-	if (existsSync(appsDir)) {
-		const entries = await fsp.readdir(appsDir).catch(() => []);
-		if (entries.length > 0) throw new Error(`[launcher] ${appsDir} exists and isn't a git working tree (has ${entries.length} entries). Move or delete it, then relaunch.`);
+		if (await hasLocalModifications(appsDir)) {
+			console.warn(`[launcher] working tree at ${appsDir} has uncommitted modifications; skipping fetch + resolve.`);
+			installer?.message(`[launcher] uncommitted modifications detected; skipping update`);
+			return;
+		}
+		await fetchTip(appsDir, mirror, installer);
+	} else {
+		if (existsSync(appsDir)) {
+			const entries = await fsp.readdir(appsDir).catch(() => []);
+			if (entries.length > 0) throw new Error(`[launcher] ${appsDir} exists and isn't a git working tree (has ${entries.length} entries). Move or delete it, then relaunch.`);
+		}
+		await cloneMirror(appsDir, mirror, installer);
 	}
-	await cloneMirror(appsDir, mirror);
+	await resolveAndCheckout(appsDir, mirror, hostVersion, installer);
 }
-async function ensureDepsInstalled(appsDir) {
-	const sigPath = path.join(appsDir, ".zenbu", "deps-sig");
+async function ensureDepsInstalled(appsDir, pm, installer) {
 	const nodeModules = path.join(appsDir, "node_modules");
-	const nextSig = await depsSignature(appsDir);
-	if (existsSync(nodeModules)) try {
-		if (await fsp.readFile(sigPath, "utf8") === nextSig) return;
-	} catch {}
-	console.log(`[launcher] installing deps in ${appsDir}`);
-	await runPnpmInstall(appsDir);
-	await fsp.mkdir(path.dirname(sigPath), { recursive: true });
-	await fsp.writeFile(sigPath, nextSig);
+	const nextSig = await depsSignature(appsDir, pm);
+	if (existsSync(nodeModules)) {
+		if (await readDepsSig(appsDir) === nextSig) return;
+	}
+	console.log(`[launcher] installing deps in ${appsDir} via ${pm.type}@${pm.version}`);
+	installer?.step("install", `Installing dependencies (${pm.type}@${pm.version})`);
+	await runInstall({
+		appsDir,
+		resourcesPath: RESOURCES_PATH,
+		pm,
+		reporter: installer
+	});
+	await writeDepsSig(appsDir, nextSig);
+	installer?.done("install");
 }
 async function handoff(appsDir) {
 	const entry = path.join(appsDir, "node_modules", "@zenbujs", "core", "dist", "setup-gate.mjs");
@@ -18274,11 +20757,21 @@ async function handoff(appsDir) {
 async function main() {
 	await app.whenReady();
 	const cfg = readAppConfig();
-	const mirror = resolveMirror(cfg);
-	const appsDir = appsDirFor(cfg.name);
-	await ensureAppsDir(appsDir, mirror);
-	await ensureDepsInstalled(appsDir);
-	await handoff(appsDir);
+	const installer = await maybeOpenInstallingWindow(cfg);
+	try {
+		const mirror = resolveMirror(cfg);
+		const appsDir = appsDirFor(cfg.name);
+		const pm = cfg.packageManager ?? LEGACY_PACKAGE_MANAGER;
+		const { version: hostVersion } = readHostVersion(APP_PATH);
+		await ensureAppsDir(appsDir, mirror, hostVersion, installer);
+		await ensureDepsInstalled(appsDir, pm, installer);
+		installer?.step("handoff", "Starting app");
+		installer?.handoff();
+		await handoff(appsDir);
+	} catch (err) {
+		installer?.fail(err);
+		throw err;
+	}
 }
 main().catch((err) => {
 	console.error("[launcher] fatal:", err);