jamdesk 1.1.208 → 1.1.210

package/vendored/components/navigation/Sidebar.tsx

@@ -12,6 +12,7 @@ import { getTheme } from '@/themes';
 import { DefaultLogo, DefaultLogoCompact } from './DefaultLogo';
 import { LanguageSelector } from './LanguageSelector';
 import { LazySearchModal as SearchModal } from '@/components/search/LazySearchModal';
+import { ThemePreviewChips } from './ThemePreviewChips';
 import { ThemeToggle, ThemeToggleCycle } from '@/components/theme/ThemeToggle';
 import { getIconClass } from '@/lib/icon-utils';
 import { getTabsFromConfig } from '@/lib/navigation-utils';
@@ -877,6 +878,13 @@ export function Sidebar({ config, layout = 'header-logo', tabsPosition: tabsPosi
           </button>
         </div>
 
+        {/* Theme-preview chips, header-logo layouts (Jam/Nebula/Halo) only.
+            Pinned outside the scroll area so it stays at the top of the
+            mobile drawer and desktop rail. Pulsar (sidebar-logo) renders its
+            own copy inside the scroll area below — its desktop logo lives
+            there, so a pinned row here would sit above the logo instead. */}
+        {!showLogoInSidebar && <ThemePreviewChips />}
+
         {/* Scrollable content area - everything below mobile header scrolls */}
         <div className="flex-1 overflow-y-auto sidebar-scroll" data-has-tabs={hasTopTabsBar ? 'true' : 'false'}>
 
@@ -929,6 +937,12 @@ export function Sidebar({ config, layout = 'header-logo', tabsPosition: tabsPosi
           </div>
         )}
 
+        {/* Theme-preview chips, sidebar-logo layout (Pulsar) only. Lives
+            inside the scroll area, right below the logo and search — Pulsar
+            hides the header entirely at >=1024px, so the pinned copy above
+            (header-logo layouts) can't reach this layout at all. */}
+        {showLogoInSidebar && <ThemePreviewChips />}
+
         <nav className="flex-1">
           {/* External anchors - appear at top of sidebar on all pages */}
           {renderExternalAnchors()}

package/vendored/components/navigation/ThemePreviewChips.tsx

@@ -0,0 +1,121 @@
+'use client';
+
+import { useId, useState } from 'react';
+import { useLinkPrefix } from '@/lib/link-prefix-context';
+import { useThemePreview } from '@/lib/theme-preview-context';
+import { applyThemePreview, type ThemePreviewSurface } from '@/lib/theme-preview-client';
+import { getAllThemes, type ThemeName } from '@/themes';
+
+/**
+ * Jamdesk-only affordance: re-skins jamdesk.com/docs with any built-in theme
+ * so prospects (and customers) can see all four on a real docs site.
+ *
+ * Lives in the Sidebar, not the header, at every breakpoint. The header can't
+ * host it: Pulsar hides the header entirely at >=1024px, which stranded any
+ * visitor who picked Pulsar, and at 1024px in Jam/Halo a header control
+ * pushed the light/dark toggle off-screen. Every theme has a sidebar.
+ *
+ * Collapsed to a one-line toggle by default. Paying customers read these docs
+ * too, and the top of the sidebar is the most valuable navigation space, so
+ * the chips only take it when someone asks for them. The open/closed state is
+ * deliberately not persisted: every load paints the same collapsed row, so
+ * there's no layout shift and no storage. Reset sits beside the toggle rather
+ * than inside the row, so leaving a preview is always one tap.
+ *
+ * Self-guards on `enabled`: Sidebar renders for every tenant, and the context
+ * default is disabled, so customer sites render nothing.
+ *
+ * Strings are English-only by design: the only prose is "Preview a theme",
+ * "Previewing" and "Reset"; theme names are proper nouns.
+ */
+export function ThemePreviewChips() {
+  const { enabled, activeTheme, defaultTheme } = useThemePreview();
+  const linkPrefix = useLinkPrefix();
+  const panelId = useId();
+  const [expanded, setExpanded] = useState(false);
+  // Set on the first tap and never cleared: the page is about to reload
+  // (after up to THEME_PREVIEW_EVENT_TIMEOUT_MS). A second tap in that window
+  // would write a second cookie that races the first reload.
+  const [pending, setPending] = useState(false);
+
+  if (!enabled) return null;
+
+  function choose(name: ThemeName | null) {
+    if (pending) return;
+    setPending(true);
+    // 1024px = Tailwind `lg`, where the Sidebar stops being a drawer. Read at
+    // click time, not render time, so a resized window reports correctly.
+    const surface: ThemePreviewSurface =
+      typeof window.matchMedia === 'function' && window.matchMedia('(min-width: 1024px)').matches
+        ? 'desktop'
+        : 'mobile';
+    applyThemePreview(name, { linkPrefix, surface });
+  }
+
+  const themes = getAllThemes();
+  const previewing = activeTheme !== defaultTheme;
+  const activeName = themes.find((t) => t.name === activeTheme)?.displayName ?? activeTheme;
+
+  return (
+    <div className="flex-shrink-0 px-4 py-1 border-b border-[var(--color-border)]">
+      <div className="flex items-center gap-2">
+        <button
+          type="button"
+          aria-expanded={expanded}
+          aria-controls={panelId}
+          onClick={() => setExpanded((open) => !open)}
+          className="flex flex-1 min-w-0 items-center gap-1.5 py-1.5 rounded text-xs font-medium text-[var(--color-text-secondary)] hover:text-[var(--color-text-primary)] focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-[var(--color-accent)]"
+        >
+          <i className="fa-solid fa-palette text-[12px]" aria-hidden="true" />
+          <span className="truncate">{previewing ? `Previewing ${activeName}` : 'Preview a theme'}</span>
+          <i
+            className={`fa-solid fa-chevron-right text-[8px] text-[var(--color-text-muted)] transition-transform ${expanded ? 'rotate-90' : ''}`}
+            aria-hidden="true"
+          />
+        </button>
+        {previewing && (
+          <button
+            type="button"
+            disabled={pending}
+            onClick={() => choose(null)}
+            // Visible text stays "Reset" to fit beside "Previewing Nebula" in
+            // the narrowest sidebar; the name starts with it (WCAG 2.5.3).
+            aria-label="Reset to default theme"
+            className="flex-shrink-0 text-xs px-2 py-1.5 -mr-2 rounded text-[var(--color-text-secondary)] hover:text-[var(--color-text-primary)] disabled:opacity-50"
+          >
+            Reset
+          </button>
+        )}
+      </div>
+      {/* The `hidden` wrapper carries no display utility, so nothing can
+          override it; same pattern as Sidebar's collapsible nav groups. */}
+      <div id={panelId} hidden={!expanded}>
+        <div role="group" aria-label="Preview a theme" className="flex flex-wrap gap-1.5 pt-1 pb-2">
+          {themes.map((theme) => {
+            const isActive = theme.name === activeTheme;
+            return (
+              <button
+                key={theme.name}
+                type="button"
+                aria-pressed={isActive}
+                disabled={pending}
+                // Re-selecting the active theme would reload into the same page.
+                onClick={() => { if (!isActive) choose(theme.name as ThemeName); }}
+                className={`rounded-full border px-3 py-1.5 text-xs cursor-pointer transition-colors disabled:opacity-50 ${
+                  isActive
+                    // accent-TEXT, not accent: raw #635BFF on Halo's light
+                    // background is 4.21:1, under WCAG AA. The -text token is
+                    // the primary darkened/lightened per mode for exactly this.
+                    ? 'border-[var(--color-accent)] text-[var(--color-accent-text)]'
+                    : 'border-[var(--color-border)] text-[var(--color-text-secondary)] hover:text-[var(--color-text-primary)] hover:bg-[var(--color-bg-tertiary)]'
+                }`}
+              >
+                {theme.displayName}
+              </button>
+            );
+          })}
+        </div>
+      </div>
+    </div>
+  );
+}

package/vendored/components/theme/ThemeToggle.tsx

@@ -63,13 +63,16 @@ export function ThemeToggle() {
     >
       {THEMES.map(({ name, icon, title }) => {
         const active = theme === name;
+        // The active segment is a filled --color-bg-hover chip, not a
+        // --color-bg-primary "cut-out": jam, nebula and pulsar tint the track
+        // so faintly that a page-colored segment vanished into it in light mode.
         return (
           <button
             key={name}
             onClick={() => setTheme(name)}
             className={`${buttonClass} transition-colors ${
               active
-                ? 'bg-[var(--color-bg-primary)] text-[var(--color-text-primary)]'
+                ? 'bg-[var(--color-bg-hover)] text-[var(--color-text-primary)]'
                 : 'text-[var(--color-text-tertiary)] hover:text-[var(--color-text-primary)]'
             }`}
             aria-label={`${title} theme`}
@@ -112,6 +115,10 @@ export function ThemeToggleCycle() {
   return (
     <button
       onClick={cycleTheme}
+      // Hook for the jam/pulsar rule that thickens their light-weight icons.
+      // A distinct attribute, not [data-theme-toggle], so Pulsar's
+      // segmented-control sizing rules don't reach this button.
+      data-theme-toggle-cycle
       className="p-1.5 bg-[var(--color-bg-secondary)]/50 border border-[var(--color-border)]/50 text-[var(--color-text-secondary)] hover:text-[var(--color-text-primary)] hover:bg-[var(--color-bg-secondary)] rounded-md transition-colors cursor-pointer"
       aria-label={label}
       title={label}

package/vendored/lib/theme-preview-client.ts

@@ -0,0 +1,72 @@
+import { THEME_PREVIEW_COOKIE } from '@/lib/theme-preview';
+import type { ThemeName } from '@/themes';
+
+/** Which breakpoint the visitor chose from, for splitting desktop and mobile uptake in Plausible. */
+export type ThemePreviewSurface = 'desktop' | 'mobile';
+
+/** Plausible goal name — must match the goal configured in Plausible. */
+export const THEME_PREVIEW_EVENT = 'Theme Preview';
+
+/**
+ * Longest the reload waits for Plausible to confirm. The inline stub in
+ * layout-helpers' PlausibleScript defines `window.plausible` even when an
+ * ad-blocker stops the real script loading; the stub only queues, so the
+ * callback never fires and without this bound the click would do nothing.
+ */
+export const THEME_PREVIEW_EVENT_TIMEOUT_MS = 400;
+
+type PlausibleFn = (
+  event: string,
+  options: { props: Record<string, string>; callback: () => void },
+) => void;
+
+/**
+ * Apply (or with `null`, clear) a theme preview: write the cookie, report it
+ * to Plausible, reload. The single place a preview is applied, so the cookie
+ * contract and the event stay in one place for every caller (today,
+ * `ThemePreviewChips`).
+ */
+export function applyThemePreview(
+  name: ThemeName | null,
+  { linkPrefix, surface }: { linkPrefix: string; surface: ThemePreviewSurface },
+): void {
+  const path = linkPrefix || '/';
+  // SESSION cookie on the set path — no Max-Age, by product decision: a
+  // preview is a look at a theme, not a setting, and should not outlive the
+  // visit. The CLEAR path is the opposite and must stay explicit: `Max-Age=0`
+  // is what expires an existing cookie, and omitting it there would leave the
+  // preview in place.
+  const expiry = name === null ? '; Max-Age=0' : '';
+  // `Secure` means the browser silently DROPS this cookie over plain http, so
+  // the picker looks inert when QA'd on http://localhost — use https or a
+  // deployed host.
+  document.cookie =
+    `${THEME_PREVIEW_COOKIE}=${name ?? ''}; Path=${path}${expiry}; SameSite=Lax; Secure`;
+
+  // Full reload: the theme is applied by the server render (CSS variables,
+  // font class and layout variant all key off config.theme). Guarded because
+  // both the Plausible callback and the timeout race to call it.
+  let reloaded = false;
+  const reload = () => {
+    if (reloaded) return;
+    reloaded = true;
+    window.location.reload();
+  };
+
+  const plausible = (window as unknown as { plausible?: PlausibleFn }).plausible;
+  if (typeof plausible !== 'function') {
+    reload();
+    return;
+  }
+  // Arm the timeout BEFORE calling Plausible: a synchronous callback then
+  // still goes through the once-guard rather than racing a later timer.
+  window.setTimeout(reload, THEME_PREVIEW_EVENT_TIMEOUT_MS);
+  try {
+    plausible(THEME_PREVIEW_EVENT, {
+      props: { theme: name ?? 'reset', surface },
+      callback: reload,
+    });
+  } catch {
+    reload();
+  }
+}

package/vendored/lib/theme-preview.ts

@@ -1,10 +1,12 @@
 /**
  * Theme preview gate — jamdesk-docs only.
  *
- * A visitor picks a theme from the header dropdown; the picker writes a cookie
- * and reloads, and `app/layout.tsx` applies it by overriding `config.theme`
- * before rendering DocsChrome. Everything in this file is pure so the entire
- * gate can be tested without rendering or touching the environment.
+ * A visitor picks a theme from the chip row in the Sidebar
+ * (`components/navigation/ThemePreviewChips.tsx`); `lib/theme-preview-client.ts`
+ * writes a cookie and reloads, and `app/layout.tsx` applies it by overriding
+ * `config.theme` before rendering DocsChrome. Everything in this file is pure
+ * so the entire gate can be tested without rendering or touching the
+ * environment.
  *
  * TWO OPERATIONAL INVARIANTS live here because nothing else in the tree records
  * them:
@@ -24,28 +26,35 @@
  *    with `node scripts/smoke-tenants.mjs`, never a single URL. Prefer it to a
  *    code revert, but budget for a deploy: there is no faster kill path.
  *
- * 2. CACHEABILITY — the response varies by the `jd_theme` cookie while
- *    carrying NO `Vary: Cookie`, and the two hosts that serve the picker do
- *    NOT share a cache posture:
+ * 2. CACHEABILITY — the response varies by the `jd_theme` cookie and carries
+ *    no `Vary: Cookie`. It is safe anyway because BOTH hosts serve the docs
+ *    HTML as `private, no-cache, no-store, max-age=0, must-revalidate`. That
+ *    comes from the route being dynamic, which `app/[[...slug]]/page.tsx`'s
+ *    `force-dynamic` guarantees — the root layout's own `headers()`/`cookies()`
+ *    reads also force every docs page dynamic, so `force-dynamic` is a
+ *    belt-and-suspenders guarantee, not the sole cause. This was verified
+ *    2026-09-22 with curl and a `jd_theme` cookie on both hosts:
+ *    `jamdesk.com/docs/introduction` (apex, through the worker,
+ *    `cf-cache-status: BYPASS`) and `jamdesk-docs.jamdesk.app/docs/introduction`
+ *    (the ISR subdomain, `x-vercel-cache: MISS`). The `public, max-age=0,
+ *    must-revalidate` that once looked like an exposure on
+ *    `jamdesk-docs.jamdesk.app` belongs to the 308 redirect from bare paths
+ *    (e.g. `/introduction`) to `/docs/...` — that redirect does not vary by
+ *    cookie. The cookie itself is `Path=/docs` on both hosts.
  *
- *      - `jamdesk.com/docs` (apex, through the worker) is uncacheable end to
- *        end — `private, no-cache, no-store` upstream, `cf-cache-status:
- *        BYPASS` at the edge. Safe.
- *      - `jamdesk-docs.jamdesk.app` (the ISR subdomain) serves `public,
- *        max-age=0, must-revalidate` with NO `Vary`. The picker is live there
- *        too: the host resolves to slug `jamdesk-docs` and the cookie is
- *        written at `Path=/`. A shared cache on that host may serve one
- *        visitor's previewed theme to another.
- *
- *    That second exposure is KNOWN and was accepted as cosmetic residual risk
- *    — the payload is a theme on Jamdesk's own docs, the HTML carries nothing
- *    visitor-specific, and the subdomain is not the surface prospects are sent
- *    to. Do not add `Vary: Cookie` without revisiting that call. DO revisit it
- *    if anything raises the stakes: a Cloudflare Cache Rule or `s-maxage` that
- *    makes the apex shared-cacheable, extending the preview past jamdesk-docs,
- *    or putting anything per-visitor in the response. A server component
- *    cannot set response headers, so this docblock IS the mitigation — the
- *    only thing that can go wrong with it is going stale.
+ *    The invariant is that the page stays `private, no-store`, pinned on
+ *    `force-dynamic` by `layout-theme-preview-wiring.test.ts` as the explicit
+ *    guarantee. If anything makes the HTML shared-cacheable — removing
+ *    `force-dynamic`, adding `revalidate` or `s-maxage`, or a Cloudflare
+ *    Cache Rule on `/docs` — the preview leaks across visitors. If that ever
+ *    needs to change, force `Cache-Control: private, no-store` for the
+ *    `jamdesk-docs` slug at `proxy.ts`'s terminal `continueWith` return.
+ *    `Vary: Cookie` is NOT enough: on jamdesk.com the apex worker
+ *    (`cloudflare-worker/index.js`) fetches every proxied docs path with
+ *    `cf: { cacheEverything: true }` and no `cf.vary`, so it caches by URL and
+ *    Cloudflare ignores `Vary` unless a Cache Rule opts in — that worker would
+ *    keep serving one visitor's previewed HTML to everyone else regardless of
+ *    a `Vary` header.
  */
 import { getAllThemes, type ThemeName } from '@/themes';
 
@@ -56,10 +65,9 @@ export const THEME_PREVIEW_COOKIE = 'jd_theme';
 export const THEME_PREVIEW_SLUG = 'jamdesk-docs';
 
 // No lifetime constant on purpose: the picker writes a SESSION cookie (no
-// Max-Age), so a preview dies with the browser. The picker is desktop-only, so
-// a persisted preview would follow a visitor to mobile with no way to reset
-// it. The clear path still sends `Max-Age=0` — see ThemePreviewPicker's
-// applyTheme.
+// Max-Age) by product decision — a preview is a look at a theme, not a
+// setting, and should not outlive the visit. The clear path still sends
+// `Max-Age=0` — see theme-preview-client.ts's applyThemePreview.
 
 // Built from the registry rather than using `isValidTheme`, which is a plain
 // `name in themes` check and therefore also returns true for inherited Object
@@ -102,8 +110,10 @@ function parseThemeName(value: string | undefined | null): ThemeName | null {
 /**
  * A registry theme name, or `jam` for anything else. `config.theme` arrives
  * from docs.json as an unvalidated string, so casting it straight to ThemeName
- * would hand the picker a value that labels no row and matches no "Default"
- * badge.
+ * would hand `defaultTheme` a value that never lines up with a real chip —
+ * `ThemePreviewChips` uses it only to decide whether a preview is on
+ * (`activeTheme !== defaultTheme`), which shows Reset and the "Previewing"
+ * label.
  */
 export function toThemeName(value: string | undefined | null): ThemeName {
   return parseThemeName(value) ?? 'jam';

package/vendored/themes/jam/variables.css

@@ -771,6 +771,15 @@ body[data-theme="jam"] [class*="fa-"]:not(.fa-brands) {
   font-weight: 300 !important;
 }
 
+/* Except the theme toggles: their 12-14px icons are hairlines at light weight
+   and nearly vanish on the pale pill. A thin text stroke thickens the glyph
+   instead of switching weight: fa-regular is a separate ~333 KB webfont that
+   jam pages otherwise never load, and font-display:block would hold the icons
+   blank until it arrived. */
+body[data-theme="jam"] :is([data-theme-toggle], [data-theme-toggle-cycle]) [class*="fa-"] {
+  -webkit-text-stroke: 0.3px currentColor;
+}
+
 /* ===== JAM THEME API PARAMETER STYLING ===== */
 /* Scoped to jam theme */
 

package/vendored/themes/nebula/variables.css

@@ -245,25 +245,30 @@ body[data-theme="nebula"] .sidebar-tabs {
   }
 }
 
-/* Add bottom border to header - extends edge to edge */
-/* Allow overflow on layout wrapper so border can extend beyond max-width */
-body[data-theme="nebula"] > div {
-  overflow: visible !important;
-}
-
-body[data-theme="nebula"] > div > header {
-  position: relative;
-}
-
-body[data-theme="nebula"] > div > header::after {
+/* Header divider. Targets the nav header by its data-has-tabs attribute, not a
+   child-combinator chain from <body>: the old `body > div > header` form broke
+   silently when LayoutWrapper nested the header three levels down, and Nebula
+   shipped with no divider (nebula-header-divider.test.tsx). The header is
+   sticky, which already anchors ::after, so it needs no position of its own.
+   The -1rem / -1.5rem insets span the layout column's `px-4 lg:px-6`: the line
+   runs edge to edge up to --layout-max-width without lifting the column's
+   lg:overflow-hidden, which the desktop wheel-chaining fix relies on. */
+body[data-theme="nebula"] header[data-has-tabs]::after {
   content: '';
   position: absolute;
+  left: -1rem;
+  right: -1rem;
   bottom: 0;
-  left: 50%;
-  transform: translateX(-50%);
-  width: 100vw;
   height: 0.5px;
   background-color: var(--color-border);
+  pointer-events: none;
+}
+
+@media (min-width: 1024px) {
+  body[data-theme="nebula"] header[data-has-tabs]::after {
+    left: -1.5rem;
+    right: -1.5rem;
+  }
 }
 
 /* Add right padding to code panels sidebar on API pages */

package/vendored/themes/pulsar/variables.css

@@ -612,6 +612,14 @@ aside {
   font-weight: 300 !important;
 }
 
+/* Except the theme toggles: the sidebar toggle's icons shrink to 8px on
+   desktop, where light weight turns them to hairlines. A thin text stroke
+   thickens the glyph instead of switching weight: fa-regular is a separate
+   ~333 KB webfont that pulsar pages otherwise never load. */
+:is([data-theme-toggle], [data-theme-toggle-cycle]) [class*="fa-"] {
+  -webkit-text-stroke: 0.3px currentColor;
+}
+
 /* ===== PULSAR THEME API PARAMETER STYLING ===== */
 
 /*
@@ -1011,8 +1019,9 @@ body[data-theme="pulsar"] header [data-theme-toggle] {
     background-color: var(--color-bg-primary) !important;
   }
 
-  /* Ensure content area starts at top with no gap */
-  body[data-theme="pulsar"] > div {
+  /* Ensure content area starts at top with no gap. :not() spares the
+     sr-only agent directive, which is also a body > div. */
+  body[data-theme="pulsar"] > div:not([data-jd-agent-directive]) {
     min-height: 100vh;
     min-height: 100dvh; /* Dynamic viewport height for mobile browsers */
   }

package/vendored/workspace-package-lock.json

@@ -63,12 +63,11 @@
         "remark-smartypants": "^3.0.3",
         "shiki": "^4.4.2",
         "tailwindcss": "^4.3.2",
-        "typescript": "^npm:@typescript/typescript6@^6.0.2",
+        "typescript": "npm:@typescript/typescript6@^6.0.2",
         "unified": "^11.0.5",
         "unist-util-visit": "^5.1.0"
       }
     },
-    "^npm:@typescript/typescript6@^6.0.2": {},
     "node_modules/@alloc/quick-lru": {
       "version": "5.3.0",
       "resolved": "https://registry.npmjs.org/@alloc/quick-lru/-/quick-lru-5.3.0.tgz",
@@ -2194,6 +2193,20 @@
       "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==",
       "license": "MIT"
     },
+    "node_modules/@typescript/old": {
+      "name": "typescript",
+      "version": "6.0.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-6.0.3.tgz",
+      "integrity": "sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw==",
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
     "node_modules/@ungap/structured-clone": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/@ungap/structured-clone/-/structured-clone-1.4.0.tgz",
@@ -3182,9 +3195,9 @@
       "license": "MIT"
     },
     "node_modules/electron-to-chromium": {
-      "version": "1.5.434",
-      "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.434.tgz",
-      "integrity": "sha512-7EeFW9OLf1NN9NKQP9xdOE/XKqjxv7JDPP6AEAkHli11+Fae1OaLoNuAf13hQv1PPNtuES0pLQSPk2+fS3s8ww==",
+      "version": "1.5.436",
+      "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.436.tgz",
+      "integrity": "sha512-iG79/xCF3iThADicbgbES2+liFYmTvelo7jWcEfg6lQ+Adrh7zShrXSg2ZdEDLbKjJ298kGAKMnnzVWobp0L+g==",
       "license": "ISC"
     },
     "node_modules/elkjs": {
@@ -6704,8 +6717,17 @@
       "license": "0BSD"
     },
     "node_modules/typescript": {
-      "resolved": "^npm:@typescript/typescript6@^6.0.2",
-      "link": true
+      "name": "@typescript/typescript6",
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript6/-/typescript6-6.0.2.tgz",
+      "integrity": "sha512-mbCddXd+jm7hfx7w2YU64/Av4/NqqeG3GoRZgxPcgoTxYjhrcfJRw9ULch71SS4G+Q3bOXFhRvPqjguN0Hyp5w==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@typescript/old": "npm:typescript@^6"
+      },
+      "bin": {
+        "tsc6": "bin/tsc6"
+      }
     },
     "node_modules/uncrypto": {
       "version": "0.1.3",