cli-jaw 2.17.65 → 2.17.66

package/scripts/audit-allowlist.json

@@ -8,74 +8,11 @@
     "An entry is a decision, not a mute. 'reason' has to say why the vulnerable path",
     "is unreachable HERE, not that the package is popular or the severity looks low.",
     "When 'review' passes, the gate warns; that is the prompt to re-check reachability",
-    "rather than extend the date reflexively."
+    "rather than extend the date reflexively.",
+    "",
+    "An entry names the advisory IDs it covers. A new advisory against an",
+    "allowlisted package fails the gate until someone re-checks reachability",
+    "for that advisory too (scripts/deps-audit-classify.ts)."
   ],
-  "allow": [
-    {
-      "package": "shell-quote",
-      "severity": "critical",
-      "reason": "Reached only through concurrently, which this repo runs from the electron:dev script with hardcoded literal arguments. No caller passes user or agent input to it, and it is devDependency-only so it never ships.",
-      "review": "2026-11-01"
-    },
-    {
-      "package": "concurrently",
-      "severity": "critical",
-      "reason": "The shell-quote path above; concurrently itself adds no new sink. devDependency, electron:dev only.",
-      "review": "2026-11-01"
-    },
-    {
-      "package": "undici",
-      "severity": "high",
-      "reason": "Both advisories need a precondition we do not create: a SOCKS5 ProxyAgent, or a shared response cache across principals. discord.js and jsdom use plain HTTPS with no proxy agent configured.",
-      "review": "2026-11-01"
-    },
-    {
-      "package": "discord.js",
-      "severity": "moderate",
-      "reason": "No advisory of its own; flagged purely as a path to undici. The preconditions there (a SOCKS5 ProxyAgent, or a cache shared across principals) are the ones that would have to hold, and discord.js configures neither.",
-      "review": "2026-11-01"
-    },
-    {
-      "package": "@discordjs/rest",
-      "severity": "moderate",
-      "reason": "No advisory of its own; flagged purely as a path to undici, and it issues plain HTTPS requests with no proxy agent, so the SOCKS5 and shared-cache preconditions never hold.",
-      "review": "2026-11-01"
-    },
-    {
-      "package": "nanoid",
-      "severity": "high",
-      "reason": "Requires calling the non-secure generator with a negative or zero size. Reached only via postcss at build time, which passes a fixed positive length.",
-      "review": "2026-11-01"
-    },
-    {
-      "package": "postcss",
-      "severity": "high",
-      "reason": "sourceMappingURL arbitrary read needs attacker-controlled CSS at build time. Our CSS is repository content; a writer with that access already has the tree.",
-      "review": "2026-11-01"
-    },
-    {
-      "package": "@babel/core",
-      "severity": "low",
-      "reason": "Same sourceMappingURL class as postcss, same build-time-only reachability.",
-      "review": "2026-11-01"
-    },
-    {
-      "package": "esbuild",
-      "severity": "low",
-      "reason": "Arbitrary read applies to the esbuild DEVELOPMENT SERVER on Windows. We use esbuild as a bundler; the dev server is never started in this repo.",
-      "review": "2026-11-01"
-    },
-    {
-      "package": "vite",
-      "severity": "high",
-      "reason": "Dev-server-only, and the launch-editor UNC disclosure additionally needs Windows. Production builds do not run the dev server.",
-      "review": "2026-11-01"
-    },
-    {
-      "package": "body-parser",
-      "severity": "low",
-      "reason": "DoS applies when an INVALID limit value silently disables size enforcement. We pass no limit, so the default stays in force.",
-      "review": "2026-11-01"
-    }
-  ]
+  "allow": []
 }

package/scripts/check-deps-audit.ts

@@ -18,25 +18,18 @@
 import { execFileSync } from 'node:child_process';
 import fs from 'node:fs';
 import path from 'node:path';
+import { classifyAudit, type AllowEntry, type AuditVuln } from './deps-audit-classify.js';
 
-interface AllowEntry { package: string; severity: string; reason: string; review: string }
 interface Allowlist { allow: AllowEntry[] }
-interface AuditVuln { severity: string; isDirect?: boolean; via?: Array<string | { title?: string; url?: string }> }
 
-const SEVERITY_ORDER = ['info', 'low', 'moderate', 'high', 'critical'];
 const FAIL_AT = process.env['DEPS_AUDIT_LEVEL'] ?? 'low';
 
-function atLeast(sev: string, floor: string): boolean {
-    return SEVERITY_ORDER.indexOf(sev) >= SEVERITY_ORDER.indexOf(floor);
-}
-
 const allowPath = path.resolve('scripts/audit-allowlist.json');
 if (!fs.existsSync(allowPath)) {
     console.error('[deps] scripts/audit-allowlist.json not found');
     process.exit(2);
 }
 const allowlist = JSON.parse(fs.readFileSync(allowPath, 'utf8')) as Allowlist;
-const allowed = new Map(allowlist.allow.map(e => [e.package, e]));
 
 let raw: string;
 try {
@@ -61,25 +54,7 @@ try {
 }
 
 const today = new Date().toISOString().slice(0, 10);
-const unexpected: string[] = [];
-const stale: string[] = [];
-let allowedCount = 0;
-
-for (const [name, v] of Object.entries(vulns)) {
-    if (!atLeast(v.severity, FAIL_AT)) continue;
-    const entry = allowed.get(name);
-    if (!entry) {
-        const via = (v.via ?? [])
-            .map(x => (typeof x === 'string' ? x : x.title ?? ''))
-            .filter(Boolean)
-            .slice(0, 2)
-            .join('; ');
-        unexpected.push(`${v.severity.toUpperCase()} ${name}${via ? ` — ${via}` : ''}`);
-        continue;
-    }
-    allowedCount++;
-    if (entry.review < today) stale.push(`${name} (review was due ${entry.review})`);
-}
+const { unexpected, stale, allowedCount } = classifyAudit(vulns, allowlist.allow, FAIL_AT, today);
 
 for (const line of stale) console.log(`WARN allowlist entry past its review date: ${line}`);
 console.log(`[deps] ${Object.keys(vulns).length} advisory package(s); ${allowedCount} allowlisted, ${unexpected.length} unexpected`);

package/scripts/ci/windows-unit-manifest.txt

@@ -6,6 +6,7 @@ tests/unit/service-windows-branch.test.ts
 tests/unit/windows-service-lifecycle-honesty.test.ts
 tests/unit/windows-installer-shims.test.ts
 tests/unit/windows-spawn-primitives.test.ts
+tests/unit/electron-installer-user-path.test.ts
 tests/unit/manager-browser-open.test.ts
 tests/unit/eaddrinuse-diagnostics-contract.test.ts
 tests/unit/tui-presentation.test.ts

package/scripts/deps-audit-classify.ts

@@ -0,0 +1,107 @@
+// ─── Dependency advisory classification ───────────────
+//
+// Pure half of scripts/check-deps-audit.ts, split out so the policy can be
+// tested without the registry. An allowlist entry is a decision about specific
+// advisories, not a mute on a package: when npm reports advisory objects for a
+// package, every advisory id has to appear in that entry's `advisories`. A new
+// advisory against an already-allowlisted package therefore fails the gate
+// instead of riding along on an old reachability argument.
+
+export interface AllowEntry {
+    package: string;
+    severity: string;
+    reason: string;
+    review: string;
+    advisories?: string[];
+}
+
+export type AuditVia = string | { title?: string; url?: string; source?: number | string; severity?: string; range?: string };
+
+export interface AuditVuln {
+    severity: string;
+    isDirect?: boolean;
+    via?: AuditVia[];
+}
+
+export interface AuditClassification {
+    unexpected: string[];
+    stale: string[];
+    allowedCount: number;
+}
+
+const SEVERITY_ORDER = ['info', 'low', 'moderate', 'high', 'critical'];
+
+export function atLeast(severity: string, floor: string): boolean {
+    return SEVERITY_ORDER.indexOf(severity) >= SEVERITY_ORDER.indexOf(floor);
+}
+
+/** GHSA id from an advisory object's url, falling back to npm's numeric source. */
+export function advisoryId(via: Exclude<AuditVia, string>): string {
+    const fromUrl = via.url?.split('/').filter(Boolean).pop();
+    if (fromUrl) return fromUrl;
+    return via.source !== undefined ? String(via.source) : '';
+}
+
+export function classifyAudit(
+    vulns: Record<string, AuditVuln>,
+    allow: AllowEntry[],
+    failAt: string,
+    today: string,
+): AuditClassification {
+    const allowed = new Map(allow.map(entry => [entry.package, entry]));
+    const unexpected: string[] = [];
+    const stale: string[] = [];
+    let allowedCount = 0;
+
+    for (const [name, vuln] of Object.entries(vulns)) {
+        if (!atLeast(vuln.severity, failAt)) continue;
+        const vias = vuln.via ?? [];
+        // A package's own severity is the max over its advisories and its
+        // children, so the threshold applies per advisory: a low advisory on a
+        // package flagged high only because of a child is below a moderate floor.
+        const advisories = vias
+            .filter((via): via is Exclude<AuditVia, string> => typeof via !== 'string')
+            .filter(via => atLeast(via.severity ?? vuln.severity, failAt));
+        const paths = vias.filter((via): via is string => typeof via === 'string');
+        // Transitive references are classified through their own records. A
+        // reference with no record means the report shape changed; fail closed
+        // rather than let that part of the finding pass unexamined.
+        const unresolved = paths.filter(ref => !(ref in vulns));
+        for (const ref of unresolved) {
+            unexpected.push(`${vuln.severity.toUpperCase()} ${name} — references ${ref}, which has no audit record`);
+        }
+        if (unresolved.length > 0) continue;
+        if (advisories.length === 0 && paths.length === 0) continue;
+        const entry = allowed.get(name);
+        if (!entry) {
+            const titles = advisories.map(via => via.title ?? '').filter(Boolean).slice(0, 2).join('; ');
+            const detail = titles || (paths.length > 0 ? `via ${paths.slice(0, 2).join(', ')}` : '');
+            const severity = advisories.length > 0 ? highest(advisories.map(via => via.severity ?? vuln.severity)) : vuln.severity;
+            unexpected.push(`${severity.toUpperCase()} ${name}${detail ? ` — ${detail}` : ''}`);
+            continue;
+        }
+        if (advisories.length > 0) {
+            if (!entry.advisories || entry.advisories.length === 0) {
+                const severity = highest(advisories.map(via => via.severity ?? vuln.severity));
+                unexpected.push(`${severity.toUpperCase()} ${name} — allowlist entry must list the advisory IDs it waives (${advisories.map(advisoryId).join(', ')})`);
+                continue;
+            }
+            const waived = new Set(entry.advisories);
+            const unlisted = advisories.filter(via => !waived.has(advisoryId(via)));
+            if (unlisted.length > 0) {
+                for (const via of unlisted) {
+                    unexpected.push(`${(via.severity ?? vuln.severity).toUpperCase()} ${name} — ${advisoryId(via)} ${via.title ?? ''} is not covered by its allowlist entry`.trimEnd());
+                }
+                continue;
+            }
+        }
+        allowedCount++;
+        if (entry.review < today) stale.push(`${name} (review was due ${entry.review})`);
+    }
+
+    return { unexpected, stale, allowedCount };
+}
+
+function highest(severities: string[]): string {
+    return severities.reduce((max, sev) => (SEVERITY_ORDER.indexOf(sev) > SEVERITY_ORDER.indexOf(max) ? sev : max), 'info');
+}

package/scripts/electron-blockmap.mjs

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+/**
+ * Rebuild a .blockmap with electron-builder's own implementation.
+ *
+ * electron-builder 26.15 replaced the app-builder-bin `blockmap` command with
+ * app-builder-lib's pure-TS buildBlockMap and dropped app-builder-bin from its
+ * dependency tree. This helper keeps the old command-line contract
+ * (`blockmap --input <file> --output <file.blockmap>`, JSON {size, sha512} on
+ * stdout) so notarize-mac-dmg.mjs can stay synchronous and test-injectable.
+ * The gzip format matches createBlockmap in
+ * app-builder-lib/out/targets/differentialUpdateInfoBuilder.js.
+ */
+import { createRequire } from 'node:module';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const projectRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const args = process.argv.slice(2);
+if (args.length !== 5 || args[0] !== 'blockmap' || args[1] !== '--input' || args[3] !== '--output') {
+  console.error('usage: electron-blockmap.mjs blockmap --input <file> --output <file.blockmap>');
+  process.exit(2);
+}
+const electronRequire = createRequire(join(projectRoot, 'electron', 'package.json'));
+const { buildBlockMap } = electronRequire('app-builder-lib/out/targets/blockmap/blockmap.js');
+const info = await buildBlockMap(resolve(args[2]), 'gzip', resolve(args[4]));
+process.stdout.write(JSON.stringify({ size: info.size, sha512: info.sha512 }));
+

package/scripts/notarize-mac-dmg.mjs

@@ -2,18 +2,19 @@
 /**
  * Notarize and staple the signed macOS disk image, then re-describe it.
  *
- * electron-builder 25.1.8 notarizes and staples the app bundle, and with
+ * electron-builder 26.15 notarizes and staples the app bundle, and with
  * `dmg.sign` it signs the disk image, but it never notarizes the disk image.
  * A user who downloads the DMG therefore opens a container Gatekeeper cannot
  * vouch for: `spctl --type open` rejects it and the stapler finds no ticket.
  *
  * Stapling is the part that needs care. dmg-builder hashes the DMG into its
- * blockmap immediately after signing it (dmg-builder/out/dmg.js:62-67) and
+ * blockmap immediately after signing it (dmg-builder/out/dmg.js:48) and
  * that hash is what lands in latest-mac.yml. Stapling appends the ticket to
  * the file, so every description written before it (the DMG entry in
  * latest-mac.yml and the .blockmap next to the DMG) would describe bytes that
  * no longer exist. This script rebuilds both from the stapled file with the
- * same app-builder command electron-builder uses, and only touches the DMG
+ * same blockmap implementation electron-builder uses (scripts/electron-blockmap.mjs
+ * calls app-builder-lib buildBlockMap), and only touches the DMG
  * entry: the ZIP entry and the legacy top-level path/sha512 fields are the
  * updater payload and must stay byte-for-byte what electron-builder wrote.
  *
@@ -75,13 +76,21 @@ function sha512Base64(path) {
   return createHash('sha512').update(readFileSync(path)).digest('base64');
 }
 
-export function resolveAppBuilder() {
+const BLOCKMAP_HELPER = join(projectRoot, 'scripts', 'electron-blockmap.mjs');
+
+/**
+ * The command that rebuilds a blockmap the way electron-builder does. Since
+ * 26.15 that is app-builder-lib's own buildBlockMap (app-builder-bin is gone),
+ * reached through a node helper that keeps the app-builder CLI contract.
+ */
+export function resolveBlockmapCommand() {
   const electronRequire = createRequire(join(projectRoot, 'electron', 'package.json'));
-  const { appBuilderPath } = electronRequire('app-builder-bin');
-  if (!appBuilderPath || !existsSync(appBuilderPath)) {
-    throw new Error(`app-builder binary not found at ${String(appBuilderPath)}; run npm ci --prefix electron`);
+  try {
+    electronRequire.resolve('app-builder-lib/out/targets/blockmap/blockmap.js');
+  } catch {
+    throw new Error('app-builder-lib blockmap implementation not found; run npm ci --prefix electron');
   }
-  return appBuilderPath;
+  return { cmd: process.execPath, prefix: [BLOCKMAP_HELPER] };
 }
 
 /**
@@ -169,10 +178,12 @@ export function notarizeMacDiskImage(options = {}) {
   if (validate.error || validate.status !== 0) throw new Error(`stapler validate failed:\n${outputOf(validate).trim()}`);
 
   // 4. Rebuild the blockmap from the stapled bytes, exactly as electron-builder does.
-  const appBuilder = options.appBuilderPath ?? resolveAppBuilder();
+  const blockmapCommand = options.appBuilderPath
+    ? { cmd: options.appBuilderPath, prefix: [] }
+    : resolveBlockmapCommand();
   const blockmapPath = `${dmgPath}.blockmap`;
-  const blockmap = run(appBuilder, ['blockmap', '--input', dmgPath, '--output', blockmapPath]);
-  if (blockmap.error || blockmap.status !== 0) throw new Error(`app-builder blockmap failed:\n${outputOf(blockmap).trim()}`);
+  const blockmap = run(blockmapCommand.cmd, [...blockmapCommand.prefix, 'blockmap', '--input', dmgPath, '--output', blockmapPath]);
+  if (blockmap.error || blockmap.status !== 0) throw new Error(`blockmap rebuild failed:\n${outputOf(blockmap).trim()}`);
   let described;
   try { described = JSON.parse(blockmap.stdout); } catch { described = null; }
   const actualSize = statSync(dmgPath).size;

package/scripts/verify-electron-update-metadata.mjs

@@ -24,18 +24,24 @@ function sha512(path) {
 }
 
 export function verifyElectronUpdateMetadata(options = {}) {
+  const platform = options.platform ?? 'mac';
+  if (platform !== 'mac' && platform !== 'win') {
+    throw new Error(`Unsupported update metadata platform: ${String(platform)}`);
+  }
   const projectRoot = resolve(options.projectRoot ?? resolve(fileURLToPath(import.meta.url), '..', '..'));
   const distDir = resolve(options.distDir ?? join(projectRoot, 'electron', 'dist'));
   const packagePath = resolve(options.packagePath ?? join(projectRoot, 'electron', 'package.json'));
   const appUpdatePath = resolve(
-    options.appUpdatePath ?? join(distDir, 'mac-arm64', 'cli-jaw.app', 'Contents', 'Resources', 'app-update.yml'),
+    options.appUpdatePath ?? (platform === 'win'
+      ? join(distDir, 'win-unpacked', 'resources', 'app-update.yml')
+      : join(distDir, 'mac-arm64', 'cli-jaw.app', 'Contents', 'Resources', 'app-update.yml')),
   );
   const version = JSON.parse(readFileSync(packagePath, 'utf8')).version;
   // electron-builder's GitHub provider always emits latest-mac.yml. For a
   // prerelease, electron-updater first selects a matching tag from the GitHub
   // release feed, tries <channel>-mac.yml, then intentionally falls back to
   // latest-mac.yml inside that selected release.
-  const metadataPath = join(distDir, 'latest-mac.yml');
+  const metadataPath = join(distDir, platform === 'win' ? 'latest.yml' : 'latest-mac.yml');
 
   if (!existsSync(metadataPath)) throw new Error(`Missing update metadata: ${metadataPath}`);
   if (!existsSync(appUpdatePath)) throw new Error(`Missing packaged update provider config: ${appUpdatePath}`);
@@ -44,33 +50,36 @@ export function verifyElectronUpdateMetadata(options = {}) {
   if (metadata?.version !== version) {
     throw new Error(`Update metadata version ${String(metadata?.version)} does not match package version ${version}`);
   }
-  if (!Array.isArray(metadata?.files) || metadata.files.length === 0) {
-    throw new Error('macOS update metadata must contain artifact entries');
+  if (!Array.isArray(metadata?.files)) {
+    throw new Error(`${platform === 'win' ? 'Windows' : 'macOS'} update metadata must contain artifact entries`);
   }
   for (const file of metadata.files) {
     if (typeof file?.url !== 'string' || basename(file.url) !== file.url) {
       throw new Error(`Unsafe update artifact path: ${String(file?.url)}`);
     }
   }
-  const zipEntries = metadata.files.filter(file => file.url.endsWith('-mac.zip'));
-  if (zipEntries.length !== 1) {
-    throw new Error('macOS update metadata must contain exactly one ZIP entry');
+  const payloadEntries = metadata.files.filter(file => platform === 'win'
+    ? file.url.toLowerCase().endsWith('.exe')
+    : file.url.endsWith('-mac.zip'));
+  if (payloadEntries.length !== 1) {
+    throw new Error(`${platform === 'win' ? 'Windows' : 'macOS'} update metadata must contain exactly one ${platform === 'win' ? 'EXE' : 'ZIP'} entry`);
   }
 
-  const entry = zipEntries[0];
-  const zipPath = join(distDir, entry.url);
-  const blockmapPath = `${zipPath}.blockmap`;
-  if (!existsSync(zipPath)) throw new Error(`Missing update ZIP: ${zipPath}`);
+  const entry = payloadEntries[0];
+  const payloadPath = join(distDir, entry.url);
+  const blockmapPath = `${payloadPath}.blockmap`;
+  const payloadLabel = platform === 'win' ? 'EXE' : 'ZIP';
+  if (!existsSync(payloadPath)) throw new Error(`Missing update ${payloadLabel}: ${payloadPath}`);
   if (!existsSync(blockmapPath)) throw new Error(`Missing update blockmap: ${blockmapPath}`);
 
-  const actualSize = statSync(zipPath).size;
+  const actualSize = statSync(payloadPath).size;
   if (entry.size !== actualSize) {
-    throw new Error(`Update ZIP size mismatch: metadata=${String(entry.size)} actual=${actualSize}`);
+    throw new Error(`Update ${payloadLabel} size mismatch: metadata=${String(entry.size)} actual=${actualSize}`);
   }
-  const actualHash = sha512(zipPath);
-  if (entry.sha512 !== actualHash) throw new Error('Update ZIP SHA-512 does not match update metadata');
+  const actualHash = sha512(payloadPath);
+  if (entry.sha512 !== actualHash) throw new Error(`Update ${payloadLabel} SHA-512 does not match update metadata`);
   if (metadata.path !== entry.url || metadata.sha512 !== entry.sha512) {
-    throw new Error('Legacy macOS update metadata fields do not match files[0]');
+    throw new Error(`Legacy ${platform === 'win' ? 'Windows' : 'macOS'} update metadata fields do not match the updater payload`);
   }
 
   // The other entries (the DMG) are not the updater payload, but they are
@@ -78,7 +87,7 @@ export function verifyElectronUpdateMetadata(options = {}) {
   // stapled after electron-builder hashed it, so a stale description here
   // means the post-staple metadata repair did not run or did not stick.
   const otherArtifacts = [];
-  for (const file of metadata.files) {
+  for (const file of platform === 'mac' ? metadata.files : []) {
     if (file === entry) continue;
     const artifactPath = join(distDir, file.url);
     if (!existsSync(artifactPath)) throw new Error(`Missing listed update artifact: ${artifactPath}`);
@@ -99,19 +108,31 @@ export function verifyElectronUpdateMetadata(options = {}) {
     }
   }
 
-  return { metadataPath, zipPath, blockmapPath, version, sha512: actualHash, otherArtifacts };
+  return { metadataPath, payloadPath, zipPath: platform === 'mac' ? payloadPath : undefined, blockmapPath, version, sha512: actualHash, otherArtifacts, platform };
+}
+
+function parseCliArgs(args) {
+  const positional = [];
+  let platform = 'mac';
+  for (let i = 0; i < args.length; i += 1) {
+    if (args[i] === '--platform') {
+      if (i + 1 >= args.length) throw new Error('--platform requires mac or win');
+      platform = args[i + 1];
+      i += 1;
+      continue;
+    }
+    positional.push(args[i]);
+  }
+  return { platform, distDir: positional[0], appUpdatePath: positional[1] };
 }
 
 function main() {
   try {
-    const report = verifyElectronUpdateMetadata({
-      distDir: process.argv[2],
-      appUpdatePath: process.argv[3],
-    });
+    const report = verifyElectronUpdateMetadata(parseCliArgs(process.argv.slice(2)));
     console.log('[verify-electron-update-metadata] OK');
     console.log(`  version   ${report.version}`);
     console.log(`  metadata  ${report.metadataPath}`);
-    console.log(`  zip       ${report.zipPath}`);
+    console.log(`  payload   ${report.payloadPath}`);
     console.log(`  blockmap  ${report.blockmapPath}`);
     console.log(`  sha512    ${report.sha512}`);
     for (const artifact of report.otherArtifacts) console.log(`  listed    ${artifact} (hash matches)`);

package/public/dist/assets/MarkdownRenderer-Cc3DeHvm.js

@@ -1 +0,0 @@
-import{t as e}from"./MarkdownRenderer-DzN66XVb.js";export{e as MarkdownRenderer};

package/public/dist/assets/bgtask-badge-CnVkcp3c.js

@@ -1 +0,0 @@
-import{r as e,t}from"./bgtask-badge-Cp26S8Uq.js";export{t as applyBgtaskUpdate,e as refreshBgtaskBadge};

package/public/dist/assets/channel-DO94Q0oH.js

@@ -1 +0,0 @@
-import{at as e,it as t}from"./chunk-DU6HZSFF-vsD_dO7e.js";var n=(n,r)=>e.lang.round(t.parse(n)[r]);export{n as t};

package/public/dist/assets/classDiagram-CYGNFDIV-C1ssjdiH.js

@@ -1 +0,0 @@
-import{n as e}from"./chunk-Y2CYZVJY-DsF7k-Jl.js";import"./chunk-X3CZISLH-ChyOdCnY.js";import"./chunk-DU6HZSFF-vsD_dO7e.js";import"./chunk-PWAF6VOD-CqSJPGBE.js";import"./chunk-75Z2AOVW-B1-fK2mN.js";import"./chunk-GMAD6QVW-BSVfzVP1.js";import"./chunk-P2QGCYS3-D9LpOEME.js";import"./chunk-4HAMMTFA-UBUVs5kk.js";import"./chunk-GVQU2GXP-CsYaquup.js";import"./chunk-OSK3NFVY-D_HWIC0H.js";import"./chunk-F27PBJKO-C3O21Si2.js";import"./chunk-XXDRQBXY-Uq2wLB4L.js";import"./chunk-POPQ4Y6H-BzSgf7pO.js";import"./chunk-L3NEJ4N5-DxbPaCWe.js";import"./chunk-LQGUR6SS-C7emO-i3.js";import{i as t,n,r,t as i}from"./chunk-HLEWEB6X-bHrMh27k.js";var a={parser:n,get db(){return new i},renderer:r,styles:t,init:e(e=>{e.class||={},e.class.arrowMarkerAbsolute=e.arrowMarkerAbsolute},`init`)};export{a as diagram};

package/public/dist/assets/classDiagram-v2-TLXNO2FR-C1ssjdiH.js

@@ -1 +0,0 @@
-import{n as e}from"./chunk-Y2CYZVJY-DsF7k-Jl.js";import"./chunk-X3CZISLH-ChyOdCnY.js";import"./chunk-DU6HZSFF-vsD_dO7e.js";import"./chunk-PWAF6VOD-CqSJPGBE.js";import"./chunk-75Z2AOVW-B1-fK2mN.js";import"./chunk-GMAD6QVW-BSVfzVP1.js";import"./chunk-P2QGCYS3-D9LpOEME.js";import"./chunk-4HAMMTFA-UBUVs5kk.js";import"./chunk-GVQU2GXP-CsYaquup.js";import"./chunk-OSK3NFVY-D_HWIC0H.js";import"./chunk-F27PBJKO-C3O21Si2.js";import"./chunk-XXDRQBXY-Uq2wLB4L.js";import"./chunk-POPQ4Y6H-BzSgf7pO.js";import"./chunk-L3NEJ4N5-DxbPaCWe.js";import"./chunk-LQGUR6SS-C7emO-i3.js";import{i as t,n,r,t as i}from"./chunk-HLEWEB6X-bHrMh27k.js";var a={parser:n,get db(){return new i},renderer:r,styles:t,init:e(e=>{e.class||={},e.class.arrowMarkerAbsolute=e.arrowMarkerAbsolute},`init`)};export{a as diagram};

package/public/dist/assets/flowDiagram-T62WH6J4-jooH4x9e.js

@@ -1 +0,0 @@
-import"./chunk-X3CZISLH-ChyOdCnY.js";import"./chunk-DU6HZSFF-vsD_dO7e.js";import"./chunk-PWAF6VOD-CqSJPGBE.js";import"./chunk-75Z2AOVW-B1-fK2mN.js";import"./chunk-GMAD6QVW-BSVfzVP1.js";import"./chunk-P2QGCYS3-D9LpOEME.js";import"./chunk-4HAMMTFA-UBUVs5kk.js";import"./chunk-GVQU2GXP-CsYaquup.js";import"./chunk-OSK3NFVY-D_HWIC0H.js";import"./chunk-F27PBJKO-C3O21Si2.js";import"./chunk-XXDRQBXY-Uq2wLB4L.js";import"./chunk-POPQ4Y6H-BzSgf7pO.js";import"./chunk-L3NEJ4N5-DxbPaCWe.js";import"./chunk-LQGUR6SS-C7emO-i3.js";import"./chunk-LNGE3PJU-5-SxdO55.js";import{n as e}from"./chunk-3NF5O7KM-FbOqoUnr.js";export{e as diagram};

package/public/dist/assets/iframe-renderer-DWx9v2Iz.js

@@ -1 +0,0 @@
-import{a as e}from"./iframe-renderer-DmHYOI1A.js";export{e as refreshFileWidget};

package/public/dist/assets/katex-DL-Py6bk.js

@@ -1 +0,0 @@
-import{A as e}from"./vendor-render-Cmfl_oW8.js";export{e as default};

package/public/dist/assets/memory-PPofQPeB.js

@@ -1 +0,0 @@
-import{a as e}from"./memory-C6qtAMdJ.js";export{e as refreshMemorySidebar};

package/public/dist/assets/mermaid-loader-Beqble_i.js

@@ -1 +0,0 @@
-import{t as e}from"./mermaid.core-D1YZrgc_.js";function t(){return e.setParseErrorHandler(()=>{}),e}export{t as loadMermaid};

package/public/dist/assets/mermaid.core-DSXunyto.js

@@ -1 +0,0 @@
-import{t as e}from"./mermaid.core-D1YZrgc_.js";import{i as t,l as n,n as r,o as i}from"./chunk-H2I77ZZE-ytBKuGMS.js";export{r as clearLayoutRenderState,t as createCommonLayoutRenderer,e as default,i as defaultMeasureLayout,n as paintLayoutData};

package/public/dist/assets/message-history-bw4qF01Z.js

@@ -1 +0,0 @@
-import{o as e,s as t}from"./message-history-DcjBuubA.js";export{e as historyReloadInFlight,t as loadMessages};

package/public/dist/assets/settings-DgAlohx9.js

@@ -1 +0,0 @@
-import{c as e,n as t}from"./settings-core-pnpw-eZv.js";import"./settings-CvsLWlJn.js";export{t as loadSettings,e as updateSettings};

package/public/dist/assets/settings-core-BH7J_Rbm.js

@@ -1 +0,0 @@
-import{a as e}from"./settings-core-pnpw-eZv.js";export{e as refreshHeaderFromSettingsChange};

package/public/dist/assets/skills-DeNVAVgt.js

@@ -1 +0,0 @@
-import{n as e}from"./skills-D_2adqge.js";export{e as loadSkills};

package/public/dist/assets/slash-commands-Cj5qoRWc.js

@@ -1 +0,0 @@
-import{o as e}from"./slash-commands-B_Hq5RkC.js";export{e as loadCommands};

package/public/dist/assets/stateDiagram-v2-IH3M54BS-DfXrMbZg.js

@@ -1 +0,0 @@
-import{n as e}from"./chunk-Y2CYZVJY-DsF7k-Jl.js";import"./chunk-X3CZISLH-ChyOdCnY.js";import"./chunk-DU6HZSFF-vsD_dO7e.js";import"./chunk-PWAF6VOD-CqSJPGBE.js";import"./chunk-75Z2AOVW-B1-fK2mN.js";import"./chunk-GMAD6QVW-BSVfzVP1.js";import"./chunk-P2QGCYS3-D9LpOEME.js";import"./chunk-4HAMMTFA-UBUVs5kk.js";import"./chunk-GVQU2GXP-CsYaquup.js";import"./chunk-OSK3NFVY-D_HWIC0H.js";import"./chunk-F27PBJKO-C3O21Si2.js";import"./chunk-XXDRQBXY-Uq2wLB4L.js";import"./chunk-POPQ4Y6H-BzSgf7pO.js";import"./chunk-L3NEJ4N5-DxbPaCWe.js";import"./chunk-LQGUR6SS-C7emO-i3.js";import{i as t,n,r,t as i}from"./chunk-ZLD2IHE6-CWSP7frq.js";var a={parser:n,get db(){return new i(2)},renderer:r,styles:t,init:e(e=>{e.state||={},e.state.arrowMarkerAbsolute=e.arrowMarkerAbsolute},`init`)};export{a as diagram};

package/public/dist/assets/swimlanesDiagram-JKAHXJPX-R-OHp34K.js

@@ -1,8 +0,0 @@
-import{n as e}from"./chunk-Y2CYZVJY-DsF7k-Jl.js";import"./chunk-X3CZISLH-ChyOdCnY.js";import"./chunk-DU6HZSFF-vsD_dO7e.js";import"./chunk-PWAF6VOD-CqSJPGBE.js";import"./chunk-75Z2AOVW-B1-fK2mN.js";import"./chunk-GMAD6QVW-BSVfzVP1.js";import"./chunk-P2QGCYS3-D9LpOEME.js";import"./chunk-4HAMMTFA-UBUVs5kk.js";import"./chunk-GVQU2GXP-CsYaquup.js";import"./chunk-OSK3NFVY-D_HWIC0H.js";import"./chunk-F27PBJKO-C3O21Si2.js";import"./chunk-XXDRQBXY-Uq2wLB4L.js";import"./chunk-POPQ4Y6H-BzSgf7pO.js";import"./chunk-L3NEJ4N5-DxbPaCWe.js";import"./chunk-LQGUR6SS-C7emO-i3.js";import"./chunk-LNGE3PJU-5-SxdO55.js";import{r as t,t as n}from"./chunk-3NF5O7KM-FbOqoUnr.js";var r=n({defaultLayout:`swimlane`,styles:e(e=>`${t(e)}
-  .swimlane.cluster rect {
-    stroke: ${e.clusterBorder} !important;
-  }
-  [data-look="neo"].cluster rect {
-    filter: none;
-  }
-`,`getStyles`)});export{r as diagram};

package/public/dist/assets/ui-BbR_fFiK.js

@@ -1 +0,0 @@
-import{p as e}from"./iframe-renderer-DmHYOI1A.js";import{I as t,s as n}from"./message-history-DcjBuubA.js";import{r}from"./ui-D8xzm7DN.js";export{r as cleanupToolActivity,n as loadMessages,e as reconcileChatBottomAfterRestore,t as updateQueueBadge};