neuralos 3.7.3 → 3.7.5

package/bin/gybackend.cjs

@@ -234,7 +234,7 @@ var require_xterm_headless = __commonJS({
           };
         };
         Object.defineProperty(t2, "__esModule", { value: true }), t2.InputHandler = t2.WindowsOptionsReportType = void 0, t2.isValidColorIndex = k;
-        const n3 = s2(3534), o = s2(6760), a = s2(6717), h = s2(7150), c = s2(726), l = s2(6107), u = s2(8938), d = s2(3055), f = s2(5451), _ = s2(6501), p = s2(6415), g = s2(1346), v = s2(9823), m2 = s2(8693), b = s2(802), S = { "(": 0, ")": 1, "*": 2, "+": 3, "-": 1, ".": 2 }, y = 131072;
+        const n3 = s2(3534), o = s2(6760), a = s2(6717), h = s2(7150), c = s2(726), l = s2(6107), u = s2(8938), d = s2(3055), f = s2(5451), _ = s2(6501), p = s2(6415), g = s2(1346), v = s2(9823), m2 = s2(8693), b = s2(802), S2 = { "(": 0, ")": 1, "*": 2, "+": 3, "-": 1, ".": 2 }, y = 131072;
         function C(e3, t3) {
           if (e3 > 24) return t3.setWinLines || false;
           switch (e3) {
@@ -996,7 +996,7 @@ var require_xterm_headless = __commonJS({
             return this._charsetService.setgLevel(0), this._charsetService.setgCharset(0, o.DEFAULT_CHARSET), true;
           }
           selectCharset(e3) {
-            return 2 !== e3.length ? (this.selectDefaultCharset(), true) : ("/" === e3[0] || this._charsetService.setgCharset(S[e3[0]], o.CHARSETS[e3[1]] || o.DEFAULT_CHARSET), true);
+            return 2 !== e3.length ? (this.selectDefaultCharset(), true) : ("/" === e3[0] || this._charsetService.setgCharset(S2[e3[0]], o.CHARSETS[e3[1]] || o.DEFAULT_CHARSET), true);
           }
           index() {
             return this._restrictCursor(), this._activeBuffer.y++, this._activeBuffer.y === this._activeBuffer.scrollBottom + 1 ? (this._activeBuffer.y--, this._bufferService.scroll(this._eraseAttrData())) : this._activeBuffer.y >= this._bufferService.rows && (this._activeBuffer.y = this._bufferService.rows - 1), this._restrictCursor(), true;
@@ -1429,8 +1429,8 @@ var require_xterm_headless = __commonJS({
                 }
               }
               for (let t4 = 0; t4 < l2.length; t4++) d[t4] < e3 && l2[t4].setCell(d[t4], i3);
-              let S = f - _;
-              for (; S-- > 0; ) 0 === this.ybase ? this.y < t3 - 1 ? (this.y++, this.lines.pop()) : (this.ybase++, this.ydisp++) : this.ybase < Math.min(this.lines.maxLength, this.lines.length + n4) - t3 && (this.ybase === this.ydisp && this.ydisp++, this.ybase++);
+              let S2 = f - _;
+              for (; S2-- > 0; ) 0 === this.ybase ? this.y < t3 - 1 ? (this.y++, this.lines.pop()) : (this.ybase++, this.ydisp++) : this.ybase < Math.min(this.lines.maxLength, this.lines.length + n4) - t3 && (this.ybase === this.ydisp && this.ydisp++, this.ybase++);
               this.savedY = Math.min(this.savedY + f, this.ybase + t3 - 1);
             }
             if (r3.length > 0) {
@@ -4242,7 +4242,7 @@ var require_xterm_headless = __commonJS({
             })));
           }
         };
-        class S {
+        class S2 {
           constructor() {
             this.hasListeners = false, this.events = [], this.emitter = new v({ onWillAddFirstListener: () => this.onFirstListenerAdd(), onDidRemoveLastListener: () => this.onLastListenerRemove() });
           }
@@ -4275,10 +4275,10 @@ var require_xterm_headless = __commonJS({
             this.events = [];
           }
         }
-        t2.EventMultiplexer = S, t2.DynamicListEventMultiplexer = class {
+        t2.EventMultiplexer = S2, t2.DynamicListEventMultiplexer = class {
           constructor(e3, t3, s3, i3) {
             this._store = new n3.DisposableStore();
-            const r3 = this._store.add(new S()), o2 = this._store.add(new n3.DisposableMap());
+            const r3 = this._store.add(new S2()), o2 = this._store.add(new n3.DisposableMap());
             function a2(e4) {
               o2.set(e4, r3.add(i3(e4)));
             }
@@ -15932,16 +15932,16 @@ function openBetterSqlite3Database(filePath, options) {
     );
   }
 }
-var import_node_fs, import_node_path3, import_node_module3, import_meta5, require2, NODE_RUNTIME_PACKAGE_NAME, ELECTRON_RUNTIME_PACKAGE_NAME, cachedConstructor, cachedPackageName, nativeBindingIsConstructor;
+var import_node_fs, import_node_path3, import_node_module3, import_meta6, require2, NODE_RUNTIME_PACKAGE_NAME, ELECTRON_RUNTIME_PACKAGE_NAME, cachedConstructor, cachedPackageName, nativeBindingIsConstructor;
 var init_betterSqlite3Runtime = __esm({
   "../../packages/backend/src/services/history/betterSqlite3Runtime.ts"() {
     "use strict";
     import_node_fs = __toESM(require("node:fs"), 1);
     import_node_path3 = __toESM(require("node:path"), 1);
     import_node_module3 = require("node:module");
-    import_meta5 = {};
+    import_meta6 = {};
     require2 = (0, import_node_module3.createRequire)(
-      typeof __filename !== "undefined" ? __filename : import_meta5.url
+      typeof __filename !== "undefined" ? __filename : import_meta6.url
     );
     NODE_RUNTIME_PACKAGE_NAME = "better-sqlite3";
     ELECTRON_RUNTIME_PACKAGE_NAME = "better-sqlite3-electron";
@@ -21102,12 +21102,12 @@ var require_pdf_worker = __commonJS({
           (function(module3, exports3, __w_pdfjs_require__) {
             "use strict";
             var isObject8 = __w_pdfjs_require__(3);
-            module3.exports = function(it, S) {
+            module3.exports = function(it, S2) {
               if (!isObject8(it)) return it;
               var fn, val;
-              if (S && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
+              if (S2 && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
               if (typeof (fn = it.valueOf) == "function" && !isObject8(val = fn.call(it))) return val;
-              if (!S && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
+              if (!S2 && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
               throw TypeError("Can't convert object to primitive value");
             };
           }),
@@ -21213,8 +21213,8 @@ var require_pdf_worker = __commonJS({
             var SPECIES = __w_pdfjs_require__(4)("species");
             module3.exports = function(O, D) {
               var C = anObject(O).constructor;
-              var S;
-              return C === void 0 || (S = anObject(C)[SPECIES]) == void 0 ? D : aFunction(S);
+              var S2;
+              return C === void 0 || (S2 = anObject(C)[SPECIES]) == void 0 ? D : aFunction(S2);
             };
           }),
           /* 44 */
@@ -43558,13 +43558,13 @@ var require_pdf_worker = __commonJS({
             module3.exports = !$assign || __w_pdfjs_require__(11)(function() {
               var A = {};
               var B = {};
-              var S = Symbol();
+              var S2 = Symbol();
               var K2 = "abcdefghijklmnopqrst";
-              A[S] = 7;
+              A[S2] = 7;
               K2.split("").forEach(function(k) {
                 B[k] = k;
               });
-              return $assign({}, A)[S] != 7 || Object.keys($assign({}, B)).join("") != K2;
+              return $assign({}, A)[S2] != 7 || Object.keys($assign({}, B)).join("") != K2;
             }) ? function assign(target, source) {
               var T = toObject(target);
               var aLen = arguments.length;
@@ -43572,13 +43572,13 @@ var require_pdf_worker = __commonJS({
               var getSymbols = gOPS.f;
               var isEnum = pIE.f;
               while (aLen > index2) {
-                var S = IObject(arguments[index2++]);
-                var keys = getSymbols ? getKeys(S).concat(getSymbols(S)) : getKeys(S);
+                var S2 = IObject(arguments[index2++]);
+                var keys = getSymbols ? getKeys(S2).concat(getSymbols(S2)) : getKeys(S2);
                 var length = keys.length;
                 var j = 0;
                 var key;
                 while (length > j) {
-                  if (isEnum.call(S, key = keys[j++])) T[key] = S[key];
+                  if (isEnum.call(S2, key = keys[j++])) T[key] = S2[key];
                 }
               }
               return T;
@@ -43765,9 +43765,9 @@ var require_pdf_worker = __commonJS({
             var isObject8 = __w_pdfjs_require__(3);
             var setPrototypeOf = __w_pdfjs_require__(120).set;
             module3.exports = function(that, target, C) {
-              var S = target.constructor;
+              var S2 = target.constructor;
               var P;
-              if (S !== C && typeof S == "function" && (P = S.prototype) !== C.prototype && isObject8(P) && setPrototypeOf) {
+              if (S2 !== C && typeof S2 == "function" && (P = S2.prototype) !== C.prototype && isObject8(P) && setPrototypeOf) {
                 setPrototypeOf(that, P);
               }
               return that;
@@ -43998,11 +43998,11 @@ var require_pdf_worker = __commonJS({
                 }
                 return true;
               };
-              function Call2(F, V, args) {
-                if (typeof F !== "function") {
+              function Call2(F2, V, args) {
+                if (typeof F2 !== "function") {
                   throw new TypeError("Argument is not a function");
                 }
-                return Function.prototype.apply.call(F, V, args);
+                return Function.prototype.apply.call(F2, V, args);
               }
               exports4.InvokeOrNoop = function(O, P, args) {
                 assert3(O !== void 0);
@@ -44024,7 +44024,7 @@ var require_pdf_worker = __commonJS({
                   return Promise.reject(returnValueE);
                 }
               };
-              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F, argsF) {
+              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F2, argsF) {
                 assert3(O !== void 0);
                 assert3(IsPropertyKey(P));
                 assert3(Array.isArray(args));
@@ -44036,7 +44036,7 @@ var require_pdf_worker = __commonJS({
                   return Promise.reject(methodE);
                 }
                 if (method === void 0) {
-                  return F.apply(null, argsF);
+                  return F2.apply(null, argsF);
                 }
                 try {
                   return Promise.resolve(Call2(method, O, args));
@@ -62563,12 +62563,12 @@ var require_pdf = __commonJS({
           (function(module3, exports3, __w_pdfjs_require__) {
             "use strict";
             var isObject8 = __w_pdfjs_require__(2);
-            module3.exports = function(it, S) {
+            module3.exports = function(it, S2) {
               if (!isObject8(it)) return it;
               var fn, val;
-              if (S && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
+              if (S2 && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
               if (typeof (fn = it.valueOf) == "function" && !isObject8(val = fn.call(it))) return val;
-              if (!S && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
+              if (!S2 && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
               throw TypeError("Can't convert object to primitive value");
             };
           }),
@@ -62674,8 +62674,8 @@ var require_pdf = __commonJS({
             var SPECIES = __w_pdfjs_require__(3)("species");
             module3.exports = function(O, D) {
               var C = anObject(O).constructor;
-              var S;
-              return C === void 0 || (S = anObject(C)[SPECIES]) == void 0 ? D : aFunction(S);
+              var S2;
+              return C === void 0 || (S2 = anObject(C)[SPECIES]) == void 0 ? D : aFunction(S2);
             };
           }),
           /* 41 */
@@ -70601,13 +70601,13 @@ var require_pdf = __commonJS({
             module3.exports = !$assign || __w_pdfjs_require__(9)(function() {
               var A = {};
               var B = {};
-              var S = Symbol();
+              var S2 = Symbol();
               var K2 = "abcdefghijklmnopqrst";
-              A[S] = 7;
+              A[S2] = 7;
               K2.split("").forEach(function(k) {
                 B[k] = k;
               });
-              return $assign({}, A)[S] != 7 || Object.keys($assign({}, B)).join("") != K2;
+              return $assign({}, A)[S2] != 7 || Object.keys($assign({}, B)).join("") != K2;
             }) ? function assign(target, source) {
               var T = toObject(target);
               var aLen = arguments.length;
@@ -70615,13 +70615,13 @@ var require_pdf = __commonJS({
               var getSymbols = gOPS.f;
               var isEnum = pIE.f;
               while (aLen > index2) {
-                var S = IObject(arguments[index2++]);
-                var keys = getSymbols ? getKeys(S).concat(getSymbols(S)) : getKeys(S);
+                var S2 = IObject(arguments[index2++]);
+                var keys = getSymbols ? getKeys(S2).concat(getSymbols(S2)) : getKeys(S2);
                 var length = keys.length;
                 var j = 0;
                 var key;
                 while (length > j) {
-                  if (isEnum.call(S, key = keys[j++])) T[key] = S[key];
+                  if (isEnum.call(S2, key = keys[j++])) T[key] = S2[key];
                 }
               }
               return T;
@@ -70808,9 +70808,9 @@ var require_pdf = __commonJS({
             var isObject8 = __w_pdfjs_require__(2);
             var setPrototypeOf = __w_pdfjs_require__(111).set;
             module3.exports = function(that, target, C) {
-              var S = target.constructor;
+              var S2 = target.constructor;
               var P;
-              if (S !== C && typeof S == "function" && (P = S.prototype) !== C.prototype && isObject8(P) && setPrototypeOf) {
+              if (S2 !== C && typeof S2 == "function" && (P = S2.prototype) !== C.prototype && isObject8(P) && setPrototypeOf) {
                 setPrototypeOf(that, P);
               }
               return that;
@@ -71041,11 +71041,11 @@ var require_pdf = __commonJS({
                 }
                 return true;
               };
-              function Call2(F, V, args) {
-                if (typeof F !== "function") {
+              function Call2(F2, V, args) {
+                if (typeof F2 !== "function") {
                   throw new TypeError("Argument is not a function");
                 }
-                return Function.prototype.apply.call(F, V, args);
+                return Function.prototype.apply.call(F2, V, args);
               }
               exports4.InvokeOrNoop = function(O, P, args) {
                 assert3(O !== void 0);
@@ -71067,7 +71067,7 @@ var require_pdf = __commonJS({
                   return Promise.reject(returnValueE);
                 }
               };
-              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F, argsF) {
+              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F2, argsF) {
                 assert3(O !== void 0);
                 assert3(IsPropertyKey(P));
                 assert3(Array.isArray(args));
@@ -71079,7 +71079,7 @@ var require_pdf = __commonJS({
                   return Promise.reject(methodE);
                 }
                 if (method === void 0) {
-                  return F.apply(null, argsF);
+                  return F2.apply(null, argsF);
                 }
                 try {
                   return Promise.resolve(Call2(method, O, args));
@@ -83310,12 +83310,12 @@ var require_pdf_worker2 = __commonJS({
           (function(module3, exports3, __w_pdfjs_require__) {
             "use strict";
             var isObject8 = __w_pdfjs_require__(3);
-            module3.exports = function(it, S) {
+            module3.exports = function(it, S2) {
               if (!isObject8(it)) return it;
               var fn, val;
-              if (S && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
+              if (S2 && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
               if (typeof (fn = it.valueOf) == "function" && !isObject8(val = fn.call(it))) return val;
-              if (!S && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
+              if (!S2 && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
               throw TypeError("Can't convert object to primitive value");
             };
           }),
@@ -83421,8 +83421,8 @@ var require_pdf_worker2 = __commonJS({
             var SPECIES = __w_pdfjs_require__(4)("species");
             module3.exports = function(O, D) {
               var C = anObject(O).constructor;
-              var S;
-              return C === void 0 || (S = anObject(C)[SPECIES]) == void 0 ? D : aFunction(S);
+              var S2;
+              return C === void 0 || (S2 = anObject(C)[SPECIES]) == void 0 ? D : aFunction(S2);
             };
           }),
           /* 44 */
@@ -105766,13 +105766,13 @@ var require_pdf_worker2 = __commonJS({
             module3.exports = !$assign || __w_pdfjs_require__(12)(function() {
               var A = {};
               var B = {};
-              var S = Symbol();
+              var S2 = Symbol();
               var K2 = "abcdefghijklmnopqrst";
-              A[S] = 7;
+              A[S2] = 7;
               K2.split("").forEach(function(k) {
                 B[k] = k;
               });
-              return $assign({}, A)[S] != 7 || Object.keys($assign({}, B)).join("") != K2;
+              return $assign({}, A)[S2] != 7 || Object.keys($assign({}, B)).join("") != K2;
             }) ? function assign(target, source) {
               var T = toObject(target);
               var aLen = arguments.length;
@@ -105780,13 +105780,13 @@ var require_pdf_worker2 = __commonJS({
               var getSymbols = gOPS.f;
               var isEnum = pIE.f;
               while (aLen > index2) {
-                var S = IObject(arguments[index2++]);
-                var keys = getSymbols ? getKeys(S).concat(getSymbols(S)) : getKeys(S);
+                var S2 = IObject(arguments[index2++]);
+                var keys = getSymbols ? getKeys(S2).concat(getSymbols(S2)) : getKeys(S2);
                 var length = keys.length;
                 var j = 0;
                 var key;
                 while (length > j) {
-                  if (isEnum.call(S, key = keys[j++])) T[key] = S[key];
+                  if (isEnum.call(S2, key = keys[j++])) T[key] = S2[key];
                 }
               }
               return T;
@@ -105973,9 +105973,9 @@ var require_pdf_worker2 = __commonJS({
             var isObject8 = __w_pdfjs_require__(3);
             var setPrototypeOf = __w_pdfjs_require__(119).set;
             module3.exports = function(that, target, C) {
-              var S = target.constructor;
+              var S2 = target.constructor;
               var P;
-              if (S !== C && typeof S == "function" && (P = S.prototype) !== C.prototype && isObject8(P) && setPrototypeOf) {
+              if (S2 !== C && typeof S2 == "function" && (P = S2.prototype) !== C.prototype && isObject8(P) && setPrototypeOf) {
                 setPrototypeOf(that, P);
               }
               return that;
@@ -106206,11 +106206,11 @@ var require_pdf_worker2 = __commonJS({
                 }
                 return true;
               };
-              function Call2(F, V, args) {
-                if (typeof F !== "function") {
+              function Call2(F2, V, args) {
+                if (typeof F2 !== "function") {
                   throw new TypeError("Argument is not a function");
                 }
-                return Function.prototype.apply.call(F, V, args);
+                return Function.prototype.apply.call(F2, V, args);
               }
               exports4.InvokeOrNoop = function(O, P, args) {
                 assert3(O !== void 0);
@@ -106232,7 +106232,7 @@ var require_pdf_worker2 = __commonJS({
                   return Promise.reject(returnValueE);
                 }
               };
-              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F, argsF) {
+              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F2, argsF) {
                 assert3(O !== void 0);
                 assert3(IsPropertyKey(P));
                 assert3(Array.isArray(args));
@@ -106244,7 +106244,7 @@ var require_pdf_worker2 = __commonJS({
                   return Promise.reject(methodE);
                 }
                 if (method === void 0) {
-                  return F.apply(null, argsF);
+                  return F2.apply(null, argsF);
                 }
                 try {
                   return Promise.resolve(Call2(method, O, args));
@@ -124888,12 +124888,12 @@ var require_pdf2 = __commonJS({
           (function(module3, exports3, __w_pdfjs_require__) {
             "use strict";
             var isObject8 = __w_pdfjs_require__(2);
-            module3.exports = function(it, S) {
+            module3.exports = function(it, S2) {
               if (!isObject8(it)) return it;
               var fn, val;
-              if (S && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
+              if (S2 && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
               if (typeof (fn = it.valueOf) == "function" && !isObject8(val = fn.call(it))) return val;
-              if (!S && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
+              if (!S2 && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
               throw TypeError("Can't convert object to primitive value");
             };
           }),
@@ -124999,8 +124999,8 @@ var require_pdf2 = __commonJS({
             var SPECIES = __w_pdfjs_require__(3)("species");
             module3.exports = function(O, D) {
               var C = anObject(O).constructor;
-              var S;
-              return C === void 0 || (S = anObject(C)[SPECIES]) == void 0 ? D : aFunction(S);
+              var S2;
+              return C === void 0 || (S2 = anObject(C)[SPECIES]) == void 0 ? D : aFunction(S2);
             };
           }),
           /* 41 */
@@ -132913,13 +132913,13 @@ var require_pdf2 = __commonJS({
             module3.exports = !$assign || __w_pdfjs_require__(10)(function() {
               var A = {};
               var B = {};
-              var S = Symbol();
+              var S2 = Symbol();
               var K2 = "abcdefghijklmnopqrst";
-              A[S] = 7;
+              A[S2] = 7;
               K2.split("").forEach(function(k) {
                 B[k] = k;
               });
-              return $assign({}, A)[S] != 7 || Object.keys($assign({}, B)).join("") != K2;
+              return $assign({}, A)[S2] != 7 || Object.keys($assign({}, B)).join("") != K2;
             }) ? function assign(target, source) {
               var T = toObject(target);
               var aLen = arguments.length;
@@ -132927,13 +132927,13 @@ var require_pdf2 = __commonJS({
               var getSymbols = gOPS.f;
               var isEnum = pIE.f;
               while (aLen > index2) {
-                var S = IObject(arguments[index2++]);
-                var keys = getSymbols ? getKeys(S).concat(getSymbols(S)) : getKeys(S);
+                var S2 = IObject(arguments[index2++]);
+                var keys = getSymbols ? getKeys(S2).concat(getSymbols(S2)) : getKeys(S2);
                 var length = keys.length;
                 var j = 0;
                 var key;
                 while (length > j) {
-                  if (isEnum.call(S, key = keys[j++])) T[key] = S[key];
+                  if (isEnum.call(S2, key = keys[j++])) T[key] = S2[key];
                 }
               }
               return T;
@@ -133120,9 +133120,9 @@ var require_pdf2 = __commonJS({
             var isObject8 = __w_pdfjs_require__(2);
             var setPrototypeOf = __w_pdfjs_require__(110).set;
             module3.exports = function(that, target, C) {
-              var S = target.constructor;
+              var S2 = target.constructor;
               var P;
-              if (S !== C && typeof S == "function" && (P = S.prototype) !== C.prototype && isObject8(P) && setPrototypeOf) {
+              if (S2 !== C && typeof S2 == "function" && (P = S2.prototype) !== C.prototype && isObject8(P) && setPrototypeOf) {
                 setPrototypeOf(that, P);
               }
               return that;
@@ -133353,11 +133353,11 @@ var require_pdf2 = __commonJS({
                 }
                 return true;
               };
-              function Call2(F, V, args) {
-                if (typeof F !== "function") {
+              function Call2(F2, V, args) {
+                if (typeof F2 !== "function") {
                   throw new TypeError("Argument is not a function");
                 }
-                return Function.prototype.apply.call(F, V, args);
+                return Function.prototype.apply.call(F2, V, args);
               }
               exports4.InvokeOrNoop = function(O, P, args) {
                 assert3(O !== void 0);
@@ -133379,7 +133379,7 @@ var require_pdf2 = __commonJS({
                   return Promise.reject(returnValueE);
                 }
               };
-              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F, argsF) {
+              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F2, argsF) {
                 assert3(O !== void 0);
                 assert3(IsPropertyKey(P));
                 assert3(Array.isArray(args));
@@ -133391,7 +133391,7 @@ var require_pdf2 = __commonJS({
                   return Promise.reject(methodE);
                 }
                 if (method === void 0) {
-                  return F.apply(null, argsF);
+                  return F2.apply(null, argsF);
                 }
                 try {
                   return Promise.resolve(Call2(method, O, args));
@@ -164166,11 +164166,11 @@ var require_pdf_worker3 = __commonJS({
                 }
                 return true;
               };
-              function Call2(F, V, args) {
-                if (typeof F !== "function") {
+              function Call2(F2, V, args) {
+                if (typeof F2 !== "function") {
                   throw new TypeError("Argument is not a function");
                 }
-                return Function.prototype.apply.call(F, V, args);
+                return Function.prototype.apply.call(F2, V, args);
               }
               exports4.InvokeOrNoop = function(O, P, args) {
                 assert3(O !== void 0);
@@ -164192,7 +164192,7 @@ var require_pdf_worker3 = __commonJS({
                   return Promise.reject(returnValueE);
                 }
               };
-              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F, argsF) {
+              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F2, argsF) {
                 assert3(O !== void 0);
                 assert3(IsPropertyKey(P));
                 assert3(Array.isArray(args));
@@ -164204,7 +164204,7 @@ var require_pdf_worker3 = __commonJS({
                   return Promise.reject(methodE);
                 }
                 if (method === void 0) {
-                  return F.apply(null, argsF);
+                  return F2.apply(null, argsF);
                 }
                 try {
                   return Promise.resolve(Call2(method, O, args));
@@ -185210,7 +185210,7 @@ var require_pdf3 = __commonJS({
                   this.cssStyle = null;
                   this.forceDataSchema = !!forceDataSchema;
                 }
-                var NS2 = "http://www.w3.org/2000/svg";
+                var NS3 = "http://www.w3.org/2000/svg";
                 var XML_NS = "http://www.w3.org/XML/1998/namespace";
                 var XLINK_NS = "http://www.w3.org/1999/xlink";
                 var LINE_CAP_STYLES = ["butt", "round", "square"];
@@ -185451,11 +185451,11 @@ var require_pdf3 = __commonJS({
                     this.current.x = this.current.lineX = 0;
                     this.current.y = this.current.lineY = 0;
                     current.xcoords = [];
-                    current.tspan = document.createElementNS(NS2, "svg:tspan");
+                    current.tspan = document.createElementNS(NS3, "svg:tspan");
                     current.tspan.setAttributeNS(null, "font-family", current.fontFamily);
                     current.tspan.setAttributeNS(null, "font-size", pf(current.fontSize) + "px");
                     current.tspan.setAttributeNS(null, "y", pf(-current.y));
-                    current.txtElement = document.createElementNS(NS2, "svg:text");
+                    current.txtElement = document.createElementNS(NS3, "svg:text");
                     current.txtElement.appendChild(current.tspan);
                   },
                   beginText: function SVGGraphics_beginText() {
@@ -185463,9 +185463,9 @@ var require_pdf3 = __commonJS({
                     this.current.y = this.current.lineY = 0;
                     this.current.textMatrix = _util.IDENTITY_MATRIX;
                     this.current.lineMatrix = _util.IDENTITY_MATRIX;
-                    this.current.tspan = document.createElementNS(NS2, "svg:tspan");
-                    this.current.txtElement = document.createElementNS(NS2, "svg:text");
-                    this.current.txtgrp = document.createElementNS(NS2, "svg:g");
+                    this.current.tspan = document.createElementNS(NS3, "svg:tspan");
+                    this.current.txtElement = document.createElementNS(NS3, "svg:text");
+                    this.current.txtgrp = document.createElementNS(NS3, "svg:g");
                     this.current.xcoords = [];
                   },
                   moveText: function SVGGraphics_moveText(x, y) {
@@ -185473,7 +185473,7 @@ var require_pdf3 = __commonJS({
                     this.current.x = this.current.lineX += x;
                     this.current.y = this.current.lineY += y;
                     current.xcoords = [];
-                    current.tspan = document.createElementNS(NS2, "svg:tspan");
+                    current.tspan = document.createElementNS(NS3, "svg:tspan");
                     current.tspan.setAttributeNS(null, "font-family", current.fontFamily);
                     current.tspan.setAttributeNS(null, "font-size", pf(current.fontSize) + "px");
                     current.tspan.setAttributeNS(null, "y", pf(-current.y));
@@ -185540,7 +185540,7 @@ var require_pdf3 = __commonJS({
                   },
                   addFontStyle: function SVGGraphics_addFontStyle(fontObj) {
                     if (!this.cssStyle) {
-                      this.cssStyle = document.createElementNS(NS2, "svg:style");
+                      this.cssStyle = document.createElementNS(NS3, "svg:style");
                       this.cssStyle.setAttributeNS(null, "type", "text/css");
                       this.defs.appendChild(this.cssStyle);
                     }
@@ -185569,7 +185569,7 @@ var require_pdf3 = __commonJS({
                     current.fontFamily = fontObj.loadedName;
                     current.fontWeight = bold;
                     current.fontStyle = italic;
-                    current.tspan = document.createElementNS(NS2, "svg:tspan");
+                    current.tspan = document.createElementNS(NS3, "svg:tspan");
                     current.tspan.setAttributeNS(null, "y", pf(-current.y));
                     current.xcoords = [];
                   },
@@ -185600,7 +185600,7 @@ var require_pdf3 = __commonJS({
                   setFillRGBColor: function SVGGraphics_setFillRGBColor(r, g, b) {
                     var color2 = _util.Util.makeCssRgb(r, g, b);
                     this.current.fillColor = color2;
-                    this.current.tspan = document.createElementNS(NS2, "svg:tspan");
+                    this.current.tspan = document.createElementNS(NS3, "svg:tspan");
                     this.current.xcoords = [];
                   },
                   setDash: function SVGGraphics_setDash(dashArray, dashPhase) {
@@ -185610,7 +185610,7 @@ var require_pdf3 = __commonJS({
                   constructPath: function SVGGraphics_constructPath(ops, args) {
                     var current = this.current;
                     var x = current.x, y = current.y;
-                    current.path = document.createElementNS(NS2, "svg:path");
+                    current.path = document.createElementNS(NS3, "svg:path");
                     var d = [];
                     var opLength = ops.length;
                     for (var i = 0, j = 0; i < opLength; i++) {
@@ -185670,7 +185670,7 @@ var require_pdf3 = __commonJS({
                     var current = this.current;
                     var clipId = "clippath" + clipCount;
                     clipCount++;
-                    var clipPath = document.createElementNS(NS2, "svg:clipPath");
+                    var clipPath = document.createElementNS(NS3, "svg:clipPath");
                     clipPath.setAttributeNS(null, "id", clipId);
                     clipPath.setAttributeNS(null, "transform", pm(this.transformMatrix));
                     var clipElement = current.element.cloneNode();
@@ -185784,7 +185784,7 @@ var require_pdf3 = __commonJS({
                   },
                   paintSolidColorImageMask: function SVGGraphics_paintSolidColorImageMask() {
                     var current = this.current;
-                    var rect = document.createElementNS(NS2, "svg:rect");
+                    var rect = document.createElementNS(NS3, "svg:rect");
                     rect.setAttributeNS(null, "x", "0");
                     rect.setAttributeNS(null, "y", "0");
                     rect.setAttributeNS(null, "width", "1px");
@@ -185794,7 +185794,7 @@ var require_pdf3 = __commonJS({
                   },
                   paintJpegXObject: function SVGGraphics_paintJpegXObject(objId, w, h) {
                     var imgObj = this.objs.get(objId);
-                    var imgEl = document.createElementNS(NS2, "svg:image");
+                    var imgEl = document.createElementNS(NS3, "svg:image");
                     imgEl.setAttributeNS(XLINK_NS, "xlink:href", imgObj.src);
                     imgEl.setAttributeNS(null, "width", pf(w));
                     imgEl.setAttributeNS(null, "height", pf(h));
@@ -185815,14 +185815,14 @@ var require_pdf3 = __commonJS({
                     var width = imgData.width;
                     var height = imgData.height;
                     var imgSrc = convertImgDataToPng(imgData, this.forceDataSchema);
-                    var cliprect = document.createElementNS(NS2, "svg:rect");
+                    var cliprect = document.createElementNS(NS3, "svg:rect");
                     cliprect.setAttributeNS(null, "x", "0");
                     cliprect.setAttributeNS(null, "y", "0");
                     cliprect.setAttributeNS(null, "width", pf(width));
                     cliprect.setAttributeNS(null, "height", pf(height));
                     this.current.element = cliprect;
                     this.clip("nonzero");
-                    var imgEl = document.createElementNS(NS2, "svg:image");
+                    var imgEl = document.createElementNS(NS3, "svg:image");
                     imgEl.setAttributeNS(XLINK_NS, "xlink:href", imgSrc);
                     imgEl.setAttributeNS(null, "x", "0");
                     imgEl.setAttributeNS(null, "y", pf(-height));
@@ -185841,9 +185841,9 @@ var require_pdf3 = __commonJS({
                     var height = imgData.height;
                     var fillColor = current.fillColor;
                     current.maskId = "mask" + maskCount++;
-                    var mask = document.createElementNS(NS2, "svg:mask");
+                    var mask = document.createElementNS(NS3, "svg:mask");
                     mask.setAttributeNS(null, "id", current.maskId);
-                    var rect = document.createElementNS(NS2, "svg:rect");
+                    var rect = document.createElementNS(NS3, "svg:rect");
                     rect.setAttributeNS(null, "x", "0");
                     rect.setAttributeNS(null, "y", "0");
                     rect.setAttributeNS(null, "width", pf(width));
@@ -185861,7 +185861,7 @@ var require_pdf3 = __commonJS({
                     if ((0, _util.isArray)(bbox) && bbox.length === 4) {
                       var width = bbox[2] - bbox[0];
                       var height = bbox[3] - bbox[1];
-                      var cliprect = document.createElementNS(NS2, "svg:rect");
+                      var cliprect = document.createElementNS(NS3, "svg:rect");
                       cliprect.setAttributeNS(null, "x", bbox[0]);
                       cliprect.setAttributeNS(null, "y", bbox[1]);
                       cliprect.setAttributeNS(null, "width", pf(width));
@@ -185874,16 +185874,16 @@ var require_pdf3 = __commonJS({
                   paintFormXObjectEnd: function SVGGraphics_paintFormXObjectEnd() {
                   },
                   _initialize: function SVGGraphics_initialize(viewport) {
-                    var svg = document.createElementNS(NS2, "svg:svg");
+                    var svg = document.createElementNS(NS3, "svg:svg");
                     svg.setAttributeNS(null, "version", "1.1");
                     svg.setAttributeNS(null, "width", viewport.width + "px");
                     svg.setAttributeNS(null, "height", viewport.height + "px");
                     svg.setAttributeNS(null, "preserveAspectRatio", "none");
                     svg.setAttributeNS(null, "viewBox", "0 0 " + viewport.width + " " + viewport.height);
-                    var definitions = document.createElementNS(NS2, "svg:defs");
+                    var definitions = document.createElementNS(NS3, "svg:defs");
                     svg.appendChild(definitions);
                     this.defs = definitions;
-                    var rootGroup = document.createElementNS(NS2, "svg:g");
+                    var rootGroup = document.createElementNS(NS3, "svg:g");
                     rootGroup.setAttributeNS(null, "transform", pm(viewport.transform));
                     svg.appendChild(rootGroup);
                     this.svg = rootGroup;
@@ -185891,7 +185891,7 @@ var require_pdf3 = __commonJS({
                   },
                   _ensureClipGroup: function SVGGraphics_ensureClipGroup() {
                     if (!this.current.clipGroup) {
-                      var clipGroup = document.createElementNS(NS2, "svg:g");
+                      var clipGroup = document.createElementNS(NS3, "svg:g");
                       clipGroup.setAttributeNS(null, "clip-path", this.current.activeClipUrl);
                       this.svg.appendChild(clipGroup);
                       this.current.clipGroup = clipGroup;
@@ -185900,7 +185900,7 @@ var require_pdf3 = __commonJS({
                   },
                   _ensureTransformGroup: function SVGGraphics_ensureTransformGroup() {
                     if (!this.tgrp) {
-                      this.tgrp = document.createElementNS(NS2, "svg:g");
+                      this.tgrp = document.createElementNS(NS3, "svg:g");
                       this.tgrp.setAttributeNS(null, "transform", pm(this.transformMatrix));
                       if (this.current.activeClipUrl) {
                         this._ensureClipGroup().appendChild(this.tgrp);
@@ -187533,11 +187533,11 @@ var require_pdf3 = __commonJS({
                 }
                 return true;
               };
-              function Call2(F, V, args) {
-                if (typeof F !== "function") {
+              function Call2(F2, V, args) {
+                if (typeof F2 !== "function") {
                   throw new TypeError("Argument is not a function");
                 }
-                return Function.prototype.apply.call(F, V, args);
+                return Function.prototype.apply.call(F2, V, args);
               }
               exports4.InvokeOrNoop = function(O, P, args) {
                 assert3(O !== void 0);
@@ -187559,7 +187559,7 @@ var require_pdf3 = __commonJS({
                   return Promise.reject(returnValueE);
                 }
               };
-              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F, argsF) {
+              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F2, argsF) {
                 assert3(O !== void 0);
                 assert3(IsPropertyKey(P));
                 assert3(Array.isArray(args));
@@ -187571,7 +187571,7 @@ var require_pdf3 = __commonJS({
                   return Promise.reject(methodE);
                 }
                 if (method === void 0) {
-                  return F.apply(null, argsF);
+                  return F2.apply(null, argsF);
                 }
                 try {
                   return Promise.resolve(Call2(method, O, args));
@@ -196933,12 +196933,12 @@ var require_pdf_worker4 = __commonJS({
           (function(module3, exports3, __w_pdfjs_require__) {
             "use strict";
             var isObject8 = __w_pdfjs_require__(14);
-            module3.exports = function(it, S) {
+            module3.exports = function(it, S2) {
               if (!isObject8(it)) return it;
               var fn, val;
-              if (S && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
+              if (S2 && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
               if (typeof (fn = it.valueOf) == "function" && !isObject8(val = fn.call(it))) return val;
-              if (!S && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
+              if (!S2 && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
               throw TypeError("Can't convert object to primitive value");
             };
           }),
@@ -198123,8 +198123,8 @@ var require_pdf_worker4 = __commonJS({
             var SPECIES = __w_pdfjs_require__(29)("species");
             module3.exports = function(O, D) {
               var C = anObject(O).constructor;
-              var S;
-              return C === void 0 || (S = anObject(C)[SPECIES]) == void 0 ? D : aFunction(S);
+              var S2;
+              return C === void 0 || (S2 = anObject(C)[SPECIES]) == void 0 ? D : aFunction(S2);
             };
           }),
           /* 78 */
@@ -198683,13 +198683,13 @@ var require_pdf_worker4 = __commonJS({
             module3.exports = !$assign || __w_pdfjs_require__(17)(function() {
               var A = {};
               var B = {};
-              var S = Symbol();
+              var S2 = Symbol();
               var K2 = "abcdefghijklmnopqrst";
-              A[S] = 7;
+              A[S2] = 7;
               K2.split("").forEach(function(k) {
                 B[k] = k;
               });
-              return $assign({}, A)[S] != 7 || Object.keys($assign({}, B)).join("") != K2;
+              return $assign({}, A)[S2] != 7 || Object.keys($assign({}, B)).join("") != K2;
             }) ? function assign(target, source) {
               var T = toObject(target);
               var aLen = arguments.length;
@@ -198697,13 +198697,13 @@ var require_pdf_worker4 = __commonJS({
               var getSymbols = gOPS.f;
               var isEnum = pIE.f;
               while (aLen > index2) {
-                var S = IObject(arguments[index2++]);
-                var keys = getSymbols ? getKeys(S).concat(getSymbols(S)) : getKeys(S);
+                var S2 = IObject(arguments[index2++]);
+                var keys = getSymbols ? getKeys(S2).concat(getSymbols(S2)) : getKeys(S2);
                 var length = keys.length;
                 var j = 0;
                 var key;
                 while (length > j) {
-                  if (isEnum.call(S, key = keys[j++])) T[key] = S[key];
+                  if (isEnum.call(S2, key = keys[j++])) T[key] = S2[key];
                 }
               }
               return T;
@@ -198906,9 +198906,9 @@ var require_pdf_worker4 = __commonJS({
             var isObject8 = __w_pdfjs_require__(14);
             var setPrototypeOf = __w_pdfjs_require__(104).set;
             module3.exports = function(that, target, C) {
-              var S = target.constructor;
+              var S2 = target.constructor;
               var P;
-              if (S !== C && typeof S == "function" && (P = S.prototype) !== C.prototype && isObject8(P) && setPrototypeOf) {
+              if (S2 !== C && typeof S2 == "function" && (P = S2.prototype) !== C.prototype && isObject8(P) && setPrototypeOf) {
                 setPrototypeOf(that, P);
               }
               return that;
@@ -199203,11 +199203,11 @@ var require_pdf_worker4 = __commonJS({
                 }
                 return true;
               };
-              function Call2(F, V, args) {
-                if (typeof F !== "function") {
+              function Call2(F2, V, args) {
+                if (typeof F2 !== "function") {
                   throw new TypeError("Argument is not a function");
                 }
-                return Function.prototype.apply.call(F, V, args);
+                return Function.prototype.apply.call(F2, V, args);
               }
               exports4.InvokeOrNoop = function(O, P, args) {
                 assert3(O !== void 0);
@@ -199229,7 +199229,7 @@ var require_pdf_worker4 = __commonJS({
                   return Promise.reject(returnValueE);
                 }
               };
-              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F, argsF) {
+              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F2, argsF) {
                 assert3(O !== void 0);
                 assert3(IsPropertyKey(P));
                 assert3(Array.isArray(args));
@@ -199241,7 +199241,7 @@ var require_pdf_worker4 = __commonJS({
                   return Promise.reject(methodE);
                 }
                 if (method === void 0) {
-                  return F.apply(null, argsF);
+                  return F2.apply(null, argsF);
                 }
                 try {
                   return Promise.resolve(Call2(method, O, args));
@@ -240315,12 +240315,12 @@ var require_pdf4 = __commonJS({
           (function(module3, exports3, __w_pdfjs_require__) {
             "use strict";
             var isObject8 = __w_pdfjs_require__(13);
-            module3.exports = function(it, S) {
+            module3.exports = function(it, S2) {
               if (!isObject8(it)) return it;
               var fn, val;
-              if (S && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
+              if (S2 && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
               if (typeof (fn = it.valueOf) == "function" && !isObject8(val = fn.call(it))) return val;
-              if (!S && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
+              if (!S2 && typeof (fn = it.toString) == "function" && !isObject8(val = fn.call(it))) return val;
               throw TypeError("Can't convert object to primitive value");
             };
           }),
@@ -241505,8 +241505,8 @@ var require_pdf4 = __commonJS({
             var SPECIES = __w_pdfjs_require__(28)("species");
             module3.exports = function(O, D) {
               var C = anObject(O).constructor;
-              var S;
-              return C === void 0 || (S = anObject(C)[SPECIES]) == void 0 ? D : aFunction(S);
+              var S2;
+              return C === void 0 || (S2 = anObject(C)[SPECIES]) == void 0 ? D : aFunction(S2);
             };
           }),
           /* 77 */
@@ -242065,13 +242065,13 @@ var require_pdf4 = __commonJS({
             module3.exports = !$assign || __w_pdfjs_require__(16)(function() {
               var A = {};
               var B = {};
-              var S = Symbol();
+              var S2 = Symbol();
               var K2 = "abcdefghijklmnopqrst";
-              A[S] = 7;
+              A[S2] = 7;
               K2.split("").forEach(function(k) {
                 B[k] = k;
               });
-              return $assign({}, A)[S] != 7 || Object.keys($assign({}, B)).join("") != K2;
+              return $assign({}, A)[S2] != 7 || Object.keys($assign({}, B)).join("") != K2;
             }) ? function assign(target, source) {
               var T = toObject(target);
               var aLen = arguments.length;
@@ -242079,13 +242079,13 @@ var require_pdf4 = __commonJS({
               var getSymbols = gOPS.f;
               var isEnum = pIE.f;
               while (aLen > index2) {
-                var S = IObject(arguments[index2++]);
-                var keys = getSymbols ? getKeys(S).concat(getSymbols(S)) : getKeys(S);
+                var S2 = IObject(arguments[index2++]);
+                var keys = getSymbols ? getKeys(S2).concat(getSymbols(S2)) : getKeys(S2);
                 var length = keys.length;
                 var j = 0;
                 var key;
                 while (length > j) {
-                  if (isEnum.call(S, key = keys[j++])) T[key] = S[key];
+                  if (isEnum.call(S2, key = keys[j++])) T[key] = S2[key];
                 }
               }
               return T;
@@ -242288,9 +242288,9 @@ var require_pdf4 = __commonJS({
             var isObject8 = __w_pdfjs_require__(13);
             var setPrototypeOf = __w_pdfjs_require__(103).set;
             module3.exports = function(that, target, C) {
-              var S = target.constructor;
+              var S2 = target.constructor;
               var P;
-              if (S !== C && typeof S == "function" && (P = S.prototype) !== C.prototype && isObject8(P) && setPrototypeOf) {
+              if (S2 !== C && typeof S2 == "function" && (P = S2.prototype) !== C.prototype && isObject8(P) && setPrototypeOf) {
                 setPrototypeOf(that, P);
               }
               return that;
@@ -242585,11 +242585,11 @@ var require_pdf4 = __commonJS({
                 }
                 return true;
               };
-              function Call2(F, V, args) {
-                if (typeof F !== "function") {
+              function Call2(F2, V, args) {
+                if (typeof F2 !== "function") {
                   throw new TypeError("Argument is not a function");
                 }
-                return Function.prototype.apply.call(F, V, args);
+                return Function.prototype.apply.call(F2, V, args);
               }
               exports4.InvokeOrNoop = function(O, P, args) {
                 assert3(O !== void 0);
@@ -242611,7 +242611,7 @@ var require_pdf4 = __commonJS({
                   return Promise.reject(returnValueE);
                 }
               };
-              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F, argsF) {
+              exports4.PromiseInvokeOrPerformFallback = function(O, P, args, F2, argsF) {
                 assert3(O !== void 0);
                 assert3(IsPropertyKey(P));
                 assert3(Array.isArray(args));
@@ -242623,7 +242623,7 @@ var require_pdf4 = __commonJS({
                   return Promise.reject(methodE);
                 }
                 if (method === void 0) {
-                  return F.apply(null, argsF);
+                  return F2.apply(null, argsF);
                 }
                 try {
                   return Promise.resolve(Call2(method, O, args));
@@ -260840,7 +260840,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net2 = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes3, createHash: createHash7 } = require("crypto");
+    var { randomBytes: randomBytes4, createHash: createHash7 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL5 } = require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -261370,7 +261370,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes3(16).toString("base64");
+      const key = randomBytes4(16).toString("base64");
       const request = isSecure ? https2.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -280737,7 +280737,7 @@ var require_nacl_fast = __commonJS({
         o[14] = t14;
         o[15] = t15;
       }
-      function S(o, a) {
+      function S2(o, a) {
         M(o, a, a);
       }
       function inv25519(o, i) {
@@ -280745,7 +280745,7 @@ var require_nacl_fast = __commonJS({
         var a;
         for (a = 0; a < 16; a++) c[a] = i[a];
         for (a = 253; a >= 0; a--) {
-          S(c, c);
+          S2(c, c);
           if (a !== 2 && a !== 4) M(c, c, i);
         }
         for (a = 0; a < 16; a++) o[a] = c[a];
@@ -280755,7 +280755,7 @@ var require_nacl_fast = __commonJS({
         var a;
         for (a = 0; a < 16; a++) c[a] = i[a];
         for (a = 250; a >= 0; a--) {
-          S(c, c);
+          S2(c, c);
           if (a !== 1) M(c, c, i);
         }
         for (a = 0; a < 16; a++) o[a] = c[a];
@@ -280781,20 +280781,20 @@ var require_nacl_fast = __commonJS({
           Z(a, a, c);
           A(c, b, d);
           Z(b, b, d);
-          S(d, e);
-          S(f, a);
+          S2(d, e);
+          S2(f, a);
           M(a, c, a);
           M(c, b, e);
           A(e, a, c);
           Z(a, a, c);
-          S(b, a);
+          S2(b, a);
           Z(c, d, f);
           M(a, c, _121665);
           A(a, a, d);
           M(c, c, a);
           M(a, d, f);
           M(d, b, x);
-          S(b, e);
+          S2(b, e);
           sel25519(a, b, r);
           sel25519(c, d, r);
         }
@@ -281457,12 +281457,12 @@ var require_nacl_fast = __commonJS({
         var t = gf(), chk = gf(), num3 = gf(), den = gf(), den2 = gf(), den4 = gf(), den6 = gf();
         set25519(r[2], gf1);
         unpack25519(r[1], p);
-        S(num3, r[1]);
+        S2(num3, r[1]);
         M(den, num3, D);
         Z(num3, num3, r[2]);
         A(den, r[2], den);
-        S(den2, den);
-        S(den4, den2);
+        S2(den2, den);
+        S2(den4, den2);
         M(den6, den4, den2);
         M(t, den6, num3);
         M(t, t, den);
@@ -281471,10 +281471,10 @@ var require_nacl_fast = __commonJS({
         M(t, t, den);
         M(t, t, den);
         M(r[0], t, den);
-        S(chk, r[0]);
+        S2(chk, r[0]);
         M(chk, chk, den);
         if (neq25519(chk, num3)) M(r[0], r[0], I);
-        S(chk, r[0]);
+        S2(chk, r[0]);
         M(chk, chk, den);
         if (neq25519(chk, num3)) return -1;
         if (par25519(r[0]) === p[31] >> 7) Z(r[0], gf0, r[0]);
@@ -281551,7 +281551,7 @@ var require_nacl_fast = __commonJS({
         unpack25519,
         M,
         A,
-        S,
+        S: S2,
         Z,
         pow2523,
         add,
@@ -295120,13 +295120,437 @@ echo "__GYSHELL_READY__"
 };
 
 // ../../packages/backend/src/services/WinRMBackend.ts
-var import_node_crypto2 = require("node:crypto");
+var import_node_crypto4 = require("node:crypto");
 
 // ../../packages/backend/src/services/WinRMTransport.ts
+var import_node_buffer = require("node:buffer");
+var import_node_crypto2 = require("node:crypto");
+
+// ../../packages/backend/src/services/WinHttpAuth.ts
 var import_node_http = __toESM(require("node:http"), 1);
 var import_node_https = __toESM(require("node:https"), 1);
-var import_node_buffer = require("node:buffer");
+
+// ../../packages/backend/src/services/ntlm.ts
 var import_node_crypto = require("node:crypto");
+
+// ../../packages/backend/src/services/md4.ts
+var S = [
+  3,
+  7,
+  11,
+  19,
+  3,
+  7,
+  11,
+  19,
+  3,
+  7,
+  11,
+  19,
+  3,
+  7,
+  11,
+  19,
+  3,
+  5,
+  9,
+  13,
+  3,
+  5,
+  9,
+  13,
+  3,
+  5,
+  9,
+  13,
+  3,
+  5,
+  9,
+  13,
+  3,
+  9,
+  11,
+  15,
+  3,
+  9,
+  11,
+  15,
+  3,
+  9,
+  11,
+  15,
+  3,
+  9,
+  11,
+  15
+];
+function rotl(x, n2) {
+  return (x << n2 | x >>> 32 - n2) >>> 0;
+}
+function F(x, y, z) {
+  return (x & y | ~x & z) >>> 0;
+}
+function G(x, y, z) {
+  return (x & y | x & z | y & z) >>> 0;
+}
+function H(x, y, z) {
+  return (x ^ y ^ z) >>> 0;
+}
+function md4(data) {
+  const origLen = data.length;
+  const bitLen = origLen * 8;
+  const padLen = (56 - (origLen + 1) % 64 + 64) % 64;
+  const padded = Buffer.alloc(origLen + 1 + padLen + 8);
+  data.copy(padded);
+  padded[origLen] = 128;
+  padded.writeUInt32LE(bitLen >>> 0, padded.length - 8);
+  padded.writeUInt32LE(Math.floor(bitLen / 4294967296), padded.length - 4);
+  let a = 1732584193;
+  let b = 4023233417;
+  let c = 2562383102;
+  let d = 271733878;
+  const X = new Uint32Array(16);
+  for (let i = 0; i < padded.length; i += 64) {
+    for (let j = 0; j < 16; j++) X[j] = padded.readUInt32LE(i + j * 4);
+    const aa = a, bb = b, cc = c, dd = d;
+    const r1 = [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15];
+    for (let k = 0; k < 16; k++) {
+      const f = F(b, c, d);
+      const t = a + f + X[r1[k]] >>> 0;
+      a = d;
+      d = c;
+      c = b;
+      b = rotl(t, S[k]);
+    }
+    const r2 = [0, 4, 8, 12, 1, 5, 9, 13, 2, 6, 10, 14, 3, 7, 11, 15];
+    for (let k = 0; k < 16; k++) {
+      const g = G(b, c, d);
+      const t = a + g + X[r2[k]] + 1518500249 >>> 0;
+      a = d;
+      d = c;
+      c = b;
+      b = rotl(t, S[16 + k]);
+    }
+    const r3 = [0, 8, 4, 12, 2, 10, 6, 14, 1, 9, 5, 13, 3, 11, 7, 15];
+    for (let k = 0; k < 16; k++) {
+      const h = H(b, c, d);
+      const t = a + h + X[r3[k]] + 1859775393 >>> 0;
+      a = d;
+      d = c;
+      c = b;
+      b = rotl(t, S[32 + k]);
+    }
+    a = a + aa >>> 0;
+    b = b + bb >>> 0;
+    c = c + cc >>> 0;
+    d = d + dd >>> 0;
+  }
+  const out = Buffer.alloc(16);
+  out.writeUInt32LE(a, 0);
+  out.writeUInt32LE(b, 4);
+  out.writeUInt32LE(c, 8);
+  out.writeUInt32LE(d, 12);
+  return out;
+}
+function utf16le(s) {
+  const buf = Buffer.alloc(s.length * 2);
+  for (let i = 0; i < s.length; i++) buf.writeUInt16LE(s.charCodeAt(i), i * 2);
+  return buf;
+}
+
+// ../../packages/backend/src/services/ntlm.ts
+var NTLM_SIGNATURE = Buffer.from("NTLMSSP\0", "ascii");
+var NTLM_FLAGS = 1 | // UNICODE
+4 | // REQUEST_TARGET
+512 | // NTLM
+32768 | // ALWAYS_SIGN
+524288 | // TARGET_INFO
+131072 | // NTLM2 / EXTENDED_SESSIONSECURITY
+536870912 | // 128
+2147483648;
+function secBuf(len, offset) {
+  const b = Buffer.alloc(8);
+  b.writeUInt16LE(len, 0);
+  b.writeUInt16LE(len, 2);
+  b.writeUInt32LE(offset, 4);
+  return b;
+}
+function readSecBuf(buf, at) {
+  const len = buf.readUInt16LE(at);
+  const offset = buf.readUInt32LE(at + 4);
+  const data = offset + len <= buf.length ? buf.subarray(offset, offset + len) : Buffer.alloc(0);
+  return { len, offset, data };
+}
+function parseUsername(username, domain2) {
+  if (username.includes("\\")) {
+    const [d, u] = username.split("\\");
+    return { user: u || username, domain: d || domain2 || "" };
+  }
+  if (username.includes("@")) {
+    const [u, d] = username.split("@");
+    return { user: u || username, domain: d || domain2 || "" };
+  }
+  return { user: username, domain: domain2 || "" };
+}
+function createType1(domain2 = "", workstation = "") {
+  const d = Buffer.from(domain2.toUpperCase(), "ascii");
+  const w = Buffer.from(workstation.toUpperCase(), "ascii");
+  const headerLen = 32;
+  const flags = NTLM_FLAGS | (d.length ? 4096 : 0) | (w.length ? 8192 : 0);
+  const out = Buffer.alloc(headerLen + d.length + w.length);
+  NTLM_SIGNATURE.copy(out);
+  out.writeUInt32LE(1, 8);
+  out.writeUInt32LE(flags >>> 0, 12);
+  secBuf(d.length, headerLen).copy(out, 16);
+  secBuf(w.length, headerLen + d.length).copy(out, 24);
+  d.copy(out, headerLen);
+  w.copy(out, headerLen + d.length);
+  return out;
+}
+function parseType2(buf) {
+  if (buf.length < 32 || buf.subarray(0, 8).toString("ascii") !== "NTLMSSP\0") {
+    throw new Error("NTLM Type 2: bad signature");
+  }
+  if (buf.readUInt32LE(8) !== 2) throw new Error("NTLM Type 2: unexpected message type");
+  const flags = buf.readUInt32LE(20);
+  const challenge = Buffer.from(buf.subarray(24, 32));
+  const target = readSecBuf(buf, 12);
+  const targetName = target.data.toString("utf16le");
+  let targetInfo = Buffer.alloc(0);
+  if (buf.length >= 48) {
+    targetInfo = Buffer.from(readSecBuf(buf, 40).data);
+  }
+  return { flags, challenge, targetName, targetInfo };
+}
+function windowsFiletimeNow() {
+  const EPOCH_DIFF = 11644473600000n;
+  const now = BigInt(Date.now());
+  const ft = (now + EPOCH_DIFF) * 10000n;
+  const b = Buffer.alloc(8);
+  b.writeUInt32LE(Number(ft & 0xffffffffn), 0);
+  b.writeUInt32LE(Number(ft >> 32n & 0xffffffffn), 4);
+  return b;
+}
+function ntHash(password) {
+  return md4(utf16le(password));
+}
+function ntlmv2Hash(password, username, domain2) {
+  return (0, import_node_crypto.createHmac)("md5", ntHash(password)).update(utf16le(username.toUpperCase() + domain2)).digest();
+}
+function createType3(type2, creds, clientChallenge) {
+  const user = creds.username;
+  const domain2 = creds.domain;
+  const workstation = creds.workstation || "";
+  const cc = clientChallenge && clientChallenge.length === 8 ? clientChallenge : (0, import_node_crypto.randomBytes)(8);
+  const v2 = ntlmv2Hash(creds.password, user, domain2);
+  const blob = Buffer.concat([
+    Buffer.from([1, 1, 0, 0, 0, 0, 0, 0]),
+    windowsFiletimeNow(),
+    cc,
+    Buffer.from([0, 0, 0, 0]),
+    type2.targetInfo,
+    Buffer.from([0, 0, 0, 0])
+  ]);
+  const ntProof = (0, import_node_crypto.createHmac)("md5", v2).update(Buffer.concat([type2.challenge, blob])).digest();
+  const ntResponse = Buffer.concat([ntProof, blob]);
+  const lmProof = (0, import_node_crypto.createHmac)("md5", v2).update(Buffer.concat([type2.challenge, cc])).digest();
+  const lmResponse = Buffer.concat([lmProof, cc]);
+  const domainB = utf16le(domain2.toUpperCase());
+  const userB = utf16le(user);
+  const wsB = utf16le(workstation.toUpperCase());
+  const headerLen = 64;
+  const lmOff = headerLen;
+  const ntOff = lmOff + lmResponse.length;
+  const dOff = ntOff + ntResponse.length;
+  const uOff = dOff + domainB.length;
+  const wOff = uOff + userB.length;
+  const total = wOff + wsB.length;
+  const out = Buffer.alloc(total);
+  NTLM_SIGNATURE.copy(out);
+  out.writeUInt32LE(3, 8);
+  secBuf(lmResponse.length, lmOff).copy(out, 12);
+  secBuf(ntResponse.length, ntOff).copy(out, 20);
+  secBuf(domainB.length, dOff).copy(out, 28);
+  secBuf(userB.length, uOff).copy(out, 36);
+  secBuf(wsB.length, wOff).copy(out, 44);
+  secBuf(0, total).copy(out, 52);
+  out.writeUInt32LE(type2.flags >>> 0, 60);
+  lmResponse.copy(out, lmOff);
+  ntResponse.copy(out, ntOff);
+  domainB.copy(out, dOff);
+  userB.copy(out, uOff);
+  wsB.copy(out, wOff);
+  return out;
+}
+function toBase64(buf) {
+  return buf.toString("base64");
+}
+function fromBase64(s) {
+  return Buffer.from(s, "base64");
+}
+
+// ../../packages/backend/src/services/WinHttpAuth.ts
+var import_meta3 = {};
+function wwwAuth(headers) {
+  const raw = headers["www-authenticate"];
+  if (!raw) return "";
+  return Array.isArray(raw) ? raw.join(", ") : raw;
+}
+function extractSchemeToken(header, scheme) {
+  const re = new RegExp(`${scheme}\\s+([A-Za-z0-9+/=]+)`, "i");
+  const m2 = header.match(re);
+  return m2 ? m2[1] : null;
+}
+var WinHttpAuth = class {
+  opts;
+  agent;
+  parsed;
+  constructor(opts) {
+    this.opts = {
+      ...opts,
+      path: opts.path ?? "/wsman",
+      timeoutMs: opts.timeoutMs ?? 3e4,
+      rejectUnauthorized: opts.rejectUnauthorized,
+      domain: opts.domain,
+      auth: opts.auth ?? "basic"
+    };
+    this.parsed = parseUsername(opts.username, opts.domain);
+    this.agent = opts.transport === "https" ? new import_node_https.default.Agent({ keepAlive: true, maxSockets: 1, rejectUnauthorized: opts.rejectUnauthorized ?? true }) : new import_node_http.default.Agent({ keepAlive: true, maxSockets: 1 });
+  }
+  endpoint() {
+    return `${this.opts.transport}://${this.opts.host}:${this.opts.port}${this.opts.path}`;
+  }
+  authKind() {
+    return this.opts.auth ?? "basic";
+  }
+  async post(body, extraHeaders) {
+    const kind = this.opts.auth ?? "basic";
+    if (kind === "basic") return this.postBasic(body, extraHeaders);
+    if (kind === "kerberos") {
+      const gss = await this.tryKerberos(body, extraHeaders);
+      if (gss) return gss;
+    }
+    return this.postNtlm(body, extraHeaders, "Negotiate");
+  }
+  postOnce(headers, body) {
+    const url2 = new URL(this.endpoint());
+    const isHttps = this.opts.transport === "https";
+    const lib = isHttps ? import_node_https.default : import_node_http.default;
+    const options = {
+      method: "POST",
+      hostname: url2.hostname,
+      port: url2.port,
+      path: url2.pathname,
+      headers: {
+        "Content-Type": "application/soap+xml;charset=UTF-8",
+        "Content-Length": Buffer.byteLength(body, "utf8"),
+        Connection: "keep-alive",
+        ...headers
+      },
+      // @ts-expect-error rejectUnauthorized is https-only
+      rejectUnauthorized: isHttps ? this.opts.rejectUnauthorized ?? true : void 0,
+      timeout: this.opts.timeoutMs,
+      agent: this.agent
+    };
+    return new Promise((resolve2, reject) => {
+      const req = lib.request(options, (res) => {
+        const chunks = [];
+        res.on("data", (c) => chunks.push(c));
+        res.on("end", () => {
+          resolve2({
+            status: res.statusCode ?? 0,
+            body: Buffer.concat(chunks).toString("utf8"),
+            headers: res.headers
+          });
+        });
+        res.on("error", reject);
+      });
+      req.on(
+        "timeout",
+        () => req.destroy(new Error(`WinRM request timed out after ${this.opts.timeoutMs}ms`))
+      );
+      req.on("error", reject);
+      req.write(body);
+      req.end();
+    });
+  }
+  async postBasic(body, extraHeaders) {
+    const user = this.opts.domain ? `${this.opts.domain}\\${this.parsed.user}` : this.opts.username;
+    const header = "Basic " + Buffer.from(`${user}:${this.opts.password}`, "utf8").toString("base64");
+    return this.postOnce({ Authorization: header, ...extraHeaders }, body);
+  }
+  /**
+   * Three-legged NTLM/Negotiate handshake on one keep-alive socket:
+   *   POST (no auth) → 401 + Type 2  OR  POST Type 1 → 401 + Type 2
+   *   POST Type 3 + body → 200
+   * We send Type 1 first (empty body) so the server issues Type 2 without
+   * us having to guess whether it wants a probe or a Type 1.
+   */
+  async postNtlm(body, extraHeaders, scheme) {
+    const type1 = createType1(this.parsed.domain);
+    const first = await this.postOnce(
+      { Authorization: `${scheme} ${toBase64(type1)}`, ...extraHeaders },
+      ""
+    );
+    if (first.status !== 401) {
+      if (first.status >= 200 && first.status < 300 && first.body) return first;
+      throw new Error(
+        `NTLM/Negotiate Type 1 expected HTTP 401, got ${first.status}: ${first.body.slice(0, 200)}`
+      );
+    }
+    const header = wwwAuth(first.headers);
+    const token = extractSchemeToken(header, scheme) || extractSchemeToken(header, "Negotiate") || extractSchemeToken(header, "NTLM");
+    if (!token) {
+      throw new Error(
+        `NTLM/Negotiate Type 2 missing from WWW-Authenticate: ${header || "(none)"}`
+      );
+    }
+    const type2 = parseType2(fromBase64(token));
+    const type3 = createType3(type2, {
+      username: this.parsed.user,
+      password: this.opts.password,
+      domain: this.parsed.domain || type2.targetName
+    });
+    return this.postOnce(
+      { Authorization: `${scheme} ${toBase64(type3)}`, ...extraHeaders },
+      body
+    );
+  }
+  /** Optional GSSAPI Kerberos via the `kerberos` npm package. Returns null if unavailable. */
+  async tryKerberos(body, extraHeaders) {
+    let kerberos;
+    try {
+      const { createRequire: createRequire6 } = await import("node:module");
+      const require3 = createRequire6(import_meta3.url);
+      kerberos = require3("kerberos");
+    } catch {
+      return null;
+    }
+    const spn = `HTTP/${this.opts.host}`;
+    try {
+      const client2 = await new Promise((resolve2, reject) => {
+        kerberos.initializeClient(spn, { mechOID: kerberos.GSS_MECH_OID_KRB5 }, (err, c) => {
+          if (err) reject(err);
+          else resolve2(c);
+        });
+      });
+      const token = await new Promise((resolve2, reject) => {
+        client2.step("", (err, t) => {
+          if (err) reject(err);
+          else resolve2(t);
+        });
+      });
+      return this.postOnce(
+        { Authorization: `Negotiate ${token}`, ...extraHeaders },
+        body
+      );
+    } catch {
+      return null;
+    }
+  }
+};
+
+// ../../packages/backend/src/services/WinRMTransport.ts
 var NS = {
   s: "http://www.w3.org/2003/05/soap-envelope",
   a: "http://schemas.xmlsoap.org/ws/2004/08/addressing",
@@ -295162,23 +295586,27 @@ function extractShellId(xml) {
   return "";
 }
 var WinRMTransport = class {
-  opts;
-  authHeader;
+  http;
   constructor(opts) {
-    this.opts = {
-      path: opts.path ?? "/wsman",
-      timeoutMs: opts.timeoutMs ?? 3e4,
+    this.http = new WinHttpAuth({
+      host: opts.host,
+      port: opts.port,
+      username: opts.username,
+      password: opts.password,
+      domain: opts.domain,
+      transport: opts.transport,
+      path: opts.path,
       rejectUnauthorized: opts.rejectUnauthorized,
-      ...opts
-    };
-    this.authHeader = "Basic " + import_node_buffer.Buffer.from(`${opts.username}:${opts.password}`, "utf8").toString("base64");
+      timeoutMs: opts.timeoutMs,
+      auth: opts.auth ?? "basic"
+    });
   }
   endpoint() {
-    return `${this.opts.transport}://${this.opts.host}:${this.opts.port}${this.opts.path}`;
+    return this.http.endpoint();
   }
   /** Build a full SOAP envelope with the required WS-Addressing + WS-Man headers. */
   envelope(action, body, extraHeaders) {
-    const mid = `uuid:${(0, import_node_crypto.randomUUID)()}`;
+    const mid = `uuid:${(0, import_node_crypto2.randomUUID)()}`;
     const to = this.endpoint();
     return `<?xml version="1.0" encoding="UTF-8"?>
 <s:Envelope xmlns:s="${NS.s}" xmlns:a="${NS.a}" xmlns:w="${NS.w}" xmlns:rsp="${NS.rsp}" xmlns:n="${NS.n}">
@@ -295196,37 +295624,8 @@ var WinRMTransport = class {
   }
   async post(action, body, extraHeaders) {
     const envelope = this.envelope(action, body, extraHeaders);
-    const url2 = new URL(this.endpoint());
-    const isHttps = this.opts.transport === "https";
-    const lib = isHttps ? import_node_https.default : import_node_http.default;
-    const options = {
-      method: "POST",
-      hostname: url2.hostname,
-      port: url2.port,
-      path: url2.pathname,
-      headers: {
-        "Content-Type": "application/soap+xml;charset=UTF-8",
-        Authorization: this.authHeader,
-        "Content-Length": import_node_buffer.Buffer.byteLength(envelope, "utf8")
-      },
-      // @ts-expect-error rejectUnauthorized is https-only
-      rejectUnauthorized: isHttps ? this.opts.rejectUnauthorized ?? true : void 0,
-      timeout: this.opts.timeoutMs
-    };
-    return new Promise((resolve2, reject) => {
-      const req = lib.request(options, (res) => {
-        const chunks = [];
-        res.on("data", (c) => chunks.push(c));
-        res.on("end", () => {
-          resolve2({ status: res.statusCode ?? 0, body: import_node_buffer.Buffer.concat(chunks).toString("utf8") });
-        });
-        res.on("error", reject);
-      });
-      req.on("timeout", () => req.destroy(new Error(`WinRM request timed out after ${this.opts.timeoutMs}ms`)));
-      req.on("error", reject);
-      req.write(envelope);
-      req.end();
-    });
+    const res = await this.http.post(envelope);
+    return { status: res.status, body: res.body };
   }
   /** Create a cmd shell resource; returns the ShellId. */
   async createShell() {
@@ -295384,6 +295783,330 @@ var WinRMTransport = class {
   }
 };
 
+// ../../packages/backend/src/services/PSRPTransport.ts
+var import_node_buffer2 = require("node:buffer");
+var import_node_crypto3 = require("node:crypto");
+var NS2 = {
+  s: "http://www.w3.org/2003/05/soap-envelope",
+  a: "http://schemas.xmlsoap.org/ws/2004/08/addressing",
+  w: "http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd",
+  rsp: "http://schemas.microsoft.com/wbem/wsman/1/windows/shell",
+  n: "http://schemas.xmlsoap.org/ws/2004/09/enumeration"
+};
+var PSRP_SHELL_URI = "http://schemas.microsoft.com/powershell/Microsoft.PowerShell";
+var MSG = {
+  SESSION_CAPABILITY: 65538,
+  INIT_RUNSPACEPOOL: 65540,
+  CREATE_PIPELINE: 135174,
+  RUNSPACEPOOL_STATE: 135173,
+  APPLICATION_PRIVATE_DATA: 135178,
+  PIPELINE_OUTPUT: 266244,
+  ERROR_RECORD: 266245,
+  PIPELINE_STATE: 266246
+};
+function guidLe(uuid3) {
+  const hex = uuid3.replace(/-/g, "");
+  const b = import_node_buffer2.Buffer.from(hex, "hex");
+  const out = import_node_buffer2.Buffer.alloc(16);
+  out[0] = b[3];
+  out[1] = b[2];
+  out[2] = b[1];
+  out[3] = b[0];
+  out[4] = b[5];
+  out[5] = b[4];
+  out[6] = b[7];
+  out[7] = b[6];
+  b.subarray(8).copy(out, 8);
+  return out;
+}
+function psrpMessage(messageType, rpid, pid, payload) {
+  const dest = import_node_buffer2.Buffer.alloc(4);
+  dest.writeUInt32LE(2, 0);
+  const type2 = import_node_buffer2.Buffer.alloc(4);
+  type2.writeUInt32LE(messageType, 0);
+  const body = import_node_buffer2.Buffer.from(payload, "utf8");
+  return import_node_buffer2.Buffer.concat([dest, type2, guidLe(rpid), guidLe(pid), body]);
+}
+function fragmentMessages(messages, objectIdStart, maxPayload = 32768) {
+  const out = [];
+  let objectId = objectIdStart;
+  for (const msg of messages) {
+    const maxChunk = maxPayload - 21;
+    let fragmentId = 0;
+    let offset = 0;
+    let start = true;
+    for (; ; ) {
+      const chunk2 = msg.subarray(offset, offset + maxChunk);
+      offset += chunk2.length;
+      const end = offset >= msg.length;
+      const head = import_node_buffer2.Buffer.alloc(21);
+      head.writeBigUInt64BE(BigInt(objectId), 0);
+      head.writeBigUInt64BE(BigInt(fragmentId), 8);
+      head.writeUInt8((start ? 1 : 0) | (end ? 2 : 0), 16);
+      head.writeUInt32BE(chunk2.length, 17);
+      out.push(head, chunk2);
+      fragmentId += 1;
+      start = false;
+      if (end) break;
+    }
+    objectId += 1;
+  }
+  return { blob: import_node_buffer2.Buffer.concat(out), nextObjectId: objectId };
+}
+function unfragmentMessages(data) {
+  const messages = [];
+  let i = 0;
+  let current = [];
+  let currentId = -1n;
+  while (i + 21 <= data.length) {
+    const objectId = data.readBigUInt64BE(i);
+    const startEnd = data.readUInt8(i + 16);
+    const len = data.readUInt32BE(i + 17);
+    const chunk2 = data.subarray(i + 21, i + 21 + len);
+    i += 21 + len;
+    if (currentId !== objectId) {
+      if (current.length) messages.push(import_node_buffer2.Buffer.concat(current));
+      current = [];
+      currentId = objectId;
+    }
+    current.push(chunk2);
+    if (startEnd & 2) {
+      messages.push(import_node_buffer2.Buffer.concat(current));
+      current = [];
+      currentId = -1n;
+    }
+  }
+  if (current.length) messages.push(import_node_buffer2.Buffer.concat(current));
+  return messages;
+}
+function escapeXml2(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+}
+function sessionCapabilityXml() {
+  return `<Obj RefId="0"><MS><Version N="protocolversion">2.3</Version><Version N="PSVersion">2.0</Version><Version N="SerializationVersion">1.1.0.1</Version></MS></Obj>`;
+}
+function initRunspacePoolXml() {
+  return `<Obj RefId="0"><MS><I32 N="MinRunspaces">1</I32><I32 N="MaxRunspaces">1</I32><Obj RefId="1" N="PSThreadOptions"><TN RefId="0"><T>System.Management.Automation.Runspaces.PSThreadOptions</T><T>System.Enum</T><T>System.ValueType</T><T>System.Object</T></TN><ToString>Default</ToString><I32>0</I32></Obj><Obj RefId="2" N="ApartmentState"><TN RefId="1"><T>System.Management.Automation.Runspaces.ApartmentState</T><T>System.Enum</T><T>System.ValueType</T><T>System.Object</T></TN><ToString>UNKNOWN</ToString><I32>2</I32></Obj><Obj RefId="3" N="HostInfo"><MS><B N="_isHostNull">true</B><B N="_isHostUINull">true</B><B N="_isHostRawUINull">true</B><B N="_useRunspaceHost">true</B></MS></Obj><Nil N="ApplicationArguments" /></MS></Obj>`;
+}
+function createPipelineXml(script) {
+  return `<Obj RefId="0"><MS><B N="NoInput">true</B><Obj RefId="1" N="ApartmentState"><TN RefId="0"><T>System.Management.Automation.Runspaces.ApartmentState</T><T>System.Enum</T><T>System.ValueType</T><T>System.Object</T></TN><ToString>UNKNOWN</ToString><I32>2</I32></Obj><Obj RefId="2" N="RemoteStreamOptions"><TN RefId="1"><T>System.Management.Automation.Runspaces.RemoteStreamOptions</T><T>System.Enum</T><T>System.ValueType</T><T>System.Object</T></TN><ToString>AddInvocationInfoToErrorRecord</ToString><I32>1</I32></Obj><B N="AddToHistory">false</B><Obj RefId="3" N="HostInfo"><MS><B N="_isHostNull">true</B><B N="_isHostUINull">true</B><B N="_isHostRawUINull">true</B><B N="_useRunspaceHost">true</B></MS></Obj><Obj RefId="4" N="PowerShell"><MS><B N="IsNested">false</B><Nil N="ExtraCmds" /><Obj RefId="5" N="Cmds"><TN RefId="2"><T>System.Collections.Generic.List\`1[[System.Management.Automation.PSObject, System.Management.Automation, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]</T><T>System.Object</T></TN><LST><Obj RefId="6"><MS><S N="Cmd">${escapeXml2(script)}</S><B N="IsScript">true</B><Nil N="UseLocalScope" /><Obj RefId="7" N="MergeMyResult"><TN RefId="3"><T>System.Management.Automation.Runspaces.PipelineResultTypes</T><T>System.Enum</T><T>System.ValueType</T><T>System.Object</T></TN><ToString>None</ToString><I32>0</I32></Obj><Obj RefId="8" N="MergeToResult"><TNRef RefId="3" /><ToString>None</ToString><I32>0</I32></Obj><Obj RefId="9" N="MergePreviousResults"><TNRef RefId="3" /><ToString>None</ToString><I32>0</I32></Obj><Obj RefId="10" N="Args"><TNRef RefId="2" /><LST /></Obj><Obj RefId="11" N="MergeError"><TNRef RefId="3" /><ToString>None</ToString><I32>0</I32></Obj><Obj RefId="12" N="MergeWarning"><TNRef RefId="3" /><ToString>None</ToString><I32>0</I32></Obj><Obj RefId="13" N="MergeVerbose"><TNRef RefId="3" /><ToString>None</ToString><I32>0</I32></Obj><Obj RefId="14" N="MergeDebug"><TNRef RefId="3" /><ToString>None</ToString><I32>0</I32></Obj><Obj RefId="15" N="MergeInformation"><TNRef RefId="3" /><ToString>None</ToString><I32>0</I32></Obj></MS></Obj></LST></Obj><S N="History" /><B N="RedirectShellErrorOutputPipe">false</B></MS></Obj><B N="IsNested">false</B></MS></Obj>`;
+}
+function firstText2(xml, localName) {
+  const re = new RegExp(`<\\w*:?${localName}\\b[^>]*>([\\s\\S]*?)<\\/\\w*:?${localName}>`, "i");
+  const m2 = xml.match(re);
+  return m2 ? m2[1] : "";
+}
+function extractShellId2(xml) {
+  const re = /<\w*:?Selector\b[^>]*\bName="ShellId"[^>]*>([\s\S]*?)<\/\w*:?Selector>/i;
+  const m2 = xml.match(re);
+  if (m2) return m2[1].trim();
+  return "";
+}
+var PSRPTransport = class {
+  /** pypsrp WSMan.session_id — one uuid for the life of the transport. */
+  sessionId = `uuid:${(0, import_node_crypto3.randomUUID)().toUpperCase()}`;
+  http;
+  constructor(opts) {
+    this.http = new WinHttpAuth({
+      host: opts.host,
+      port: opts.port,
+      username: opts.username,
+      password: opts.password,
+      domain: opts.domain,
+      transport: opts.transport,
+      path: opts.path,
+      rejectUnauthorized: opts.rejectUnauthorized,
+      timeoutMs: opts.timeoutMs,
+      auth: opts.auth ?? "basic"
+    });
+  }
+  endpoint() {
+    return this.http.endpoint();
+  }
+  envelope(action, body, extraHeaders) {
+    const mid = `uuid:${(0, import_node_crypto3.randomUUID)()}`;
+    const to = this.endpoint();
+    const wsmv = "http://schemas.microsoft.com/wbem/wsman/1/wsman.xsd";
+    return `<s:Envelope xmlns:s="${NS2.s}" xmlns:wsa="${NS2.a}" xmlns:wsman="${NS2.w}" xmlns:wsmv="${wsmv}" xmlns:rsp="${NS2.rsp}" xml:lang="en-US"><s:Header><wsa:Action s:mustUnderstand="true">${action}</wsa:Action><wsmv:DataLocale s:mustUnderstand="false" xml:lang="en-US" /><wsman:Locale s:mustUnderstand="false" xml:lang="en-US" /><wsman:MaxEnvelopeSize s:mustUnderstand="true">512000</wsman:MaxEnvelopeSize><wsa:MessageID>${mid}</wsa:MessageID><wsman:OperationTimeout>PT60.000S</wsman:OperationTimeout><wsa:ReplyTo><wsa:Address s:mustUnderstand="true">${NS2.a}/role/anonymous</wsa:Address></wsa:ReplyTo><wsman:ResourceURI s:mustUnderstand="true">${PSRP_SHELL_URI}</wsman:ResourceURI><wsmv:SessionId s:mustUnderstand="false">${this.sessionId}</wsmv:SessionId><wsa:To>${to}</wsa:To>${extraHeaders}</s:Header><s:Body>${body}</s:Body></s:Envelope>`;
+  }
+  async post(action, body, extraHeaders) {
+    const envelope = this.envelope(action, body, extraHeaders);
+    const res = await this.http.post(envelope);
+    return { status: res.status, body: res.body };
+  }
+  /**
+   * Run a PowerShell script end-to-end over PSRP:
+   *   Create (creationXml = SESSION_CAPABILITY + INIT_RUNSPACEPOOL) →
+   *   Command (CommandLine CommandId=PIPELINE_ID, empty Command, fragment in
+   *   Arguments carrying CREATE_PIPELINE dest=2) →
+   *   Receive loop (PIPELINE_OUTPUT / ERROR_RECORD / PIPELINE_STATE) → Delete.
+   * The script travels inside the PSRP message body — no command-line length limit.
+   */
+  async runScript(script, opts) {
+    const deadline = Date.now() + (opts?.timeoutMs ?? 12e4);
+    const rpid = (0, import_node_crypto3.randomUUID)().toUpperCase();
+    const pipelineId = (0, import_node_crypto3.randomUUID)().toUpperCase();
+    const creation = fragmentMessages([
+      psrpMessage(MSG.SESSION_CAPABILITY, rpid, "00000000-0000-0000-0000-000000000000", sessionCapabilityXml()),
+      psrpMessage(MSG.INIT_RUNSPACEPOOL, rpid, "00000000-0000-0000-0000-000000000000", initRunspacePoolXml())
+    ], 1);
+    const creationFragment = creation.blob;
+    const createBody = `<rsp:Shell ShellId="${rpid}"><rsp:InputStreams>stdin pr</rsp:InputStreams><rsp:OutputStreams>stdout</rsp:OutputStreams><creationXml xmlns="http://schemas.microsoft.com/powershell">` + creationFragment.toString("base64") + `</creationXml></rsp:Shell>`;
+    const createHeaders = `<wsman:OptionSet s:mustUnderstand="true"><wsman:Option MustComply="true" Name="protocolversion">2.3</wsman:Option></wsman:OptionSet>`;
+    const created = await this.post(
+      "http://schemas.xmlsoap.org/ws/2004/09/transfer/Create",
+      createBody,
+      createHeaders
+    );
+    this.assertOk(created, "Create");
+    const shellId = extractShellId2(created.body);
+    if (!shellId) throw new Error("PSRP Create succeeded but no ShellId returned.");
+    try {
+      await this.waitForRunspaceOpened(shellId, deadline, opts?.signal);
+      const createPipelineMsg = psrpMessage(MSG.CREATE_PIPELINE, rpid, pipelineId, createPipelineXml(script));
+      const commandBody = `<rsp:CommandLine CommandId="${pipelineId}"><rsp:Command></rsp:Command><rsp:Arguments>${fragmentMessages([createPipelineMsg], creation.nextObjectId).blob.toString("base64")}</rsp:Arguments></rsp:CommandLine>`;
+      const commandHeaders = `<wsman:OptionSet s:mustUnderstand="true"><wsman:Option Name="WINRS_SKIP_CMD_SHELL">False</wsman:Option></wsman:OptionSet>` + this.shellHeaders(shellId);
+      const commanded = await this.post(
+        "http://schemas.microsoft.com/wbem/wsman/1/windows/shell/Command",
+        commandBody,
+        commandHeaders
+      );
+      this.assertOk(commanded, "Command");
+      const commandId = firstText2(commanded.body, "CommandId");
+      if (!commandId) throw new Error("PSRP Command succeeded but no CommandId returned.");
+      let stdout = "";
+      let stderr = "";
+      let hadErrors = false;
+      let exitCode = 0;
+      let pipelineDone = false;
+      for (; ; ) {
+        if (opts?.signal?.aborted) throw new Error("AbortError");
+        if (Date.now() > deadline) {
+          throw new Error(`PSRP command timed out after ${opts?.timeoutMs ?? 12e4}ms`);
+        }
+        const receiveBody = `<rsp:Receive><rsp:DesiredStream CommandId="${commandId}">stdout</rsp:DesiredStream></rsp:Receive>`;
+        const receiveHeaders = `<wsman:OptionSet s:mustUnderstand="true"><wsman:Option Name="WSMAN_CMDSHELL_OPTION_KEEPALIVE">True</wsman:Option></wsman:OptionSet>` + this.shellHeaders(shellId);
+        const received = await this.post(
+          "http://schemas.microsoft.com/wbem/wsman/1/windows/shell/Receive",
+          receiveBody,
+          receiveHeaders
+        );
+        this.assertOk(received, "Receive");
+        const streamRe = /<\w*:?Stream\b[^>]*\bName="(?:stdout|stderr|pr)"[^>]*>([\s\S]*?)<\/\w*:?Stream>/gi;
+        let m2;
+        while ((m2 = streamRe.exec(received.body)) !== null) {
+          const b64 = m2[1].replace(/\s+/g, "");
+          if (!b64) continue;
+          for (const raw of unfragmentMessages(import_node_buffer2.Buffer.from(b64, "base64"))) {
+            if (raw.length < 40) continue;
+            const messageType = raw.readUInt32LE(4);
+            const payload = raw.subarray(40).toString("utf8").replace(/^\uFEFF/, "");
+            if (messageType === MSG.PIPELINE_OUTPUT) {
+              const sRe = /<S[^>]*>([\s\S]*?)<\/S>/gi;
+              let sm;
+              while ((sm = sRe.exec(payload)) !== null) stdout += sm[1];
+            } else if (messageType === MSG.ERROR_RECORD) {
+              hadErrors = true;
+              const mRe = payload.match(/<S N="Message">([\s\S]*?)<\/S>/i);
+              stderr += (mRe ? mRe[1] : payload) + "\n";
+            } else if (messageType === MSG.PIPELINE_STATE) {
+              pipelineDone = true;
+              const stateMatch = payload.match(/<I32 N="State">(\d+)<\/I32>/i);
+              if (stateMatch) {
+                if (parseInt(stateMatch[1], 10) === 5) hadErrors = true;
+              }
+              const ec = payload.match(/N="ExitCode"[^>]*>(-?\d+)</i);
+              if (ec) exitCode = parseInt(ec[1], 10);
+            }
+          }
+        }
+        const wsExit = received.body.match(/<\w*:?ExitCode>\s*(-?\d+)\s*<\/\w*:?ExitCode>/i);
+        if (wsExit) exitCode = parseInt(wsExit[1], 10);
+        if (pipelineDone) break;
+        if (/CommandState\/Done/i.test(received.body)) break;
+      }
+      if (exitCode !== 0) hadErrors = true;
+      return { stdout, stderr, exitCode, hadErrors };
+    } finally {
+      await this.deleteShell(shellId);
+    }
+  }
+  /**
+   * Drain Receive until RUNSPACEPOOL_STATE reports Opened (state=2).
+   * Must run after Create and before Command.
+   */
+  async waitForRunspaceOpened(shellId, deadline, signal) {
+    for (; ; ) {
+      if (signal?.aborted) throw new Error("AbortError");
+      if (Date.now() > deadline) throw new Error("PSRP runspace did not open in time");
+      const receiveBody = `<rsp:Receive><rsp:DesiredStream>stdout</rsp:DesiredStream></rsp:Receive>`;
+      const receiveHeaders = `<wsman:OptionSet s:mustUnderstand="true"><wsman:Option Name="WSMAN_CMDSHELL_OPTION_KEEPALIVE">True</wsman:Option></wsman:OptionSet>` + this.shellHeaders(shellId);
+      const received = await this.post(
+        "http://schemas.microsoft.com/wbem/wsman/1/windows/shell/Receive",
+        receiveBody,
+        receiveHeaders
+      );
+      this.assertOk(received, "Receive(init)");
+      const streamRe = /<\w*:?Stream\b[^>]*>([\s\S]*?)<\/\w*:?Stream>/gi;
+      let m2;
+      while ((m2 = streamRe.exec(received.body)) !== null) {
+        const b64 = m2[1].replace(/\s+/g, "");
+        if (!b64) continue;
+        for (const raw of unfragmentMessages(import_node_buffer2.Buffer.from(b64, "base64"))) {
+          if (raw.length < 40) continue;
+          const messageType = raw.readUInt32LE(4);
+          if (messageType === MSG.RUNSPACEPOOL_STATE) {
+            const payload = raw.subarray(40).toString("utf8").replace(/^\uFEFF/, "");
+            const stateMatch = payload.match(/<I32 N="RunspaceState">(\d+)<\/I32>/i) || payload.match(/<I32 N="State">(\d+)<\/I32>/i);
+            if (stateMatch && parseInt(stateMatch[1], 10) === 2) return;
+          }
+          if (messageType === MSG.APPLICATION_PRIVATE_DATA) {
+            continue;
+          }
+        }
+      }
+      if (/CommandState\/Done/i.test(received.body)) return;
+    }
+  }
+  /** Lightweight connectivity probe: create then immediately delete a PSRP shell. */
+  async ping() {
+    const rpid = (0, import_node_crypto3.randomUUID)().toUpperCase();
+    const creationFragment = fragmentMessages([
+      psrpMessage(MSG.SESSION_CAPABILITY, rpid, "00000000-0000-0000-0000-000000000000", sessionCapabilityXml()),
+      psrpMessage(MSG.INIT_RUNSPACEPOOL, rpid, "00000000-0000-0000-0000-000000000000", initRunspacePoolXml())
+    ], 1).blob;
+    const createBody = `<rsp:Shell ShellId="${rpid}"><rsp:InputStreams>stdin pr</rsp:InputStreams><rsp:OutputStreams>stdout</rsp:OutputStreams><creationXml xmlns="http://schemas.microsoft.com/powershell">` + creationFragment.toString("base64") + `</creationXml></rsp:Shell>`;
+    const res = await this.post(
+      "http://schemas.xmlsoap.org/ws/2004/09/transfer/Create",
+      createBody,
+      `<wsman:OptionSet s:mustUnderstand="true"><wsman:Option MustComply="true" Name="protocolversion">2.3</wsman:Option></wsman:OptionSet>`
+    );
+    this.assertOk(res, "Create");
+    const shellId = extractShellId2(res.body);
+    if (shellId) await this.deleteShell(shellId);
+  }
+  async deleteShell(shellId) {
+    try {
+      await this.post(
+        "http://schemas.xmlsoap.org/ws/2004/09/transfer/Delete",
+        "",
+        this.shellHeaders(shellId)
+      );
+    } catch {
+    }
+  }
+  shellHeaders(shellId) {
+    return `<wsman:SelectorSet><wsman:Selector Name="ShellId">${shellId}</wsman:Selector></wsman:SelectorSet>`;
+  }
+  assertOk(res, op) {
+    if (res.status === 200 || res.status === 201) return;
+    const reason = firstText2(res.body, "Text") || firstText2(res.body, "Reason");
+    const fault = firstText2(res.body, "Subcode") || firstText2(res.body, "Value");
+    const detail = reason || fault ? `${fault ? `(${fault}) ` : ""}${reason}`.trim() : res.body.slice(0, 200);
+    throw new Error(`PSRP ${op} failed: HTTP ${res.status} \u2014 ${detail}`);
+  }
+};
+
 // ../../packages/backend/src/services/WinRMBackend.ts
 var DEFAULT_WINRM_TIMEOUT_MS = 12e4;
 var WinRMBackend = class {
@@ -295394,16 +296117,25 @@ var WinRMBackend = class {
       throw new Error("WinRMBackend only supports winrm connections");
     }
     const cfg = config2;
-    const ptyId = `winrm-${(0, import_node_crypto2.randomUUID)()}`;
+    const ptyId = `winrm-${(0, import_node_crypto4.randomUUID)()}`;
     const transport = this.buildTransport(cfg);
-    const instance = { config: cfg, transport, ready: false, failed: false, commandQueue: Promise.resolve() };
+    const instance = {
+      config: cfg,
+      transport,
+      winrm: transport instanceof WinRMTransport ? transport : void 0,
+      psrp: transport instanceof PSRPTransport ? transport : void 0,
+      ready: false,
+      failed: false,
+      commandQueue: Promise.resolve()
+    };
     this.instances.set(ptyId, instance);
     void this.probe(instance).then((ok) => {
       if (ok) {
         instance.ready = true;
+        const mode = cfg.transport === "psrp" ? "PSRP / PowerShell Remoting \u2014 no command-length limit" : "WinRM command/response \u2014 Windows Server";
         instance.dataCallback?.(
-          `\x1B[32m\u2714 WinRM session ready to ${cfg.host}:${cfg.port} (command/response mode \u2014 Windows Server).\x1B[0m\r
-Run commands with exec_command / run_fleet_command. Interactive TUI apps are not supported over WinRM.\r
+          `\x1B[32m\u2714 ${cfg.transport === "psrp" ? "PSRP" : "WinRM"} session ready to ${cfg.host}:${cfg.port} (${mode}).\x1B[0m\r
+Run commands with exec_command / run_fleet_command. Interactive TUI apps are not supported over WinRM/PSRP.\r
 `
         );
       } else {
@@ -295415,7 +296147,7 @@ Run commands with exec_command / run_fleet_command. Interactive TUI apps are not
   }
   async probe(instance) {
     try {
-      await instance.transport.ping();
+      await (instance.winrm ?? instance.transport).ping();
       return true;
     } catch (error40) {
       const message = error40 instanceof Error ? error40.message : String(error40);
@@ -295427,8 +296159,23 @@ Run commands with exec_command / run_fleet_command. Interactive TUI apps are not
     }
   }
   buildTransport(cfg) {
+    const username = cfg.username;
+    const auth2 = cfg.auth ?? "basic";
+    const domain2 = cfg.domain;
+    if (cfg.transport === "psrp") {
+      return new PSRPTransport({
+        host: cfg.host,
+        port: cfg.port,
+        username,
+        password: cfg.password,
+        transport: cfg.port === 5986 ? "https" : "http",
+        rejectUnauthorized: cfg.rejectUnauthorized,
+        timeoutMs: 3e4,
+        auth: auth2,
+        domain: domain2
+      });
+    }
     const transport = cfg.transport ?? (cfg.port === 5986 ? "https" : "http");
-    const username = cfg.domain ? `${cfg.domain}\\${cfg.username}` : cfg.username;
     return new WinRMTransport({
       host: cfg.host,
       port: cfg.port,
@@ -295436,7 +296183,9 @@ Run commands with exec_command / run_fleet_command. Interactive TUI apps are not
       password: cfg.password,
       transport,
       rejectUnauthorized: cfg.rejectUnauthorized,
-      timeoutMs: 3e4
+      timeoutMs: 3e4,
+      auth: auth2,
+      domain: domain2
     });
   }
   /** Direct command execution — the path TerminalService uses for winrm tabs.
@@ -295455,19 +296204,70 @@ Run commands with exec_command / run_fleet_command. Interactive TUI apps are not
       throw new Error("WinRM session is still initializing; try again shortly.");
     }
     const run = instance.commandQueue.then(
-      () => this.executeOnPersistentShell(instance, command, options)
+      () => this.executeOnTransport(instance, command, options)
     );
     instance.commandQueue = run.catch(() => {
     });
     return run;
   }
+  /**
+   * Dispatch to the right execution path for the configured transport.
+   * - WinRM (cmd shell): persistent shell + cwd tracking + cmd echo.
+   * - PSRP (PowerShell runspace): each command runs as a fresh one-shot
+   *   script in a real PowerShell runspace (cwd is seeded per command; the
+   *   script travels in the message body — no 8191-char budget). PSRP runspaces
+   *   are heavier to keep open, so v1 runs one-shot per command.
+   */
+  async executeOnTransport(instance, command, options) {
+    if (instance.psrp) {
+      return this.executeOnPsrp(instance, command, options);
+    }
+    return this.executeOnPersistentShell(instance, command, options);
+  }
+  /** PSRP execution path: wrap the (possibly cmd-flavored) command for
+   * PowerShell, run one-shot, surface hadErrors as stderr. */
+  async executeOnPsrp(instance, command, options) {
+    const transport = instance.psrp;
+    if (!transport) {
+      throw new Error("PSRP execution path invoked without a PSRP transport");
+    }
+    instance.dataCallback?.(`\r
+\x1B[36m\u276F ${command}\x1B[0m\r
+`);
+    const ps = this.translateCmdToPowerShell(command, instance.cwd);
+    const result = await transport.runScript(ps, {
+      timeoutMs: options?.timeoutMs ?? DEFAULT_WINRM_TIMEOUT_MS,
+      signal: options?.signal
+    });
+    if (result.stdout) instance.dataCallback?.(result.stdout);
+    if (result.stderr) instance.dataCallback?.(`\x1B[33m${result.stderr}\x1B[0m`);
+    if (/^\s*(Set-Location|cd)\s+/i.test(command) && !result.hadErrors) {
+      const target = command.replace(/^\s*(Set-Location|cd)\s+/i, "").replace(/"/g, "").trim();
+      instance.cwd = this.resolveWinCwd(instance.cwd, target);
+    }
+    const exitCode = result.exitCode !== 0 ? result.exitCode : result.hadErrors ? 1 : 0;
+    return { stdout: result.stdout, stderr: result.stderr, exitCode };
+  }
+  /** Translate the common cmd.exe builtins the agent emits into PowerShell
+   * equivalents (PSRP runs a real PowerShell runspace, not cmd). */
+  translateCmdToPowerShell(command, cwd) {
+    const cdPrefix = cwd ? `Set-Location -LiteralPath '${cwd.replace(/'/g, "''")}'; ` : "";
+    let ps = command;
+    ps = ps.replace(/^\s*cd\s+\/d\s+/i, "Set-Location -LiteralPath ");
+    ps = ps.replace(/^\s*cd\s+/i, "Set-Location -LiteralPath ");
+    ps = ps.replace(/^\s*dir\s*$/i, "Get-ChildItem");
+    ps = ps.replace(/^\s*type\s+/i, "Get-Content ");
+    ps = ps.replace(/^\s*cls\s*$/i, "Clear-Host");
+    ps = ps.replace(/^\s*echo\s+/i, "Write-Output ");
+    return cdPrefix + ps;
+  }
   /** Lazily create (or recreate) the persistent runspace. */
   async ensurePersistentShell(instance) {
     if (instance.persistentShellId) return instance.persistentShellId;
-    const shellId = await instance.transport.createShell();
+    const shellId = await instance.winrm.createShell();
     instance.persistentShellId = shellId;
     try {
-      const r = await instance.transport.runCommandOnShell(shellId, "cd", { timeoutMs: 1e4 });
+      const r = await instance.winrm.runCommandOnShell(shellId, "cd", { timeoutMs: 1e4 });
       const cwd = r.stdout.trim();
       if (cwd) instance.cwd = cwd;
     } catch {
@@ -295483,7 +296283,7 @@ Run commands with exec_command / run_fleet_command. Interactive TUI apps are not
     const isCd = /^\s*(cd|chdir)\s+/i.test(command);
     try {
       const shellId = await this.ensurePersistentShell(instance);
-      result = await instance.transport.runCommandOnShell(shellId, cwdPrefix + command, {
+      result = await instance.winrm.runCommandOnShell(shellId, cwdPrefix + command, {
         timeoutMs: options?.timeoutMs ?? DEFAULT_WINRM_TIMEOUT_MS,
         signal: options?.signal,
         onChunk: (stream, text) => {
@@ -295494,14 +296294,14 @@ Run commands with exec_command / run_fleet_command. Interactive TUI apps are not
         const target = command.replace(/^\s*(cd|chdir)\s+\/?d?\s*/i, "").replace(/"/g, "").trim();
         instance.cwd = this.resolveWinCwd(instance.cwd, target);
       } else if (result.exitCode === 0) {
-        const probe = await instance.transport.runCommandOnShell(shellId, `${cwdPrefix}cd`, { timeoutMs: 1e4 }).catch(() => null);
+        const probe = await instance.winrm.runCommandOnShell(shellId, `${cwdPrefix}cd`, { timeoutMs: 1e4 }).catch(() => null);
         const probeCwd = probe?.stdout.trim().split(/\r?\n/).map((l) => l.trim()).filter((l) => /^[A-Za-z]:\\/.test(l)).pop();
         if (probeCwd) instance.cwd = probeCwd;
       }
     } catch (error40) {
       instance.persistentShellId = void 0;
       const shellId = await this.ensurePersistentShell(instance);
-      result = await instance.transport.runCommandOnShell(shellId, cwdPrefix + command, {
+      result = await instance.winrm.runCommandOnShell(shellId, cwdPrefix + command, {
         timeoutMs: options?.timeoutMs ?? DEFAULT_WINRM_TIMEOUT_MS,
         signal: options?.signal,
         onChunk: (stream, text) => {
@@ -295553,7 +296353,7 @@ Run commands with exec_command / run_fleet_command. Interactive TUI apps are not
     if (!instance) return;
     this.instances.delete(ptyId);
     if (instance.persistentShellId) {
-      void instance.transport.deleteShell(instance.persistentShellId);
+      void instance.winrm.deleteShell(instance.persistentShellId);
       instance.persistentShellId = void 0;
     }
     instance.exitCallback?.(0);
@@ -295579,7 +296379,7 @@ Run commands with exec_command / run_fleet_command. Interactive TUI apps are not
     const instance = this.instances.get(ptyId);
     if (!instance || !instance.ready && !instance.failed) return void 0;
     try {
-      const r = await instance.transport.runCommand(
+      const r = instance.psrp ? await instance.psrp.runScript("$env:COMPUTERNAME", { timeoutMs: 15e3 }) : await instance.winrm.runCommand(
         'powershell -NoProfile -Command "$env:COMPUTERNAME"',
         { timeoutMs: 15e3 }
       );
@@ -295605,7 +296405,7 @@ Run commands with exec_command / run_fleet_command. Interactive TUI apps are not
 };
 
 // ../../packages/backend/src/services/SerialBackend.ts
-var import_node_crypto3 = require("node:crypto");
+var import_node_crypto5 = require("node:crypto");
 var injectedSerial = null;
 var lazySerial;
 function constructPort(Ctor, path32, opts) {
@@ -295647,7 +296447,7 @@ var SerialBackend = class {
         "Serial port support requires the `serialport` npm package, which is not installed. Install it in RTerm to use serial console connections."
       );
     }
-    const ptyId = `serial-${(0, import_node_crypto3.randomUUID)()}`;
+    const ptyId = `serial-${(0, import_node_crypto5.randomUUID)()}`;
     const port = constructPort(createPort, cfg.path, {
       baudRate: cfg.baudRate,
       dataBits: cfg.dataBits ?? 8,
@@ -302634,12 +303434,12 @@ function unsafeStringify2(arr3, offset = 0) {
 }
 
 // ../../node_modules/@langchain/core/node_modules/uuid/dist/esm-node/rng.js
-var import_node_crypto4 = __toESM(require("node:crypto"));
+var import_node_crypto6 = __toESM(require("node:crypto"));
 var rnds8Pool2 = new Uint8Array(256);
 var poolPtr2 = rnds8Pool2.length;
 function rng2() {
   if (poolPtr2 > rnds8Pool2.length - 16) {
-    import_node_crypto4.default.randomFillSync(rnds8Pool2);
+    import_node_crypto6.default.randomFillSync(rnds8Pool2);
     poolPtr2 = 0;
   }
   return rnds8Pool2.slice(poolPtr2, poolPtr2 += 16);
@@ -302693,9 +303493,9 @@ function v35(name, version2, hashfunc) {
 }
 
 // ../../node_modules/@langchain/core/node_modules/uuid/dist/esm-node/native.js
-var import_node_crypto5 = __toESM(require("node:crypto"));
+var import_node_crypto7 = __toESM(require("node:crypto"));
 var native_default2 = {
-  randomUUID: import_node_crypto5.default.randomUUID
+  randomUUID: import_node_crypto7.default.randomUUID
 };
 
 // ../../node_modules/@langchain/core/node_modules/uuid/dist/esm-node/v4.js
@@ -302719,14 +303519,14 @@ function v42(options, buf, offset) {
 var v4_default2 = v42;
 
 // ../../node_modules/@langchain/core/node_modules/uuid/dist/esm-node/sha1.js
-var import_node_crypto6 = __toESM(require("node:crypto"));
+var import_node_crypto8 = __toESM(require("node:crypto"));
 function sha1(bytes) {
   if (Array.isArray(bytes)) {
     bytes = Buffer.from(bytes);
   } else if (typeof bytes === "string") {
     bytes = Buffer.from(bytes, "utf8");
   }
-  return import_node_crypto6.default.createHash("sha1").update(bytes).digest();
+  return import_node_crypto8.default.createHash("sha1").update(bytes).digest();
 }
 var sha1_default = sha1;
 
@@ -302941,12 +303741,12 @@ function unsafeStringify3(arr3, offset = 0) {
 }
 
 // ../../node_modules/langsmith/node_modules/uuid/dist/esm-node/rng.js
-var import_node_crypto7 = __toESM(require("node:crypto"));
+var import_node_crypto9 = __toESM(require("node:crypto"));
 var rnds8Pool3 = new Uint8Array(256);
 var poolPtr3 = rnds8Pool3.length;
 function rng3() {
   if (poolPtr3 > rnds8Pool3.length - 16) {
-    import_node_crypto7.default.randomFillSync(rnds8Pool3);
+    import_node_crypto9.default.randomFillSync(rnds8Pool3);
     poolPtr3 = 0;
   }
   return rnds8Pool3.slice(poolPtr3, poolPtr3 += 16);
@@ -303000,9 +303800,9 @@ function v352(name, version2, hashfunc) {
 }
 
 // ../../node_modules/langsmith/node_modules/uuid/dist/esm-node/native.js
-var import_node_crypto8 = __toESM(require("node:crypto"));
+var import_node_crypto10 = __toESM(require("node:crypto"));
 var native_default3 = {
-  randomUUID: import_node_crypto8.default.randomUUID
+  randomUUID: import_node_crypto10.default.randomUUID
 };
 
 // ../../node_modules/langsmith/node_modules/uuid/dist/esm-node/v4.js
@@ -303026,14 +303826,14 @@ function v43(options, buf, offset) {
 var v4_default3 = v43;
 
 // ../../node_modules/langsmith/node_modules/uuid/dist/esm-node/sha1.js
-var import_node_crypto9 = __toESM(require("node:crypto"));
+var import_node_crypto11 = __toESM(require("node:crypto"));
 function sha12(bytes) {
   if (Array.isArray(bytes)) {
     bytes = Buffer.from(bytes);
   } else if (typeof bytes === "string") {
     bytes = Buffer.from(bytes, "utf8");
   }
-  return import_node_crypto9.default.createHash("sha1").update(bytes).digest();
+  return import_node_crypto11.default.createHash("sha1").update(bytes).digest();
 }
 var sha1_default2 = sha12;
 
@@ -312845,8 +313645,8 @@ var allowsEval = cached(() => {
     return false;
   }
   try {
-    const F = Function;
-    new F("");
+    const F2 = Function;
+    new F2("");
     return true;
   } catch (_) {
     return false;
@@ -314071,11 +314871,11 @@ var Doc = class {
     }
   }
   compile() {
-    const F = Function;
+    const F2 = Function;
     const args = this?.args;
     const content = this?.content ?? [``];
     const lines = [...content.map((x) => `  ${x}`)];
-    return new F(...args, lines.join("\n"));
+    return new F2(...args, lines.join("\n"));
   }
 };
 
@@ -321421,9 +322221,9 @@ var $ZodFunction = class {
     return impl;
   }
   input(...args) {
-    const F = this.constructor;
+    const F2 = this.constructor;
     if (Array.isArray(args[0])) {
-      return new F({
+      return new F2({
         type: "function",
         input: new $ZodTuple({
           type: "tuple",
@@ -321433,15 +322233,15 @@ var $ZodFunction = class {
         output: this._def.output
       });
     }
-    return new F({
+    return new F2({
       type: "function",
       input: args[0],
       output: this._def.output
     });
   }
   output(output) {
-    const F = this.constructor;
-    return new F({
+    const F2 = this.constructor;
+    return new F2({
       type: "function",
       input: this._def.input,
       output
@@ -327147,12 +327947,12 @@ function unsafeStringify4(arr3, offset = 0) {
 }
 
 // ../../node_modules/@langchain/langgraph-checkpoint/node_modules/uuid/dist/esm-node/rng.js
-var import_node_crypto10 = __toESM(require("node:crypto"));
+var import_node_crypto12 = __toESM(require("node:crypto"));
 var rnds8Pool4 = new Uint8Array(256);
 var poolPtr4 = rnds8Pool4.length;
 function rng4() {
   if (poolPtr4 > rnds8Pool4.length - 16) {
-    import_node_crypto10.default.randomFillSync(rnds8Pool4);
+    import_node_crypto12.default.randomFillSync(rnds8Pool4);
     poolPtr4 = 0;
   }
   return rnds8Pool4.slice(poolPtr4, poolPtr4 += 16);
@@ -327286,14 +328086,14 @@ function v353(name, version2, hashfunc) {
 }
 
 // ../../node_modules/@langchain/langgraph-checkpoint/node_modules/uuid/dist/esm-node/sha1.js
-var import_node_crypto11 = __toESM(require("node:crypto"));
+var import_node_crypto13 = __toESM(require("node:crypto"));
 function sha13(bytes) {
   if (Array.isArray(bytes)) {
     bytes = Buffer.from(bytes);
   } else if (typeof bytes === "string") {
     bytes = Buffer.from(bytes, "utf8");
   }
-  return import_node_crypto11.default.createHash("sha1").update(bytes).digest();
+  return import_node_crypto13.default.createHash("sha1").update(bytes).digest();
 }
 var sha1_default3 = sha13;
 
@@ -331251,7 +332051,7 @@ var initializeSax = function() {
     parser.tag = parser.error = null;
     parser.strict = !!strict;
     parser.noscript = !!(strict || parser.opt.noscript);
-    parser.state = S.BEGIN;
+    parser.state = S2.BEGIN;
     parser.strictEntities = parser.opt.strictEntities;
     parser.ENTITIES = parser.strictEntities ? Object.create(sax$1.XML_ENTITIES) : Object.create(sax$1.ENTITIES);
     parser.attribList = [];
@@ -331261,10 +332061,10 @@ var initializeSax = function() {
     emit10(parser, "onready");
   }
   if (!Object.create) Object.create = function(o) {
-    function F() {
+    function F2() {
     }
-    F.prototype = o;
-    var newf = new F();
+    F2.prototype = o;
+    var newf = new F2();
     return newf;
   };
   if (!Object.keys) Object.keys = function(o) {
@@ -331416,44 +332216,44 @@ var initializeSax = function() {
   function notMatch(regex2, c) {
     return !isMatch(regex2, c);
   }
-  var S = 0;
+  var S2 = 0;
   sax$1.STATE = {
-    BEGIN: S++,
-    BEGIN_WHITESPACE: S++,
-    TEXT: S++,
-    TEXT_ENTITY: S++,
-    OPEN_WAKA: S++,
-    SGML_DECL: S++,
-    SGML_DECL_QUOTED: S++,
-    DOCTYPE: S++,
-    DOCTYPE_QUOTED: S++,
-    DOCTYPE_DTD: S++,
-    DOCTYPE_DTD_QUOTED: S++,
-    COMMENT_STARTING: S++,
-    COMMENT: S++,
-    COMMENT_ENDING: S++,
-    COMMENT_ENDED: S++,
-    CDATA: S++,
-    CDATA_ENDING: S++,
-    CDATA_ENDING_2: S++,
-    PROC_INST: S++,
-    PROC_INST_BODY: S++,
-    PROC_INST_ENDING: S++,
-    OPEN_TAG: S++,
-    OPEN_TAG_SLASH: S++,
-    ATTRIB: S++,
-    ATTRIB_NAME: S++,
-    ATTRIB_NAME_SAW_WHITE: S++,
-    ATTRIB_VALUE: S++,
-    ATTRIB_VALUE_QUOTED: S++,
-    ATTRIB_VALUE_CLOSED: S++,
-    ATTRIB_VALUE_UNQUOTED: S++,
-    ATTRIB_VALUE_ENTITY_Q: S++,
-    ATTRIB_VALUE_ENTITY_U: S++,
-    CLOSE_TAG: S++,
-    CLOSE_TAG_SAW_WHITE: S++,
-    SCRIPT: S++,
-    SCRIPT_ENDING: S++
+    BEGIN: S2++,
+    BEGIN_WHITESPACE: S2++,
+    TEXT: S2++,
+    TEXT_ENTITY: S2++,
+    OPEN_WAKA: S2++,
+    SGML_DECL: S2++,
+    SGML_DECL_QUOTED: S2++,
+    DOCTYPE: S2++,
+    DOCTYPE_QUOTED: S2++,
+    DOCTYPE_DTD: S2++,
+    DOCTYPE_DTD_QUOTED: S2++,
+    COMMENT_STARTING: S2++,
+    COMMENT: S2++,
+    COMMENT_ENDING: S2++,
+    COMMENT_ENDED: S2++,
+    CDATA: S2++,
+    CDATA_ENDING: S2++,
+    CDATA_ENDING_2: S2++,
+    PROC_INST: S2++,
+    PROC_INST_BODY: S2++,
+    PROC_INST_ENDING: S2++,
+    OPEN_TAG: S2++,
+    OPEN_TAG_SLASH: S2++,
+    ATTRIB: S2++,
+    ATTRIB_NAME: S2++,
+    ATTRIB_NAME_SAW_WHITE: S2++,
+    ATTRIB_VALUE: S2++,
+    ATTRIB_VALUE_QUOTED: S2++,
+    ATTRIB_VALUE_CLOSED: S2++,
+    ATTRIB_VALUE_UNQUOTED: S2++,
+    ATTRIB_VALUE_ENTITY_Q: S2++,
+    ATTRIB_VALUE_ENTITY_U: S2++,
+    CLOSE_TAG: S2++,
+    CLOSE_TAG_SAW_WHITE: S2++,
+    SCRIPT: S2++,
+    SCRIPT_ENDING: S2++
   };
   sax$1.XML_ENTITIES = {
     amp: "&",
@@ -331723,7 +332523,7 @@ var initializeSax = function() {
     sax$1.ENTITIES[key] = s$1;
   });
   for (var s in sax$1.STATE) sax$1.STATE[sax$1.STATE[s]] = s;
-  S = sax$1.STATE;
+  S2 = sax$1.STATE;
   function emit10(parser, event, data) {
     parser[event] && parser[event](data);
   }
@@ -331751,7 +332551,7 @@ var initializeSax = function() {
   }
   function end(parser) {
     if (parser.sawRoot && !parser.closedRoot) strictFail(parser, "Unclosed root tag");
-    if (parser.state !== S.BEGIN && parser.state !== S.BEGIN_WHITESPACE && parser.state !== S.TEXT) error40(parser, "Unexpected end");
+    if (parser.state !== S2.BEGIN && parser.state !== S2.BEGIN_WHITESPACE && parser.state !== S2.TEXT) error40(parser, "Unexpected end");
     closeText(parser);
     parser.c = "";
     parser.closed = true;
@@ -331863,8 +332663,8 @@ var initializeSax = function() {
     parser.tags.push(parser.tag);
     emitNode(parser, "onopentag", parser.tag);
     if (!selfClosing) {
-      if (!parser.noscript && parser.tagName.toLowerCase() === "script") parser.state = S.SCRIPT;
-      else parser.state = S.TEXT;
+      if (!parser.noscript && parser.tagName.toLowerCase() === "script") parser.state = S2.SCRIPT;
+      else parser.state = S2.TEXT;
       parser.tag = null;
       parser.tagName = "";
     }
@@ -331875,14 +332675,14 @@ var initializeSax = function() {
     if (!parser.tagName) {
       strictFail(parser, "Weird empty close tag.");
       parser.textNode += "</>";
-      parser.state = S.TEXT;
+      parser.state = S2.TEXT;
       return;
     }
     if (parser.script) {
       if (parser.tagName !== "script") {
         parser.script += "</" + parser.tagName + ">";
         parser.tagName = "";
-        parser.state = S.SCRIPT;
+        parser.state = S2.SCRIPT;
         return;
       }
       emitNode(parser, "onscript", parser.script);
@@ -331900,7 +332700,7 @@ var initializeSax = function() {
     if (t < 0) {
       strictFail(parser, "Unmatched closing tag: " + parser.tagName);
       parser.textNode += "</" + parser.tagName + ">";
-      parser.state = S.TEXT;
+      parser.state = S2.TEXT;
       return;
     }
     parser.tagName = tagName;
@@ -331923,7 +332723,7 @@ var initializeSax = function() {
     if (t === 0) parser.closedRoot = true;
     parser.tagName = parser.attribValue = parser.attribName = "";
     parser.attribList.length = 0;
-    parser.state = S.TEXT;
+    parser.state = S2.TEXT;
   }
   function parseEntity(parser) {
     var entity = parser.entity;
@@ -331951,12 +332751,12 @@ var initializeSax = function() {
   }
   function beginWhiteSpace(parser, c) {
     if (c === "<") {
-      parser.state = S.OPEN_WAKA;
+      parser.state = S2.OPEN_WAKA;
       parser.startTagPosition = parser.position;
     } else if (!isWhitespace3(c)) {
       strictFail(parser, "Non-whitespace before first tag.");
       parser.textNode = c;
-      parser.state = S.TEXT;
+      parser.state = S2.TEXT;
     }
   }
   function charAt(chunk2, i) {
@@ -331984,15 +332784,15 @@ var initializeSax = function() {
         } else parser.column++;
       }
       switch (parser.state) {
-        case S.BEGIN:
-          parser.state = S.BEGIN_WHITESPACE;
+        case S2.BEGIN:
+          parser.state = S2.BEGIN_WHITESPACE;
           if (c === "\uFEFF") continue;
           beginWhiteSpace(parser, c);
           continue;
-        case S.BEGIN_WHITESPACE:
+        case S2.BEGIN_WHITESPACE:
           beginWhiteSpace(parser, c);
           continue;
-        case S.TEXT:
+        case S2.TEXT:
           if (parser.sawRoot && !parser.closedRoot) {
             var starti = i - 1;
             while (c && c !== "<" && c !== "&") {
@@ -332008,38 +332808,38 @@ var initializeSax = function() {
             parser.textNode += chunk2.substring(starti, i - 1);
           }
           if (c === "<" && !(parser.sawRoot && parser.closedRoot && !parser.strict)) {
-            parser.state = S.OPEN_WAKA;
+            parser.state = S2.OPEN_WAKA;
             parser.startTagPosition = parser.position;
           } else {
             if (!isWhitespace3(c) && (!parser.sawRoot || parser.closedRoot)) strictFail(parser, "Text data outside of root node.");
-            if (c === "&") parser.state = S.TEXT_ENTITY;
+            if (c === "&") parser.state = S2.TEXT_ENTITY;
             else parser.textNode += c;
           }
           continue;
-        case S.SCRIPT:
-          if (c === "<") parser.state = S.SCRIPT_ENDING;
+        case S2.SCRIPT:
+          if (c === "<") parser.state = S2.SCRIPT_ENDING;
           else parser.script += c;
           continue;
-        case S.SCRIPT_ENDING:
-          if (c === "/") parser.state = S.CLOSE_TAG;
+        case S2.SCRIPT_ENDING:
+          if (c === "/") parser.state = S2.CLOSE_TAG;
           else {
             parser.script += "<" + c;
-            parser.state = S.SCRIPT;
+            parser.state = S2.SCRIPT;
           }
           continue;
-        case S.OPEN_WAKA:
+        case S2.OPEN_WAKA:
           if (c === "!") {
-            parser.state = S.SGML_DECL;
+            parser.state = S2.SGML_DECL;
             parser.sgmlDecl = "";
           } else if (isWhitespace3(c)) {
           } else if (isMatch(nameStart, c)) {
-            parser.state = S.OPEN_TAG;
+            parser.state = S2.OPEN_TAG;
             parser.tagName = c;
           } else if (c === "/") {
-            parser.state = S.CLOSE_TAG;
+            parser.state = S2.CLOSE_TAG;
             parser.tagName = "";
           } else if (c === "?") {
-            parser.state = S.PROC_INST;
+            parser.state = S2.PROC_INST;
             parser.procInstName = parser.procInstBody = "";
           } else {
             strictFail(parser, "Unencoded <");
@@ -332048,188 +332848,188 @@ var initializeSax = function() {
               c = new Array(pad).join(" ") + c;
             }
             parser.textNode += "<" + c;
-            parser.state = S.TEXT;
+            parser.state = S2.TEXT;
           }
           continue;
-        case S.SGML_DECL:
+        case S2.SGML_DECL:
           if ((parser.sgmlDecl + c).toUpperCase() === CDATA) {
             emitNode(parser, "onopencdata");
-            parser.state = S.CDATA;
+            parser.state = S2.CDATA;
             parser.sgmlDecl = "";
             parser.cdata = "";
           } else if (parser.sgmlDecl + c === "--") {
-            parser.state = S.COMMENT;
+            parser.state = S2.COMMENT;
             parser.comment = "";
             parser.sgmlDecl = "";
           } else if ((parser.sgmlDecl + c).toUpperCase() === DOCTYPE) {
-            parser.state = S.DOCTYPE;
+            parser.state = S2.DOCTYPE;
             if (parser.doctype || parser.sawRoot) strictFail(parser, "Inappropriately located doctype declaration");
             parser.doctype = "";
             parser.sgmlDecl = "";
           } else if (c === ">") {
             emitNode(parser, "onsgmldeclaration", parser.sgmlDecl);
             parser.sgmlDecl = "";
-            parser.state = S.TEXT;
+            parser.state = S2.TEXT;
           } else if (isQuote(c)) {
-            parser.state = S.SGML_DECL_QUOTED;
+            parser.state = S2.SGML_DECL_QUOTED;
             parser.sgmlDecl += c;
           } else parser.sgmlDecl += c;
           continue;
-        case S.SGML_DECL_QUOTED:
+        case S2.SGML_DECL_QUOTED:
           if (c === parser.q) {
-            parser.state = S.SGML_DECL;
+            parser.state = S2.SGML_DECL;
             parser.q = "";
           }
           parser.sgmlDecl += c;
           continue;
-        case S.DOCTYPE:
+        case S2.DOCTYPE:
           if (c === ">") {
-            parser.state = S.TEXT;
+            parser.state = S2.TEXT;
             emitNode(parser, "ondoctype", parser.doctype);
             parser.doctype = true;
           } else {
             parser.doctype += c;
-            if (c === "[") parser.state = S.DOCTYPE_DTD;
+            if (c === "[") parser.state = S2.DOCTYPE_DTD;
             else if (isQuote(c)) {
-              parser.state = S.DOCTYPE_QUOTED;
+              parser.state = S2.DOCTYPE_QUOTED;
               parser.q = c;
             }
           }
           continue;
-        case S.DOCTYPE_QUOTED:
+        case S2.DOCTYPE_QUOTED:
           parser.doctype += c;
           if (c === parser.q) {
             parser.q = "";
-            parser.state = S.DOCTYPE;
+            parser.state = S2.DOCTYPE;
           }
           continue;
-        case S.DOCTYPE_DTD:
+        case S2.DOCTYPE_DTD:
           parser.doctype += c;
-          if (c === "]") parser.state = S.DOCTYPE;
+          if (c === "]") parser.state = S2.DOCTYPE;
           else if (isQuote(c)) {
-            parser.state = S.DOCTYPE_DTD_QUOTED;
+            parser.state = S2.DOCTYPE_DTD_QUOTED;
             parser.q = c;
           }
           continue;
-        case S.DOCTYPE_DTD_QUOTED:
+        case S2.DOCTYPE_DTD_QUOTED:
           parser.doctype += c;
           if (c === parser.q) {
-            parser.state = S.DOCTYPE_DTD;
+            parser.state = S2.DOCTYPE_DTD;
             parser.q = "";
           }
           continue;
-        case S.COMMENT:
-          if (c === "-") parser.state = S.COMMENT_ENDING;
+        case S2.COMMENT:
+          if (c === "-") parser.state = S2.COMMENT_ENDING;
           else parser.comment += c;
           continue;
-        case S.COMMENT_ENDING:
+        case S2.COMMENT_ENDING:
           if (c === "-") {
-            parser.state = S.COMMENT_ENDED;
+            parser.state = S2.COMMENT_ENDED;
             parser.comment = textopts(parser.opt, parser.comment);
             if (parser.comment) emitNode(parser, "oncomment", parser.comment);
             parser.comment = "";
           } else {
             parser.comment += "-" + c;
-            parser.state = S.COMMENT;
+            parser.state = S2.COMMENT;
           }
           continue;
-        case S.COMMENT_ENDED:
+        case S2.COMMENT_ENDED:
           if (c !== ">") {
             strictFail(parser, "Malformed comment");
             parser.comment += "--" + c;
-            parser.state = S.COMMENT;
-          } else parser.state = S.TEXT;
+            parser.state = S2.COMMENT;
+          } else parser.state = S2.TEXT;
           continue;
-        case S.CDATA:
-          if (c === "]") parser.state = S.CDATA_ENDING;
+        case S2.CDATA:
+          if (c === "]") parser.state = S2.CDATA_ENDING;
           else parser.cdata += c;
           continue;
-        case S.CDATA_ENDING:
-          if (c === "]") parser.state = S.CDATA_ENDING_2;
+        case S2.CDATA_ENDING:
+          if (c === "]") parser.state = S2.CDATA_ENDING_2;
           else {
             parser.cdata += "]" + c;
-            parser.state = S.CDATA;
+            parser.state = S2.CDATA;
           }
           continue;
-        case S.CDATA_ENDING_2:
+        case S2.CDATA_ENDING_2:
           if (c === ">") {
             if (parser.cdata) emitNode(parser, "oncdata", parser.cdata);
             emitNode(parser, "onclosecdata");
             parser.cdata = "";
-            parser.state = S.TEXT;
+            parser.state = S2.TEXT;
           } else if (c === "]") parser.cdata += "]";
           else {
             parser.cdata += "]]" + c;
-            parser.state = S.CDATA;
+            parser.state = S2.CDATA;
           }
           continue;
-        case S.PROC_INST:
-          if (c === "?") parser.state = S.PROC_INST_ENDING;
-          else if (isWhitespace3(c)) parser.state = S.PROC_INST_BODY;
+        case S2.PROC_INST:
+          if (c === "?") parser.state = S2.PROC_INST_ENDING;
+          else if (isWhitespace3(c)) parser.state = S2.PROC_INST_BODY;
           else parser.procInstName += c;
           continue;
-        case S.PROC_INST_BODY:
+        case S2.PROC_INST_BODY:
           if (!parser.procInstBody && isWhitespace3(c)) continue;
-          else if (c === "?") parser.state = S.PROC_INST_ENDING;
+          else if (c === "?") parser.state = S2.PROC_INST_ENDING;
           else parser.procInstBody += c;
           continue;
-        case S.PROC_INST_ENDING:
+        case S2.PROC_INST_ENDING:
           if (c === ">") {
             emitNode(parser, "onprocessinginstruction", {
               name: parser.procInstName,
               body: parser.procInstBody
             });
             parser.procInstName = parser.procInstBody = "";
-            parser.state = S.TEXT;
+            parser.state = S2.TEXT;
           } else {
             parser.procInstBody += "?" + c;
-            parser.state = S.PROC_INST_BODY;
+            parser.state = S2.PROC_INST_BODY;
           }
           continue;
-        case S.OPEN_TAG:
+        case S2.OPEN_TAG:
           if (isMatch(nameBody, c)) parser.tagName += c;
           else {
             newTag(parser);
             if (c === ">") openTag(parser);
-            else if (c === "/") parser.state = S.OPEN_TAG_SLASH;
+            else if (c === "/") parser.state = S2.OPEN_TAG_SLASH;
             else {
               if (!isWhitespace3(c)) strictFail(parser, "Invalid character in tag name");
-              parser.state = S.ATTRIB;
+              parser.state = S2.ATTRIB;
             }
           }
           continue;
-        case S.OPEN_TAG_SLASH:
+        case S2.OPEN_TAG_SLASH:
           if (c === ">") {
             openTag(parser, true);
             closeTag(parser);
           } else {
             strictFail(parser, "Forward-slash in opening tag not followed by >");
-            parser.state = S.ATTRIB;
+            parser.state = S2.ATTRIB;
           }
           continue;
-        case S.ATTRIB:
+        case S2.ATTRIB:
           if (isWhitespace3(c)) continue;
           else if (c === ">") openTag(parser);
-          else if (c === "/") parser.state = S.OPEN_TAG_SLASH;
+          else if (c === "/") parser.state = S2.OPEN_TAG_SLASH;
           else if (isMatch(nameStart, c)) {
             parser.attribName = c;
             parser.attribValue = "";
-            parser.state = S.ATTRIB_NAME;
+            parser.state = S2.ATTRIB_NAME;
           } else strictFail(parser, "Invalid attribute name");
           continue;
-        case S.ATTRIB_NAME:
-          if (c === "=") parser.state = S.ATTRIB_VALUE;
+        case S2.ATTRIB_NAME:
+          if (c === "=") parser.state = S2.ATTRIB_VALUE;
           else if (c === ">") {
             strictFail(parser, "Attribute without value");
             parser.attribValue = parser.attribName;
             attrib(parser);
             openTag(parser);
-          } else if (isWhitespace3(c)) parser.state = S.ATTRIB_NAME_SAW_WHITE;
+          } else if (isWhitespace3(c)) parser.state = S2.ATTRIB_NAME_SAW_WHITE;
           else if (isMatch(nameBody, c)) parser.attribName += c;
           else strictFail(parser, "Invalid attribute name");
           continue;
-        case S.ATTRIB_NAME_SAW_WHITE:
-          if (c === "=") parser.state = S.ATTRIB_VALUE;
+        case S2.ATTRIB_NAME_SAW_WHITE:
+          if (c === "=") parser.state = S2.ATTRIB_VALUE;
           else if (isWhitespace3(c)) continue;
           else {
             strictFail(parser, "Attribute without value");
@@ -332243,60 +333043,60 @@ var initializeSax = function() {
             if (c === ">") openTag(parser);
             else if (isMatch(nameStart, c)) {
               parser.attribName = c;
-              parser.state = S.ATTRIB_NAME;
+              parser.state = S2.ATTRIB_NAME;
             } else {
               strictFail(parser, "Invalid attribute name");
-              parser.state = S.ATTRIB;
+              parser.state = S2.ATTRIB;
             }
           }
           continue;
-        case S.ATTRIB_VALUE:
+        case S2.ATTRIB_VALUE:
           if (isWhitespace3(c)) continue;
           else if (isQuote(c)) {
             parser.q = c;
-            parser.state = S.ATTRIB_VALUE_QUOTED;
+            parser.state = S2.ATTRIB_VALUE_QUOTED;
           } else {
             strictFail(parser, "Unquoted attribute value");
-            parser.state = S.ATTRIB_VALUE_UNQUOTED;
+            parser.state = S2.ATTRIB_VALUE_UNQUOTED;
             parser.attribValue = c;
           }
           continue;
-        case S.ATTRIB_VALUE_QUOTED:
+        case S2.ATTRIB_VALUE_QUOTED:
           if (c !== parser.q) {
-            if (c === "&") parser.state = S.ATTRIB_VALUE_ENTITY_Q;
+            if (c === "&") parser.state = S2.ATTRIB_VALUE_ENTITY_Q;
             else parser.attribValue += c;
             continue;
           }
           attrib(parser);
           parser.q = "";
-          parser.state = S.ATTRIB_VALUE_CLOSED;
+          parser.state = S2.ATTRIB_VALUE_CLOSED;
           continue;
-        case S.ATTRIB_VALUE_CLOSED:
-          if (isWhitespace3(c)) parser.state = S.ATTRIB;
+        case S2.ATTRIB_VALUE_CLOSED:
+          if (isWhitespace3(c)) parser.state = S2.ATTRIB;
           else if (c === ">") openTag(parser);
-          else if (c === "/") parser.state = S.OPEN_TAG_SLASH;
+          else if (c === "/") parser.state = S2.OPEN_TAG_SLASH;
           else if (isMatch(nameStart, c)) {
             strictFail(parser, "No whitespace between attributes");
             parser.attribName = c;
             parser.attribValue = "";
-            parser.state = S.ATTRIB_NAME;
+            parser.state = S2.ATTRIB_NAME;
           } else strictFail(parser, "Invalid attribute name");
           continue;
-        case S.ATTRIB_VALUE_UNQUOTED:
+        case S2.ATTRIB_VALUE_UNQUOTED:
           if (!isAttribEnd(c)) {
-            if (c === "&") parser.state = S.ATTRIB_VALUE_ENTITY_U;
+            if (c === "&") parser.state = S2.ATTRIB_VALUE_ENTITY_U;
             else parser.attribValue += c;
             continue;
           }
           attrib(parser);
           if (c === ">") openTag(parser);
-          else parser.state = S.ATTRIB;
+          else parser.state = S2.ATTRIB;
           continue;
-        case S.CLOSE_TAG:
+        case S2.CLOSE_TAG:
           if (!parser.tagName) if (isWhitespace3(c)) continue;
           else if (notMatch(nameStart, c)) if (parser.script) {
             parser.script += "</" + c;
-            parser.state = S.SCRIPT;
+            parser.state = S2.SCRIPT;
           } else strictFail(parser, "Invalid tagname in closing tag.");
           else parser.tagName = c;
           else if (c === ">") closeTag(parser);
@@ -332304,33 +333104,33 @@ var initializeSax = function() {
           else if (parser.script) {
             parser.script += "</" + parser.tagName;
             parser.tagName = "";
-            parser.state = S.SCRIPT;
+            parser.state = S2.SCRIPT;
           } else {
             if (!isWhitespace3(c)) strictFail(parser, "Invalid tagname in closing tag");
-            parser.state = S.CLOSE_TAG_SAW_WHITE;
+            parser.state = S2.CLOSE_TAG_SAW_WHITE;
           }
           continue;
-        case S.CLOSE_TAG_SAW_WHITE:
+        case S2.CLOSE_TAG_SAW_WHITE:
           if (isWhitespace3(c)) continue;
           if (c === ">") closeTag(parser);
           else strictFail(parser, "Invalid characters in closing tag");
           continue;
-        case S.TEXT_ENTITY:
-        case S.ATTRIB_VALUE_ENTITY_Q:
-        case S.ATTRIB_VALUE_ENTITY_U:
+        case S2.TEXT_ENTITY:
+        case S2.ATTRIB_VALUE_ENTITY_Q:
+        case S2.ATTRIB_VALUE_ENTITY_U:
           var returnState;
           var buffer;
           switch (parser.state) {
-            case S.TEXT_ENTITY:
-              returnState = S.TEXT;
+            case S2.TEXT_ENTITY:
+              returnState = S2.TEXT;
               buffer = "textNode";
               break;
-            case S.ATTRIB_VALUE_ENTITY_Q:
-              returnState = S.ATTRIB_VALUE_QUOTED;
+            case S2.ATTRIB_VALUE_ENTITY_Q:
+              returnState = S2.ATTRIB_VALUE_QUOTED;
               buffer = "attribValue";
               break;
-            case S.ATTRIB_VALUE_ENTITY_U:
-              returnState = S.ATTRIB_VALUE_UNQUOTED;
+            case S2.ATTRIB_VALUE_ENTITY_U:
+              returnState = S2.ATTRIB_VALUE_UNQUOTED;
               buffer = "attribValue";
               break;
           }
@@ -342705,21 +343505,21 @@ function unsafeStringify5(arr3, offset = 0) {
 }
 
 // ../../node_modules/@langchain/langgraph/node_modules/uuid/dist/esm-node/rng.js
-var import_node_crypto12 = __toESM(require("node:crypto"));
+var import_node_crypto14 = __toESM(require("node:crypto"));
 var rnds8Pool5 = new Uint8Array(256);
 var poolPtr5 = rnds8Pool5.length;
 function rng5() {
   if (poolPtr5 > rnds8Pool5.length - 16) {
-    import_node_crypto12.default.randomFillSync(rnds8Pool5);
+    import_node_crypto14.default.randomFillSync(rnds8Pool5);
     poolPtr5 = 0;
   }
   return rnds8Pool5.slice(poolPtr5, poolPtr5 += 16);
 }
 
 // ../../node_modules/@langchain/langgraph/node_modules/uuid/dist/esm-node/native.js
-var import_node_crypto13 = __toESM(require("node:crypto"));
+var import_node_crypto15 = __toESM(require("node:crypto"));
 var native_default4 = {
-  randomUUID: import_node_crypto13.default.randomUUID
+  randomUUID: import_node_crypto15.default.randomUUID
 };
 
 // ../../node_modules/@langchain/langgraph/node_modules/uuid/dist/esm-node/v4.js
@@ -346856,7 +347656,7 @@ function buildUnfinishedFileTransferContinueInstruction(transfers) {
 }
 
 // ../../packages/backend/src/services/AgentHelper/tools/terminal_tools.ts
-var import_node_crypto14 = require("node:crypto");
+var import_node_crypto16 = require("node:crypto");
 var execCommandSchema = external_exports.object({
   tabIdOrName: external_exports.string().describe("The ID or Name of the terminal tab"),
   command: external_exports.string().describe("The shell command to execute"),
@@ -346908,7 +347708,7 @@ function sshEntryToTerminalConfig(entry, opts) {
   const jumpHost = entry.jumpHost;
   return {
     type: "ssh",
-    id: `ssh-${(0, import_node_crypto14.randomUUID)()}`,
+    id: `ssh-${(0, import_node_crypto16.randomUUID)()}`,
     title: opts.title,
     cols: 80,
     rows: 24,
@@ -346938,7 +347738,7 @@ function resolveSavedWinrmConnection(context2, nameOrId) {
 function winrmEntryToTerminalConfig(entry, opts) {
   return {
     type: "winrm",
-    id: `winrm-${(0, import_node_crypto14.randomUUID)()}`,
+    id: `winrm-${(0, import_node_crypto16.randomUUID)()}`,
     title: opts.title,
     cols: 80,
     rows: 24,
@@ -346963,7 +347763,7 @@ function resolveSavedSerialConnection(context2, nameOrId) {
 function serialEntryToTerminalConfig(entry, opts) {
   return {
     type: "serial",
-    id: `serial-${(0, import_node_crypto14.randomUUID)()}`,
+    id: `serial-${(0, import_node_crypto16.randomUUID)()}`,
     title: opts.title,
     cols: 80,
     rows: 24,
@@ -348488,8 +349288,12 @@ var winrmConnectionFieldsSchema = external_exports.object({
   port: external_exports.number().int().min(1).max(65535).default(5985),
   username: external_exports.string().min(1).describe("Windows admin username."),
   password: external_exports.string().min(1).describe("Windows password (Basic auth)."),
-  transport: external_exports.enum(["http", "https"]).optional().describe("http (5985) or https (5986). Defaults from port."),
-  auth: external_exports.enum(["basic", "negotiate"]).optional().describe("Auth scheme. v1 implements basic (lab/non-domain)."),
+  transport: external_exports.enum(["http", "https", "psrp"]).optional().describe(
+    "http (5985), https (5986), or psrp (PowerShell Remoting over the same port \u2014 scripts travel in the message body, no command-length limit). Defaults from port."
+  ),
+  auth: external_exports.enum(["basic", "ntlm", "negotiate", "kerberos"]).optional().describe(
+    "Auth scheme. basic (lab), ntlm (NTLMv2), negotiate (SPNEGO/NTLMv2; Kerberos when a ticket is available), kerberos (GSSAPI via optional kerberos package, else NTLM)."
+  ),
   domain: external_exports.string().optional().describe("Active Directory domain (sent as DOMAIN\\user)."),
   rejectUnauthorized: external_exports.boolean().optional().describe("For https with self-signed certs, set false to skip cert verification."),
   groupId: external_exports.string().optional().describe("ID of a saved group/folder (create one with manage_group)."),
@@ -364918,7 +365722,7 @@ var import_node_fs4 = __toESM(require("node:fs"), 1);
 var import_promises6 = __toESM(require("node:fs/promises"), 1);
 var import_node_os2 = __toESM(require("node:os"), 1);
 var import_node_path6 = __toESM(require("node:path"), 1);
-var import_node_crypto15 = __toESM(require("node:crypto"), 1);
+var import_node_crypto17 = __toESM(require("node:crypto"), 1);
 var DEFAULT_MAX_FILES = 50;
 var PassChatTempExportService = class {
   baseDir;
@@ -365045,7 +365849,7 @@ ${input.markdown}`
     return import_node_path6.default.join(this.baseDir, `pass-chat_${sessionHash}_${hash2}.md`);
   }
   hashText(input) {
-    return import_node_crypto15.default.createHash("sha256").update(input).digest("hex");
+    return import_node_crypto17.default.createHash("sha256").update(input).digest("hex");
   }
   async ensurePrivateBaseDir() {
     await import_promises6.default.mkdir(this.baseDir, { recursive: true, mode: 448 });
@@ -371338,9 +372142,9 @@ var import_websocket_server = __toESM(require_websocket_server(), 1);
 
 // ../../packages/backend/src/services/Gateway/WebSocketGatewayAdapter.ts
 var import_node_module4 = require("node:module");
-var import_meta6 = {};
+var import_meta7 = {};
 var nodeRequire = (0, import_node_module4.createRequire)(
-  typeof __filename !== "undefined" ? __filename : import_meta6.url
+  typeof __filename !== "undefined" ? __filename : import_meta7.url
 );
 var WebSocketRpcError = class extends Error {
   constructor(code, message) {
@@ -378342,8 +379146,8 @@ async function random(size) {
   const evenDistCutoff = Math.pow(2, 8) - Math.pow(2, 8) % mask.length;
   let result = "";
   while (result.length < size) {
-    const randomBytes3 = await getRandomValues(size - result.length);
-    for (const randomByte of randomBytes3) {
+    const randomBytes4 = await getRandomValues(size - result.length);
+    for (const randomByte of randomBytes4) {
       if (randomByte < evenDistCutoff) {
         result += mask[randomByte % mask.length];
       }
@@ -381104,8 +381908,8 @@ var import_node_path20 = __toESM(require("node:path"), 1);
 var import_promises11 = __toESM(require("node:fs/promises"), 1);
 var import_node_path19 = __toESM(require("node:path"), 1);
 var import_node_util = require("node:util");
-var import_node_crypto16 = require("node:crypto");
-var scrypt = (0, import_node_util.promisify)(import_node_crypto16.scrypt);
+var import_node_crypto18 = require("node:crypto");
+var scrypt = (0, import_node_util.promisify)(import_node_crypto18.scrypt);
 var FILE_SCHEMA_VERSION = 1;
 var HASH_KEY_LENGTH = 32;
 var TOKEN_NAME_MAX_LENGTH = 64;
@@ -381119,10 +381923,10 @@ function makeDefaultPayload() {
   };
 }
 function randomTokenId() {
-  return `atk_${(0, import_node_crypto16.randomBytes)(12).toString("base64url")}`;
+  return `atk_${(0, import_node_crypto18.randomBytes)(12).toString("base64url")}`;
 }
 function randomAccessTokenValue() {
-  return `gys_at_${(0, import_node_crypto16.randomBytes)(24).toString("base64url")}`;
+  return `gys_at_${(0, import_node_crypto18.randomBytes)(24).toString("base64url")}`;
 }
 async function deriveTokenHash(token, tokenSaltBase64) {
   const tokenSalt = Buffer.from(tokenSaltBase64, "base64");
@@ -381184,7 +381988,7 @@ var FileAccessTokenStore = class {
         throw new Error(`Token name already exists: ${normalizedName}`);
       }
       const token = randomAccessTokenValue();
-      const tokenSalt = (0, import_node_crypto16.randomBytes)(16).toString("base64");
+      const tokenSalt = (0, import_node_crypto18.randomBytes)(16).toString("base64");
       const tokenHash = (await deriveTokenHash(token, tokenSalt)).toString("base64");
       const createdAt = Date.now();
       const record2 = {
@@ -381231,7 +382035,7 @@ var FileAccessTokenStore = class {
       try {
         const expected = Buffer.from(record2.tokenHash, "base64");
         const actual = await deriveTokenHash(token, record2.tokenSalt);
-        if (expected.length === actual.length && (0, import_node_crypto16.timingSafeEqual)(expected, actual)) {
+        if (expected.length === actual.length && (0, import_node_crypto18.timingSafeEqual)(expected, actual)) {
           return true;
         }
       } catch {
@@ -381733,7 +382537,7 @@ function buildBuiltInToolStatusSummary(enabledMap) {
 // ../../packages/backend/src/services/ImageAttachmentService.ts
 var import_promises12 = __toESM(require("node:fs/promises"), 1);
 var import_node_path21 = __toESM(require("node:path"), 1);
-var import_node_crypto17 = __toESM(require("node:crypto"), 1);
+var import_node_crypto19 = __toESM(require("node:crypto"), 1);
 var DEFAULT_INDEX = {
   records: {}
 };
@@ -381757,7 +382561,7 @@ var ImageAttachmentService = class {
     const normalizedMimeType = this.resolveMimeType(payload.mimeType, image.mimeType);
     const extension = this.resolveImageExtension(payload.fileName, normalizedMimeType);
     const safeName = this.safeFileName(payload.fileName);
-    const sha2562 = import_node_crypto17.default.createHash("sha256").update(bytes).digest("hex");
+    const sha2562 = import_node_crypto19.default.createHash("sha256").update(bytes).digest("hex");
     const attachmentId = `img_${sha2562.slice(0, 24)}`;
     const filePath = import_node_path21.default.join(this.attachmentsDir, `${attachmentId}${extension}`);
     const existing = this.records[attachmentId];
@@ -391059,7 +391863,7 @@ var LiveDashboardHub = class {
 };
 
 // ../../packages/backend/src/services/observability.ts
-var import_meta7 = {};
+var import_meta8 = {};
 function makeLineReader(onChunk) {
   let buffer = "";
   const waiters = [];
@@ -391312,7 +392116,7 @@ function createObservability(deps) {
   const monitorStatus = new MonitorStatusService(deps.resourceMonitorService, deps.terminalService);
   const policyEngine = new AgtPolicyEngine({
     loadPolicy: async () => {
-      const req = (0, import_node_module5.createRequire)(typeof __filename !== "undefined" ? __filename : import_meta7.url);
+      const req = (0, import_node_module5.createRequire)(typeof __filename !== "undefined" ? __filename : import_meta8.url);
       const fs23 = req("node:fs");
       const path32 = req("node:path");
       const policyPath = path32.join(".", "policy.yaml");
@@ -391355,16 +392159,16 @@ function createObservability(deps) {
     reviewMode: deps.reviewMode ?? "strict"
   });
   const pluginScanRoot = (process.env.GYBACKEND_DATA_DIR ?? "./.gybackend-data") + "/plugins";
-  const bundlePluginRoot = typeof __filename !== "undefined" ? import_node_path27.default.join(import_node_path27.default.dirname(__filename), "..", "plugins") : new URL("../plugins/", import_meta7.url).pathname;
+  const bundlePluginRoot = typeof __filename !== "undefined" ? import_node_path27.default.join(import_node_path27.default.dirname(__filename), "..", "plugins") : new URL("../plugins/", import_meta8.url).pathname;
   const scanRoots = [pluginScanRoot, "./plugins"];
   try {
-    const req = (0, import_node_module5.createRequire)(typeof __filename !== "undefined" ? __filename : import_meta7.url);
+    const req = (0, import_node_module5.createRequire)(typeof __filename !== "undefined" ? __filename : import_meta8.url);
     const fs23 = req("node:fs");
     if (fs23.existsSync(bundlePluginRoot)) scanRoots.push(bundlePluginRoot);
   } catch {
   }
   try {
-    const req = (0, import_node_module5.createRequire)(typeof __filename !== "undefined" ? __filename : import_meta7.url);
+    const req = (0, import_node_module5.createRequire)(typeof __filename !== "undefined" ? __filename : import_meta8.url);
     const fs23 = req("node:fs");
     const path32 = req("node:path");
     const resourcesPath = process.resourcesPath;
@@ -391392,7 +392196,7 @@ function createObservability(deps) {
       },
       // Real child_process spawn for sidecar daemons (web-intel's wigolo serve).
       (command, args, opts) => {
-        const req = (0, import_node_module5.createRequire)(typeof __filename !== "undefined" ? __filename : import_meta7.url);
+        const req = (0, import_node_module5.createRequire)(typeof __filename !== "undefined" ? __filename : import_meta8.url);
         const cp = req("node:child_process");
         return cp.spawn(command, args, {
           env: opts?.env,