npm - supbuddy - Versions diffs - 3.0.6 → 3.0.8 - Mend

supbuddy 3.0.6 → 3.0.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/dist/bin.js +788 -509
package/dist/daemon/worker.cjs +14296 -11774
package/dist/lib.js +11 -1
package/package.json +4 -4

package/dist/bin.js CHANGED Viewed

@@ -79,9 +79,9 @@ function makeElevate(quiet) {
     const askpass = process.env.SUPBUDDY_ASKPASS || process.env.SUDO_ASKPASS;
     let cmd;
     let args;
-    const env2 = { ...process.env };
+    const env3 = { ...process.env };
     if (askpass) {
-      env2.SUDO_ASKPASS = askpass;
+      env3.SUDO_ASKPASS = askpass;
       cmd = "sudo";
       args = ["-A", "bash", "-c", command];
     } else if (process.stdin.isTTY) {
@@ -99,7 +99,7 @@ function makeElevate(quiet) {
     }
     try {
       await new Promise((resolve, reject) => {
-        const child = spawn(cmd, args, { stdio: "inherit", env: env2 });
+        const child = spawn(cmd, args, { stdio: "inherit", env: env3 });
         child.on("error", reject);
         child.on(
           "exit",
@@ -166,9 +166,9 @@ var init_host_cli = __esm({
   }
 });
-// ../../node_modules/accepts/node_modules/negotiator/lib/charset.js
+// ../../node_modules/.pnpm/negotiator@0.6.3/node_modules/negotiator/lib/charset.js
 var require_charset = __commonJS({
-  "../../node_modules/accepts/node_modules/negotiator/lib/charset.js"(exports, module) {
+  "../../node_modules/.pnpm/negotiator@0.6.3/node_modules/negotiator/lib/charset.js"(exports, module) {
     "use strict";
     module.exports = preferredCharsets;
     module.exports.preferredCharsets = preferredCharsets;
@@ -253,9 +253,9 @@ var require_charset = __commonJS({
   }
 });
-// ../../node_modules/accepts/node_modules/negotiator/lib/encoding.js
+// ../../node_modules/.pnpm/negotiator@0.6.3/node_modules/negotiator/lib/encoding.js
 var require_encoding = __commonJS({
-  "../../node_modules/accepts/node_modules/negotiator/lib/encoding.js"(exports, module) {
+  "../../node_modules/.pnpm/negotiator@0.6.3/node_modules/negotiator/lib/encoding.js"(exports, module) {
     "use strict";
     module.exports = preferredEncodings;
     module.exports.preferredEncodings = preferredEncodings;
@@ -351,9 +351,9 @@ var require_encoding = __commonJS({
   }
 });
-// ../../node_modules/accepts/node_modules/negotiator/lib/language.js
+// ../../node_modules/.pnpm/negotiator@0.6.3/node_modules/negotiator/lib/language.js
 var require_language = __commonJS({
-  "../../node_modules/accepts/node_modules/negotiator/lib/language.js"(exports, module) {
+  "../../node_modules/.pnpm/negotiator@0.6.3/node_modules/negotiator/lib/language.js"(exports, module) {
     "use strict";
     module.exports = preferredLanguages;
     module.exports.preferredLanguages = preferredLanguages;
@@ -446,9 +446,9 @@ var require_language = __commonJS({
   }
 });
-// ../../node_modules/accepts/node_modules/negotiator/lib/mediaType.js
+// ../../node_modules/.pnpm/negotiator@0.6.3/node_modules/negotiator/lib/mediaType.js
 var require_mediaType = __commonJS({
-  "../../node_modules/accepts/node_modules/negotiator/lib/mediaType.js"(exports, module) {
+  "../../node_modules/.pnpm/negotiator@0.6.3/node_modules/negotiator/lib/mediaType.js"(exports, module) {
     "use strict";
     module.exports = preferredMediaTypes;
     module.exports.preferredMediaTypes = preferredMediaTypes;
@@ -608,9 +608,9 @@ var require_mediaType = __commonJS({
   }
 });
-// ../../node_modules/accepts/node_modules/negotiator/index.js
+// ../../node_modules/.pnpm/negotiator@0.6.3/node_modules/negotiator/index.js
 var require_negotiator = __commonJS({
-  "../../node_modules/accepts/node_modules/negotiator/index.js"(exports, module) {
+  "../../node_modules/.pnpm/negotiator@0.6.3/node_modules/negotiator/index.js"(exports, module) {
     "use strict";
     var preferredCharsets = require_charset();
     var preferredEncodings = require_encoding();
@@ -663,9 +663,9 @@ var require_negotiator = __commonJS({
   }
 });
-// ../../node_modules/mime-db/db.json
+// ../../node_modules/.pnpm/mime-db@1.52.0/node_modules/mime-db/db.json
 var require_db = __commonJS({
-  "../../node_modules/mime-db/db.json"(exports, module) {
+  "../../node_modules/.pnpm/mime-db@1.52.0/node_modules/mime-db/db.json"(exports, module) {
     module.exports = {
       "application/1d-interleaved-parityfec": {
         source: "iana"
@@ -9188,17 +9188,17 @@ var require_db = __commonJS({
   }
 });
-// ../../node_modules/mime-db/index.js
+// ../../node_modules/.pnpm/mime-db@1.52.0/node_modules/mime-db/index.js
 var require_mime_db = __commonJS({
-  "../../node_modules/mime-db/index.js"(exports, module) {
+  "../../node_modules/.pnpm/mime-db@1.52.0/node_modules/mime-db/index.js"(exports, module) {
     "use strict";
     module.exports = require_db();
   }
 });
-// ../../node_modules/accepts/node_modules/mime-types/index.js
+// ../../node_modules/.pnpm/mime-types@2.1.35/node_modules/mime-types/index.js
 var require_mime_types = __commonJS({
-  "../../node_modules/accepts/node_modules/mime-types/index.js"(exports) {
+  "../../node_modules/.pnpm/mime-types@2.1.35/node_modules/mime-types/index.js"(exports) {
     "use strict";
     var db = require_mime_db();
     var extname = __require("path").extname;
@@ -9251,11 +9251,11 @@ var require_mime_types = __commonJS({
       }
       return exts[0];
     }
-    function lookup(path12) {
-      if (!path12 || typeof path12 !== "string") {
+    function lookup(path13) {
+      if (!path13 || typeof path13 !== "string") {
         return false;
       }
-      var extension2 = extname("x." + path12).toLowerCase().substr(1);
+      var extension2 = extname("x." + path13).toLowerCase().substr(1);
       if (!extension2) {
         return false;
       }
@@ -9286,9 +9286,9 @@ var require_mime_types = __commonJS({
   }
 });
-// ../../node_modules/accepts/index.js
+// ../../node_modules/.pnpm/accepts@1.3.8/node_modules/accepts/index.js
 var require_accepts = __commonJS({
-  "../../node_modules/accepts/index.js"(exports, module) {
+  "../../node_modules/.pnpm/accepts@1.3.8/node_modules/accepts/index.js"(exports, module) {
     "use strict";
     var Negotiator = require_negotiator();
     var mime = require_mime_types();
@@ -9367,9 +9367,9 @@ var require_accepts = __commonJS({
   }
 });
-// ../../node_modules/base64id/lib/base64id.js
+// ../../node_modules/.pnpm/base64id@2.0.0/node_modules/base64id/lib/base64id.js
 var require_base64id = __commonJS({
-  "../../node_modules/base64id/lib/base64id.js"(exports, module) {
+  "../../node_modules/.pnpm/base64id@2.0.0/node_modules/base64id/lib/base64id.js"(exports, module) {
     "use strict";
     var crypto2 = __require("crypto");
     var Base64Id = function() {
@@ -9430,9 +9430,9 @@ var require_base64id = __commonJS({
   }
 });
-// ../../node_modules/engine.io-parser/build/cjs/commons.js
+// ../../node_modules/.pnpm/engine.io-parser@5.2.3/node_modules/engine.io-parser/build/cjs/commons.js
 var require_commons = __commonJS({
-  "../../node_modules/engine.io-parser/build/cjs/commons.js"(exports) {
+  "../../node_modules/.pnpm/engine.io-parser@5.2.3/node_modules/engine.io-parser/build/cjs/commons.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.ERROR_PACKET = exports.PACKET_TYPES_REVERSE = exports.PACKET_TYPES = void 0;
@@ -9455,9 +9455,9 @@ var require_commons = __commonJS({
   }
 });
-// ../../node_modules/engine.io-parser/build/cjs/encodePacket.js
+// ../../node_modules/.pnpm/engine.io-parser@5.2.3/node_modules/engine.io-parser/build/cjs/encodePacket.js
 var require_encodePacket = __commonJS({
-  "../../node_modules/engine.io-parser/build/cjs/encodePacket.js"(exports) {
+  "../../node_modules/.pnpm/engine.io-parser@5.2.3/node_modules/engine.io-parser/build/cjs/encodePacket.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.encodePacket = void 0;
@@ -9494,9 +9494,9 @@ var require_encodePacket = __commonJS({
   }
 });
-// ../../node_modules/engine.io-parser/build/cjs/decodePacket.js
+// ../../node_modules/.pnpm/engine.io-parser@5.2.3/node_modules/engine.io-parser/build/cjs/decodePacket.js
 var require_decodePacket = __commonJS({
-  "../../node_modules/engine.io-parser/build/cjs/decodePacket.js"(exports) {
+  "../../node_modules/.pnpm/engine.io-parser@5.2.3/node_modules/engine.io-parser/build/cjs/decodePacket.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.decodePacket = void 0;
@@ -9549,9 +9549,9 @@ var require_decodePacket = __commonJS({
   }
 });
-// ../../node_modules/engine.io-parser/build/cjs/index.js
+// ../../node_modules/.pnpm/engine.io-parser@5.2.3/node_modules/engine.io-parser/build/cjs/index.js
 var require_cjs = __commonJS({
-  "../../node_modules/engine.io-parser/build/cjs/index.js"(exports) {
+  "../../node_modules/.pnpm/engine.io-parser@5.2.3/node_modules/engine.io-parser/build/cjs/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.decodePayload = exports.decodePacket = exports.encodePayload = exports.encodePacket = exports.protocol = void 0;
@@ -9711,9 +9711,9 @@ var require_cjs = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/parser-v3/utf8.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/parser-v3/utf8.js
 var require_utf8 = __commonJS({
-  "../../node_modules/engine.io/build/parser-v3/utf8.js"(exports, module) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/parser-v3/utf8.js"(exports, module) {
     "use strict";
     var stringFromCharCode = String.fromCharCode;
     function ucs2decode(string) {
@@ -9883,9 +9883,9 @@ var require_utf8 = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/parser-v3/index.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/parser-v3/index.js
 var require_parser_v3 = __commonJS({
-  "../../node_modules/engine.io/build/parser-v3/index.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/parser-v3/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.packets = exports.protocol = void 0;
@@ -10172,9 +10172,9 @@ var require_parser_v3 = __commonJS({
   }
 });
-// ../../node_modules/ms/index.js
+// ../../node_modules/.pnpm/ms@2.1.3/node_modules/ms/index.js
 var require_ms = __commonJS({
-  "../../node_modules/ms/index.js"(exports, module) {
+  "../../node_modules/.pnpm/ms@2.1.3/node_modules/ms/index.js"(exports, module) {
     "use strict";
     var s = 1e3;
     var m = s * 60;
@@ -10289,11 +10289,11 @@ var require_ms = __commonJS({
   }
 });
-// ../../node_modules/debug/src/common.js
+// ../../node_modules/.pnpm/debug@4.4.3_supports-color@10.2.2/node_modules/debug/src/common.js
 var require_common = __commonJS({
-  "../../node_modules/debug/src/common.js"(exports, module) {
+  "../../node_modules/.pnpm/debug@4.4.3_supports-color@10.2.2/node_modules/debug/src/common.js"(exports, module) {
     "use strict";
-    function setup(env2) {
+    function setup(env3) {
       createDebug.debug = createDebug;
       createDebug.default = createDebug;
       createDebug.coerce = coerce2;
@@ -10302,8 +10302,8 @@ var require_common = __commonJS({
       createDebug.enabled = enabled;
       createDebug.humanize = require_ms();
       createDebug.destroy = destroy;
-      Object.keys(env2).forEach((key) => {
-        createDebug[key] = env2[key];
+      Object.keys(env3).forEach((key) => {
+        createDebug[key] = env3[key];
       });
       createDebug.names = [];
       createDebug.skips = [];
@@ -10467,9 +10467,9 @@ var require_common = __commonJS({
   }
 });
-// ../../node_modules/debug/src/browser.js
+// ../../node_modules/.pnpm/debug@4.4.3_supports-color@10.2.2/node_modules/debug/src/browser.js
 var require_browser = __commonJS({
-  "../../node_modules/debug/src/browser.js"(exports, module) {
+  "../../node_modules/.pnpm/debug@4.4.3_supports-color@10.2.2/node_modules/debug/src/browser.js"(exports, module) {
     "use strict";
     exports.formatArgs = formatArgs;
     exports.save = save;
@@ -10638,138 +10638,161 @@ var require_browser = __commonJS({
   }
 });
-// ../../node_modules/has-flag/index.js
-var require_has_flag = __commonJS({
-  "../../node_modules/has-flag/index.js"(exports, module) {
-    "use strict";
-    module.exports = (flag, argv = process.argv) => {
-      const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
-      const position = argv.indexOf(prefix + flag);
-      const terminatorPosition = argv.indexOf("--");
-      return position !== -1 && (terminatorPosition === -1 || position < terminatorPosition);
-    };
-  }
+// ../../node_modules/.pnpm/supports-color@10.2.2/node_modules/supports-color/index.js
+var supports_color_exports = {};
+__export(supports_color_exports, {
+  createSupportsColor: () => createSupportsColor,
+  default: () => supports_color_default
 });
-// ../../node_modules/supports-color/index.js
-var require_supports_color = __commonJS({
-  "../../node_modules/supports-color/index.js"(exports, module) {
-    "use strict";
-    var os7 = __require("os");
-    var tty2 = __require("tty");
-    var hasFlag3 = require_has_flag();
-    var { env: env2 } = process;
-    var flagForceColor2;
-    if (hasFlag3("no-color") || hasFlag3("no-colors") || hasFlag3("color=false") || hasFlag3("color=never")) {
-      flagForceColor2 = 0;
-    } else if (hasFlag3("color") || hasFlag3("colors") || hasFlag3("color=true") || hasFlag3("color=always")) {
-      flagForceColor2 = 1;
-    }
-    function envForceColor2() {
-      if ("FORCE_COLOR" in env2) {
-        if (env2.FORCE_COLOR === "true") {
-          return 1;
-        }
-        if (env2.FORCE_COLOR === "false") {
-          return 0;
-        }
-        return env2.FORCE_COLOR.length === 0 ? 1 : Math.min(Number.parseInt(env2.FORCE_COLOR, 10), 3);
-      }
+import process2 from "process";
+import os from "os";
+import tty from "tty";
+function hasFlag(flag, argv = globalThis.Deno ? globalThis.Deno.args : process2.argv) {
+  const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
+  const position = argv.indexOf(prefix + flag);
+  const terminatorPosition = argv.indexOf("--");
+  return position !== -1 && (terminatorPosition === -1 || position < terminatorPosition);
+}
+function envForceColor() {
+  if (!("FORCE_COLOR" in env)) {
+    return;
+  }
+  if (env.FORCE_COLOR === "true") {
+    return 1;
+  }
+  if (env.FORCE_COLOR === "false") {
+    return 0;
+  }
+  if (env.FORCE_COLOR.length === 0) {
+    return 1;
+  }
+  const level = Math.min(Number.parseInt(env.FORCE_COLOR, 10), 3);
+  if (![0, 1, 2, 3].includes(level)) {
+    return;
+  }
+  return level;
+}
+function translateLevel(level) {
+  if (level === 0) {
+    return false;
+  }
+  return {
+    level,
+    hasBasic: true,
+    has256: level >= 2,
+    has16m: level >= 3
+  };
+}
+function _supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
+  const noFlagForceColor = envForceColor();
+  if (noFlagForceColor !== void 0) {
+    flagForceColor = noFlagForceColor;
+  }
+  const forceColor = sniffFlags ? flagForceColor : noFlagForceColor;
+  if (forceColor === 0) {
+    return 0;
+  }
+  if (sniffFlags) {
+    if (hasFlag("color=16m") || hasFlag("color=full") || hasFlag("color=truecolor")) {
+      return 3;
     }
-    function translateLevel2(level) {
-      if (level === 0) {
-        return false;
-      }
-      return {
-        level,
-        hasBasic: true,
-        has256: level >= 2,
-        has16m: level >= 3
-      };
+    if (hasFlag("color=256")) {
+      return 2;
     }
-    function supportsColor2(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
-      const noFlagForceColor = envForceColor2();
-      if (noFlagForceColor !== void 0) {
-        flagForceColor2 = noFlagForceColor;
-      }
-      const forceColor = sniffFlags ? flagForceColor2 : noFlagForceColor;
-      if (forceColor === 0) {
-        return 0;
-      }
-      if (sniffFlags) {
-        if (hasFlag3("color=16m") || hasFlag3("color=full") || hasFlag3("color=truecolor")) {
-          return 3;
-        }
-        if (hasFlag3("color=256")) {
-          return 2;
-        }
-      }
-      if (haveStream && !streamIsTTY && forceColor === void 0) {
-        return 0;
-      }
-      const min = forceColor || 0;
-      if (env2.TERM === "dumb") {
-        return min;
-      }
-      if (process.platform === "win32") {
-        const osRelease = os7.release().split(".");
-        if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
-          return Number(osRelease[2]) >= 14931 ? 3 : 2;
-        }
-        return 1;
-      }
-      if ("CI" in env2) {
-        if (["TRAVIS", "CIRCLECI", "APPVEYOR", "GITLAB_CI", "GITHUB_ACTIONS", "BUILDKITE", "DRONE"].some((sign) => sign in env2) || env2.CI_NAME === "codeship") {
-          return 1;
-        }
-        return min;
-      }
-      if ("TEAMCITY_VERSION" in env2) {
-        return /^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(env2.TEAMCITY_VERSION) ? 1 : 0;
-      }
-      if (env2.COLORTERM === "truecolor") {
-        return 3;
-      }
-      if ("TERM_PROGRAM" in env2) {
-        const version = Number.parseInt((env2.TERM_PROGRAM_VERSION || "").split(".")[0], 10);
-        switch (env2.TERM_PROGRAM) {
-          case "iTerm.app":
-            return version >= 3 ? 3 : 2;
-          case "Apple_Terminal":
-            return 2;
-        }
+  }
+  if ("TF_BUILD" in env && "AGENT_NAME" in env) {
+    return 1;
+  }
+  if (haveStream && !streamIsTTY && forceColor === void 0) {
+    return 0;
+  }
+  const min = forceColor || 0;
+  if (env.TERM === "dumb") {
+    return min;
+  }
+  if (process2.platform === "win32") {
+    const osRelease = os.release().split(".");
+    if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
+      return Number(osRelease[2]) >= 14931 ? 3 : 2;
+    }
+    return 1;
+  }
+  if ("CI" in env) {
+    if (["GITHUB_ACTIONS", "GITEA_ACTIONS", "CIRCLECI"].some((key) => key in env)) {
+      return 3;
+    }
+    if (["TRAVIS", "APPVEYOR", "GITLAB_CI", "BUILDKITE", "DRONE"].some((sign) => sign in env) || env.CI_NAME === "codeship") {
+      return 1;
+    }
+    return min;
+  }
+  if ("TEAMCITY_VERSION" in env) {
+    return /^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(env.TEAMCITY_VERSION) ? 1 : 0;
+  }
+  if (env.COLORTERM === "truecolor") {
+    return 3;
+  }
+  if (env.TERM === "xterm-kitty") {
+    return 3;
+  }
+  if (env.TERM === "xterm-ghostty") {
+    return 3;
+  }
+  if (env.TERM === "wezterm") {
+    return 3;
+  }
+  if ("TERM_PROGRAM" in env) {
+    const version = Number.parseInt((env.TERM_PROGRAM_VERSION || "").split(".")[0], 10);
+    switch (env.TERM_PROGRAM) {
+      case "iTerm.app": {
+        return version >= 3 ? 3 : 2;
       }
-      if (/-256(color)?$/i.test(env2.TERM)) {
+      case "Apple_Terminal": {
         return 2;
       }
-      if (/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(env2.TERM)) {
-        return 1;
-      }
-      if ("COLORTERM" in env2) {
-        return 1;
-      }
-      return min;
-    }
-    function getSupportLevel(stream, options = {}) {
-      const level = supportsColor2(stream, {
-        streamIsTTY: stream && stream.isTTY,
-        ...options
-      });
-      return translateLevel2(level);
     }
-    module.exports = {
-      supportsColor: getSupportLevel,
-      stdout: getSupportLevel({ isTTY: tty2.isatty(1) }),
-      stderr: getSupportLevel({ isTTY: tty2.isatty(2) })
+  }
+  if (/-256(color)?$/i.test(env.TERM)) {
+    return 2;
+  }
+  if (/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(env.TERM)) {
+    return 1;
+  }
+  if ("COLORTERM" in env) {
+    return 1;
+  }
+  return min;
+}
+function createSupportsColor(stream, options = {}) {
+  const level = _supportsColor(stream, {
+    streamIsTTY: stream && stream.isTTY,
+    ...options
+  });
+  return translateLevel(level);
+}
+var env, flagForceColor, supportsColor, supports_color_default;
+var init_supports_color = __esm({
+  "../../node_modules/.pnpm/supports-color@10.2.2/node_modules/supports-color/index.js"() {
+    "use strict";
+    ({ env } = process2);
+    if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false") || hasFlag("color=never")) {
+      flagForceColor = 0;
+    } else if (hasFlag("color") || hasFlag("colors") || hasFlag("color=true") || hasFlag("color=always")) {
+      flagForceColor = 1;
+    }
+    supportsColor = {
+      stdout: createSupportsColor({ isTTY: tty.isatty(1) }),
+      stderr: createSupportsColor({ isTTY: tty.isatty(2) })
     };
+    supports_color_default = supportsColor;
   }
 });
-// ../../node_modules/debug/src/node.js
+// ../../node_modules/.pnpm/debug@4.4.3_supports-color@10.2.2/node_modules/debug/src/node.js
 var require_node = __commonJS({
-  "../../node_modules/debug/src/node.js"(exports, module) {
+  "../../node_modules/.pnpm/debug@4.4.3_supports-color@10.2.2/node_modules/debug/src/node.js"(exports, module) {
     "use strict";
-    var tty2 = __require("tty");
+    var tty3 = __require("tty");
     var util2 = __require("util");
     exports.init = init;
     exports.log = log;
@@ -10784,8 +10807,8 @@ var require_node = __commonJS({
     );
     exports.colors = [6, 2, 3, 4, 5, 1];
     try {
-      const supportsColor2 = require_supports_color();
-      if (supportsColor2 && (supportsColor2.stderr || supportsColor2).level >= 2) {
+      const supportsColor3 = (init_supports_color(), __toCommonJS(supports_color_exports));
+      if (supportsColor3 && (supportsColor3.stderr || supportsColor3).level >= 2) {
         exports.colors = [
           20,
           21,
@@ -10887,7 +10910,7 @@ var require_node = __commonJS({
       return obj;
     }, {});
     function useColors() {
-      return "colors" in exports.inspectOpts ? Boolean(exports.inspectOpts.colors) : tty2.isatty(process.stderr.fd);
+      return "colors" in exports.inspectOpts ? Boolean(exports.inspectOpts.colors) : tty3.isatty(process.stderr.fd);
     }
     function formatArgs(args) {
       const { namespace: name, useColors: useColors2 } = this;
@@ -10940,9 +10963,9 @@ var require_node = __commonJS({
   }
 });
-// ../../node_modules/debug/src/index.js
+// ../../node_modules/.pnpm/debug@4.4.3_supports-color@10.2.2/node_modules/debug/src/index.js
 var require_src = __commonJS({
-  "../../node_modules/debug/src/index.js"(exports, module) {
+  "../../node_modules/.pnpm/debug@4.4.3_supports-color@10.2.2/node_modules/debug/src/index.js"(exports, module) {
     "use strict";
     if (typeof process === "undefined" || process.type === "renderer" || process.browser === true || process.__nwjs) {
       module.exports = require_browser();
@@ -10952,9 +10975,9 @@ var require_src = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/transport.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transport.js
 var require_transport = __commonJS({
-  "../../node_modules/engine.io/build/transport.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transport.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.Transport = void 0;
@@ -11064,9 +11087,9 @@ var require_transport = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/transports/polling.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports/polling.js
 var require_polling = __commonJS({
-  "../../node_modules/engine.io/build/transports/polling.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports/polling.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.Polling = void 0;
@@ -11157,7 +11180,8 @@ var require_polling = __commonJS({
         }
         const isBinary = "application/octet-stream" === req.headers["content-type"];
         if (isBinary && this.protocol === 4) {
-          return this.onError("invalid content");
+          this.onError("invalid content");
+          return res.writeHead(400).end();
         }
         this.dataReq = req;
         this.dataRes = res;
@@ -11380,9 +11404,9 @@ var require_polling = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/transports/polling-jsonp.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports/polling-jsonp.js
 var require_polling_jsonp = __commonJS({
-  "../../node_modules/engine.io/build/transports/polling-jsonp.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports/polling-jsonp.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.JSONP = void 0;
@@ -11418,9 +11442,9 @@ var require_polling_jsonp = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/transports/websocket.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports/websocket.js
 var require_websocket = __commonJS({
-  "../../node_modules/engine.io/build/transports/websocket.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports/websocket.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.WebSocket = void 0;
@@ -11510,9 +11534,9 @@ var require_websocket = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/transports/webtransport.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports/webtransport.js
 var require_webtransport = __commonJS({
-  "../../node_modules/engine.io/build/transports/webtransport.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports/webtransport.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.WebTransport = void 0;
@@ -11574,9 +11598,9 @@ var require_webtransport = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/transports/index.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports/index.js
 var require_transports = __commonJS({
-  "../../node_modules/engine.io/build/transports/index.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     var polling_1 = require_polling();
@@ -11599,9 +11623,9 @@ var require_transports = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/socket.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/socket.js
 var require_socket = __commonJS({
-  "../../node_modules/engine.io/build/socket.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/socket.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.Socket = void 0;
@@ -12035,9 +12059,9 @@ var require_socket = __commonJS({
   }
 });
-// ../../node_modules/cookie/index.js
+// ../../node_modules/.pnpm/cookie@0.7.2/node_modules/cookie/index.js
 var require_cookie = __commonJS({
-  "../../node_modules/cookie/index.js"(exports) {
+  "../../node_modules/.pnpm/cookie@0.7.2/node_modules/cookie/index.js"(exports) {
     "use strict";
     exports.parse = parse;
     exports.serialize = serialize;
@@ -12201,9 +12225,9 @@ var require_cookie = __commonJS({
   }
 });
-// ../../node_modules/object-assign/index.js
+// ../../node_modules/.pnpm/object-assign@4.1.1/node_modules/object-assign/index.js
 var require_object_assign = __commonJS({
-  "../../node_modules/object-assign/index.js"(exports, module) {
+  "../../node_modules/.pnpm/object-assign@4.1.1/node_modules/object-assign/index.js"(exports, module) {
     "use strict";
     var getOwnPropertySymbols = Object.getOwnPropertySymbols;
     var hasOwnProperty = Object.prototype.hasOwnProperty;
@@ -12271,9 +12295,9 @@ var require_object_assign = __commonJS({
   }
 });
-// ../../node_modules/vary/index.js
+// ../../node_modules/.pnpm/vary@1.1.2/node_modules/vary/index.js
 var require_vary = __commonJS({
-  "../../node_modules/vary/index.js"(exports, module) {
+  "../../node_modules/.pnpm/vary@1.1.2/node_modules/vary/index.js"(exports, module) {
     "use strict";
     module.exports = vary;
     module.exports.append = append;
@@ -12344,9 +12368,9 @@ var require_vary = __commonJS({
   }
 });
-// ../../node_modules/cors/lib/index.js
+// ../../node_modules/.pnpm/cors@2.8.6/node_modules/cors/lib/index.js
 var require_lib = __commonJS({
-  "../../node_modules/cors/lib/index.js"(exports, module) {
+  "../../node_modules/.pnpm/cors@2.8.6/node_modules/cors/lib/index.js"(exports, module) {
     "use strict";
     (function() {
       "use strict";
@@ -12553,9 +12577,9 @@ var require_lib = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/server.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/server.js
 var require_server = __commonJS({
-  "../../node_modules/engine.io/build/server.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/server.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.Server = exports.BaseServer = void 0;
@@ -12579,6 +12603,9 @@ var require_server = __commonJS({
       } catch (e) {
       }
     }
+    function hasOwn(obj, key) {
+      return Object.prototype.hasOwnProperty.call(obj, key);
+    }
     var BaseServer = class extends events_1.EventEmitter {
       /**
        * Server constructor.
@@ -12609,8 +12636,7 @@ var require_server = __commonJS({
           this.opts.cookie = Object.assign({
             name: "io",
             path: "/",
-            // @ts-ignore
-            httpOnly: opts.cookie.path !== false,
+            httpOnly: true,
             sameSite: "lax"
           }, opts.cookie);
         }
@@ -12630,11 +12656,11 @@ var require_server = __commonJS({
        * @protected
        */
       _computePath(options) {
-        let path12 = (options.path || "/engine.io").replace(/\/$/, "");
+        let path13 = (options.path || "/engine.io").replace(/\/$/, "");
         if (options.addTrailingSlash !== false) {
-          path12 += "/";
+          path13 += "/";
         }
-        return path12;
+        return path13;
       }
       /**
        * Returns a list of available transports for upgrade given a certain transport.
@@ -12671,7 +12697,7 @@ var require_server = __commonJS({
         }
         const sid = req._query.sid;
         if (sid) {
-          if (!this.clients.hasOwnProperty(sid)) {
+          if (!hasOwn(this.clients, sid)) {
             debug('unknown sid "%s"', sid);
             return fn(Server2.errors.UNKNOWN_SID, {
               sid
@@ -12757,9 +12783,9 @@ var require_server = __commonJS({
        */
       close() {
         debug("closing all open clients");
-        for (let i in this.clients) {
-          if (this.clients.hasOwnProperty(i)) {
-            this.clients[i].close(true);
+        for (const sid in this.clients) {
+          if (hasOwn(this.clients, sid)) {
+            this.clients[sid].close(true);
           }
         }
         this.cleanup();
@@ -12863,6 +12889,10 @@ var require_server = __commonJS({
         return transport;
       }
       async onWebTransportSession(session) {
+        if (this.middlewares.length > 0) {
+          debug("closing session since WebTransport is not compatible with middlewares");
+          return session.close();
+        }
         const timeout = setTimeout(() => {
           debug("the client failed to establish a bidirectional stream in the given period");
           session.close();
@@ -12870,21 +12900,32 @@ var require_server = __commonJS({
         const streamReader = session.incomingBidirectionalStreams.getReader();
         const result = await streamReader.read();
         if (result.done) {
+          clearTimeout(timeout);
           debug("session is closed");
           return;
         }
         const stream = result.value;
         const transformStream = (0, engine_io_parser_1.createPacketDecoderStream)(this.opts.maxHttpBufferSize, "nodebuffer");
         const reader = stream.readable.pipeThrough(transformStream).getReader();
+        const closeSession = async () => {
+          try {
+            await reader.cancel();
+          } catch (e) {
+            debug("error while canceling WebTransport stream reader: %s", e.message);
+          }
+          reader.releaseLock();
+          session.close();
+        };
         const { value, done } = await reader.read();
+        clearTimeout(timeout);
         if (done) {
           debug("stream is closed");
+          reader.releaseLock();
           return;
         }
-        clearTimeout(timeout);
         if (value.type !== "open") {
           debug("invalid WebTransport handshake");
-          return session.close();
+          return closeSession();
         }
         if (value.data === void 0) {
           const transport = new webtransport_1.WebTransport(session, stream, reader);
@@ -12901,20 +12942,20 @@ var require_server = __commonJS({
           return;
         }
         const sid = parseSessionId(value.data);
-        if (!sid) {
+        if (!sid || !hasOwn(this.clients, sid)) {
           debug("invalid WebTransport handshake");
-          return session.close();
+          return closeSession();
         }
         const client = this.clients[sid];
         if (!client) {
           debug("upgrade attempt for closed client");
-          session.close();
+          return closeSession();
         } else if (client.upgrading) {
           debug("transport has already been trying to upgrade");
-          session.close();
+          return closeSession();
         } else if (client.upgraded) {
           debug("transport had already been upgraded");
-          session.close();
+          return closeSession();
         } else {
           debug("upgrading existing transport");
           const transport = new webtransport_1.WebTransport(session, stream, reader);
@@ -13018,17 +13059,18 @@ var require_server = __commonJS({
       /**
        * Handles an Engine.IO HTTP request.
        *
-       * @param {EngineRequest} req
+       * @param {IncomingMessage} req
        * @param {ServerResponse} res
        */
       handleRequest(req, res) {
         debug('handling "%s" http request "%s"', req.method, req.url);
-        this.prepare(req);
-        req.res = res;
+        const engineRequest = req;
+        this.prepare(engineRequest);
+        engineRequest.res = res;
         const callback = (errorCode, errorContext) => {
           if (errorCode !== void 0) {
             this.emit("connection_error", {
-              req,
+              req: engineRequest,
               code: errorCode,
               message: _Server.errorMessages[errorCode],
               context: errorContext
@@ -13036,19 +13078,19 @@ var require_server = __commonJS({
             abortRequest(res, errorCode, errorContext);
             return;
           }
-          if (req._query.sid) {
+          if (engineRequest._query.sid) {
             debug("setting new request for existing client");
-            this.clients[req._query.sid].transport.onRequest(req);
+            this.clients[engineRequest._query.sid].transport.onRequest(engineRequest);
           } else {
             const closeConnection = (errorCode2, errorContext2) => abortRequest(res, errorCode2, errorContext2);
-            this.handshake(req._query.transport, req, closeConnection);
+            this.handshake(engineRequest._query.transport, engineRequest, closeConnection);
           }
         };
-        this._applyMiddlewares(req, res, (err) => {
+        this._applyMiddlewares(engineRequest, res, (err) => {
           if (err) {
             callback(_Server.errors.BAD_REQUEST, { name: "MIDDLEWARE_FAILURE" });
           } else {
-            this.verify(req, false, callback);
+            this.verify(engineRequest, false, callback);
           }
         });
       }
@@ -13056,12 +13098,13 @@ var require_server = __commonJS({
        * Handles an Engine.IO HTTP Upgrade.
        */
       handleUpgrade(req, socket, upgradeHead) {
-        this.prepare(req);
-        const res = new WebSocketResponse(req, socket);
+        const engineRequest = req;
+        this.prepare(engineRequest);
+        const res = new WebSocketResponse(engineRequest, socket);
         const callback = (errorCode, errorContext) => {
           if (errorCode !== void 0) {
             this.emit("connection_error", {
-              req,
+              req: engineRequest,
               code: errorCode,
               message: _Server.errorMessages[errorCode],
               context: errorContext
@@ -13072,15 +13115,15 @@ var require_server = __commonJS({
           const head = Buffer.from(upgradeHead);
           upgradeHead = null;
           res.writeHead();
-          this.ws.handleUpgrade(req, socket, head, (websocket) => {
-            this.onWebSocket(req, socket, websocket);
+          this.ws.handleUpgrade(engineRequest, socket, head, (websocket) => {
+            this.onWebSocket(engineRequest, socket, websocket);
           });
         };
-        this._applyMiddlewares(req, res, (err) => {
+        this._applyMiddlewares(engineRequest, res, (err) => {
           if (err) {
             callback(_Server.errors.BAD_REQUEST, { name: "MIDDLEWARE_FAILURE" });
           } else {
-            this.verify(req, true, callback);
+            this.verify(engineRequest, true, callback);
           }
         });
       }
@@ -13133,10 +13176,10 @@ var require_server = __commonJS({
        * @param {Object} options
        */
       attach(server, options = {}) {
-        const path12 = this._computePath(options);
+        const path13 = this._computePath(options);
         const destroyUpgradeTimeout = options.destroyUpgradeTimeout || 1e3;
         function check(req) {
-          return path12 === req.url.slice(0, path12.length);
+          return path13 === req.url.slice(0, path13.length);
         }
         const listeners = server.listeners("request").slice(0);
         server.removeAllListeners("request");
@@ -13144,7 +13187,7 @@ var require_server = __commonJS({
         server.on("listening", this.init.bind(this));
         server.on("request", (req, res) => {
           if (check(req)) {
-            debug('intercepting request for path "%s"', path12);
+            debug('intercepting request for path "%s"', path13);
             this.handleRequest(req, res);
           } else {
             let i = 0;
@@ -13498,9 +13541,9 @@ var require_server = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/transports-uws/polling.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports-uws/polling.js
 var require_polling2 = __commonJS({
-  "../../node_modules/engine.io/build/transports-uws/polling.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports-uws/polling.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.Polling = void 0;
@@ -13603,7 +13646,8 @@ var require_polling2 = __commonJS({
         }
         const isBinary = "application/octet-stream" === req.headers["content-type"];
         if (isBinary && this.protocol === 4) {
-          return this.onError("invalid content");
+          this.onError("invalid content");
+          return res.writeStatus("400 Bad Request").end();
         }
         this.dataReq = req;
         this.dataRes = res;
@@ -13848,9 +13892,9 @@ var require_polling2 = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/transports-uws/websocket.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports-uws/websocket.js
 var require_websocket2 = __commonJS({
-  "../../node_modules/engine.io/build/transports-uws/websocket.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports-uws/websocket.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.WebSocket = void 0;
@@ -13924,9 +13968,9 @@ var require_websocket2 = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/transports-uws/index.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports-uws/index.js
 var require_transports_uws = __commonJS({
-  "../../node_modules/engine.io/build/transports-uws/index.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/transports-uws/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     var polling_1 = require_polling2();
@@ -13938,9 +13982,9 @@ var require_transports_uws = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/userver.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/userver.js
 var require_userver = __commonJS({
-  "../../node_modules/engine.io/build/userver.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/userver.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.uServer = void 0;
@@ -13983,8 +14027,8 @@ var require_userver = __commonJS({
        * @param options
        */
       attach(app, options = {}) {
-        const path12 = this._computePath(options);
-        app.any(path12, this.handleRequest.bind(this)).ws(path12, {
+        const path13 = this._computePath(options);
+        app.any(path13, this.handleRequest.bind(this)).ws(path13, {
           compression: options.compression,
           idleTimeout: options.idleTimeout,
           maxBackpressure: options.maxBackpressure,
@@ -14084,7 +14128,16 @@ var require_userver = __commonJS({
               return;
             }
           }
+          const additionalHeaders = {};
+          const isInitialRequest = !id;
+          if (isInitialRequest) {
+            this.emit("initial_headers", additionalHeaders, req);
+          }
+          this.emit("headers", additionalHeaders, req);
           req.res.writeStatus("101 Switching Protocols");
+          Object.keys(additionalHeaders).forEach((key) => {
+            req.res.writeHeader(key, additionalHeaders[key]);
+          });
           res.upgrade({
             transport
           }, req.getHeader("sec-websocket-key"), req.getHeader("sec-websocket-protocol"), req.getHeader("sec-websocket-extensions"), context);
@@ -14196,9 +14249,9 @@ var require_userver = __commonJS({
   }
 });
-// ../../node_modules/engine.io/build/engine.io.js
+// ../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/engine.io.js
 var require_engine_io = __commonJS({
-  "../../node_modules/engine.io/build/engine.io.js"(exports) {
+  "../../node_modules/.pnpm/engine.io@6.6.9/node_modules/engine.io/build/engine.io.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.protocol = exports.Transport = exports.Socket = exports.uServer = exports.parser = exports.transports = exports.Server = void 0;
@@ -14248,7 +14301,7 @@ var require_engine_io = __commonJS({
   }
 });
-// ../../node_modules/@socket.io/component-emitter/lib/esm/index.js
+// ../../node_modules/.pnpm/@socket.io+component-emitter@3.1.2/node_modules/@socket.io/component-emitter/lib/esm/index.js
 var esm_exports = {};
 __export(esm_exports, {
   Emitter: () => Emitter
@@ -14263,7 +14316,7 @@ function mixin(obj) {
   return obj;
 }
 var init_esm = __esm({
-  "../../node_modules/@socket.io/component-emitter/lib/esm/index.js"() {
+  "../../node_modules/.pnpm/@socket.io+component-emitter@3.1.2/node_modules/@socket.io/component-emitter/lib/esm/index.js"() {
     "use strict";
     Emitter.prototype.on = Emitter.prototype.addEventListener = function(event, fn) {
       this._callbacks = this._callbacks || {};
@@ -14329,9 +14382,9 @@ var init_esm = __esm({
   }
 });
-// ../../node_modules/socket.io-parser/build/cjs/is-binary.js
+// ../../node_modules/.pnpm/socket.io-parser@4.2.6_supports-color@10.2.2/node_modules/socket.io-parser/build/cjs/is-binary.js
 var require_is_binary = __commonJS({
-  "../../node_modules/socket.io-parser/build/cjs/is-binary.js"(exports) {
+  "../../node_modules/.pnpm/socket.io-parser@4.2.6_supports-color@10.2.2/node_modules/socket.io-parser/build/cjs/is-binary.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.isBinary = isBinary;
@@ -14374,9 +14427,9 @@ var require_is_binary = __commonJS({
   }
 });
-// ../../node_modules/socket.io-parser/build/cjs/binary.js
+// ../../node_modules/.pnpm/socket.io-parser@4.2.6_supports-color@10.2.2/node_modules/socket.io-parser/build/cjs/binary.js
 var require_binary = __commonJS({
-  "../../node_modules/socket.io-parser/build/cjs/binary.js"(exports) {
+  "../../node_modules/.pnpm/socket.io-parser@4.2.6_supports-color@10.2.2/node_modules/socket.io-parser/build/cjs/binary.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.deconstructPacket = deconstructPacket;
@@ -14445,9 +14498,9 @@ var require_binary = __commonJS({
   }
 });
-// ../../node_modules/socket.io-parser/build/cjs/index.js
+// ../../node_modules/.pnpm/socket.io-parser@4.2.6_supports-color@10.2.2/node_modules/socket.io-parser/build/cjs/index.js
 var require_cjs2 = __commonJS({
-  "../../node_modules/socket.io-parser/build/cjs/index.js"(exports) {
+  "../../node_modules/.pnpm/socket.io-parser@4.2.6_supports-color@10.2.2/node_modules/socket.io-parser/build/cjs/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.Decoder = exports.Encoder = exports.PacketType = exports.protocol = void 0;
@@ -14548,12 +14601,13 @@ var require_cjs2 = __commonJS({
     var Decoder = class _Decoder extends component_emitter_1.Emitter {
       /**
        * Decoder constructor
-       *
-       * @param {function} reviver - custom reviver to pass down to JSON.stringify
        */
-      constructor(reviver) {
+      constructor(opts) {
         super();
-        this.reviver = reviver;
+        this.opts = Object.assign({
+          reviver: void 0,
+          maxAttachments: 10
+        }, typeof opts === "function" ? { reviver: opts } : opts);
       }
       /**
        * Decodes an encoded packet string into packet JSON.
@@ -14613,7 +14667,13 @@ var require_cjs2 = __commonJS({
           if (buf != Number(buf) || str.charAt(i) !== "-") {
             throw new Error("Illegal attachments");
           }
-          p.attachments = Number(buf);
+          const n = Number(buf);
+          if (!isInteger(n) || n < 0) {
+            throw new Error("Illegal attachments");
+          } else if (n > this.opts.maxAttachments) {
+            throw new Error("too many attachments");
+          }
+          p.attachments = n;
         }
         if ("/" === str.charAt(i + 1)) {
           const start = i + 1;
@@ -14655,7 +14715,7 @@ var require_cjs2 = __commonJS({
       }
       tryParse(str) {
         try {
-          return JSON.parse(str, this.reviver);
+          return JSON.parse(str, this.opts.reviver);
         } catch (e) {
           return false;
         }
@@ -14752,9 +14812,9 @@ var require_cjs2 = __commonJS({
   }
 });
-// ../../node_modules/socket.io/dist/client.js
+// ../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/client.js
 var require_client = __commonJS({
-  "../../node_modules/socket.io/dist/client.js"(exports) {
+  "../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/client.js"(exports) {
     "use strict";
     var __importDefault = exports && exports.__importDefault || function(mod) {
       return mod && mod.__esModule ? mod : { "default": mod };
@@ -15014,9 +15074,9 @@ var require_client = __commonJS({
   }
 });
-// ../../node_modules/socket.io/dist/typed-events.js
+// ../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/typed-events.js
 var require_typed_events = __commonJS({
-  "../../node_modules/socket.io/dist/typed-events.js"(exports) {
+  "../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/typed-events.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.StrictEventEmitter = void 0;
@@ -15088,9 +15148,9 @@ var require_typed_events = __commonJS({
   }
 });
-// ../../node_modules/socket.io/dist/socket-types.js
+// ../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/socket-types.js
 var require_socket_types = __commonJS({
-  "../../node_modules/socket.io/dist/socket-types.js"(exports) {
+  "../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/socket-types.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.RESERVED_EVENTS = void 0;
@@ -15105,9 +15165,9 @@ var require_socket_types = __commonJS({
   }
 });
-// ../../node_modules/socket.io/dist/broadcast-operator.js
+// ../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/broadcast-operator.js
 var require_broadcast_operator = __commonJS({
-  "../../node_modules/socket.io/dist/broadcast-operator.js"(exports) {
+  "../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/broadcast-operator.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.RemoteSocket = exports.BroadcastOperator = void 0;
@@ -15534,9 +15594,9 @@ var require_broadcast_operator = __commonJS({
   }
 });
-// ../../node_modules/socket.io/dist/socket.js
+// ../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/socket.js
 var require_socket2 = __commonJS({
-  "../../node_modules/socket.io/dist/socket.js"(exports) {
+  "../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/socket.js"(exports) {
     "use strict";
     var __importDefault = exports && exports.__importDefault || function(mod) {
       return mod && mod.__esModule ? mod : { "default": mod };
@@ -16441,9 +16501,9 @@ var require_socket2 = __commonJS({
   }
 });
-// ../../node_modules/socket.io/dist/namespace.js
+// ../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/namespace.js
 var require_namespace = __commonJS({
-  "../../node_modules/socket.io/dist/namespace.js"(exports) {
+  "../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/namespace.js"(exports) {
     "use strict";
     var __importDefault = exports && exports.__importDefault || function(mod) {
       return mod && mod.__esModule ? mod : { "default": mod };
@@ -16953,9 +17013,9 @@ var require_namespace = __commonJS({
   }
 });
-// ../../node_modules/socket.io-adapter/dist/contrib/yeast.js
+// ../../node_modules/.pnpm/socket.io-adapter@2.5.8_supports-color@10.2.2/node_modules/socket.io-adapter/dist/contrib/yeast.js
 var require_yeast = __commonJS({
-  "../../node_modules/socket.io-adapter/dist/contrib/yeast.js"(exports) {
+  "../../node_modules/.pnpm/socket.io-adapter@2.5.8_supports-color@10.2.2/node_modules/socket.io-adapter/dist/contrib/yeast.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.encode = encode;
@@ -16993,9 +17053,9 @@ var require_yeast = __commonJS({
   }
 });
-// ../../node_modules/socket.io-adapter/dist/in-memory-adapter.js
+// ../../node_modules/.pnpm/socket.io-adapter@2.5.8_supports-color@10.2.2/node_modules/socket.io-adapter/dist/in-memory-adapter.js
 var require_in_memory_adapter = __commonJS({
-  "../../node_modules/socket.io-adapter/dist/in-memory-adapter.js"(exports) {
+  "../../node_modules/.pnpm/socket.io-adapter@2.5.8_supports-color@10.2.2/node_modules/socket.io-adapter/dist/in-memory-adapter.js"(exports) {
     "use strict";
     var _a;
     Object.defineProperty(exports, "__esModule", { value: true });
@@ -17379,9 +17439,9 @@ var require_in_memory_adapter = __commonJS({
   }
 });
-// ../../node_modules/socket.io-adapter/dist/cluster-adapter.js
+// ../../node_modules/.pnpm/socket.io-adapter@2.5.8_supports-color@10.2.2/node_modules/socket.io-adapter/dist/cluster-adapter.js
 var require_cluster_adapter = __commonJS({
-  "../../node_modules/socket.io-adapter/dist/cluster-adapter.js"(exports) {
+  "../../node_modules/.pnpm/socket.io-adapter@2.5.8_supports-color@10.2.2/node_modules/socket.io-adapter/dist/cluster-adapter.js"(exports) {
     "use strict";
     var __rest = exports && exports.__rest || function(s, e) {
       var t = {};
@@ -17622,7 +17682,7 @@ var require_cluster_adapter = __commonJS({
             });
             this.addOffsetIfNecessary(packet, opts, offset);
           } catch (e) {
-            return debug("[%s] error while broadcasting message: %s", this.uid, e.message);
+            debug("[%s] error while broadcasting message: %s", this.uid, e.message);
           }
         }
         super.broadcast(packet, opts);
@@ -18038,9 +18098,9 @@ var require_cluster_adapter = __commonJS({
   }
 });
-// ../../node_modules/socket.io-adapter/dist/index.js
+// ../../node_modules/.pnpm/socket.io-adapter@2.5.8_supports-color@10.2.2/node_modules/socket.io-adapter/dist/index.js
 var require_dist = __commonJS({
-  "../../node_modules/socket.io-adapter/dist/index.js"(exports) {
+  "../../node_modules/.pnpm/socket.io-adapter@2.5.8_supports-color@10.2.2/node_modules/socket.io-adapter/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.MessageType = exports.ClusterAdapterWithHeartbeat = exports.ClusterAdapter = exports.SessionAwareAdapter = exports.Adapter = void 0;
@@ -18064,9 +18124,9 @@ var require_dist = __commonJS({
   }
 });
-// ../../node_modules/socket.io/dist/parent-namespace.js
+// ../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/parent-namespace.js
 var require_parent_namespace = __commonJS({
-  "../../node_modules/socket.io/dist/parent-namespace.js"(exports) {
+  "../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/parent-namespace.js"(exports) {
     "use strict";
     var __importDefault = exports && exports.__importDefault || function(mod) {
       return mod && mod.__esModule ? mod : { "default": mod };
@@ -18133,9 +18193,9 @@ var require_parent_namespace = __commonJS({
   }
 });
-// ../../node_modules/socket.io/dist/uws.js
+// ../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/uws.js
 var require_uws = __commonJS({
-  "../../node_modules/socket.io/dist/uws.js"(exports) {
+  "../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/uws.js"(exports) {
     "use strict";
     var __importDefault = exports && exports.__importDefault || function(mod) {
       return mod && mod.__esModule ? mod : { "default": mod };
@@ -18262,9 +18322,9 @@ var require_uws = __commonJS({
   }
 });
-// ../../node_modules/socket.io/package.json
+// ../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/package.json
 var require_package = __commonJS({
-  "../../node_modules/socket.io/package.json"(exports, module) {
+  "../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/package.json"(exports, module) {
     module.exports = {
       name: "socket.io",
       version: "4.8.3",
@@ -18356,9 +18416,9 @@ var require_package = __commonJS({
   }
 });
-// ../../node_modules/socket.io/dist/index.js
+// ../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/index.js
 var require_dist2 = __commonJS({
-  "../../node_modules/socket.io/dist/index.js"(exports, module) {
+  "../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/dist/index.js"(exports, module) {
     "use strict";
     var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m, k, k2) {
       if (k2 === void 0) k2 = k;
@@ -18397,7 +18457,7 @@ var require_dist2 = __commonJS({
     var zlib_1 = __require("zlib");
     var accepts = require_accepts();
     var stream_1 = __require("stream");
-    var path12 = __require("path");
+    var path13 = __require("path");
     var engine_io_1 = require_engine_io();
     var client_1 = require_client();
     var events_1 = __require("events");
@@ -18592,7 +18652,7 @@ var require_dist2 = __commonJS({
             res.writeHeader("cache-control", "public, max-age=0");
             res.writeHeader("content-type", "application/" + (isMap ? "json" : "javascript") + "; charset=utf-8");
             res.writeHeader("etag", expectedEtag);
-            const filepath = path12.join(__dirname, "../client-dist/", filename);
+            const filepath = path13.join(__dirname, "../client-dist/", filename);
             (0, uws_1.serveFile)(res, filepath);
           });
         }
@@ -18674,7 +18734,7 @@ var require_dist2 = __commonJS({
        * @private
        */
       static sendFile(filename, req, res) {
-        const readStream = (0, fs_1.createReadStream)(path12.join(__dirname, "../client-dist/", filename));
+        const readStream = (0, fs_1.createReadStream)(path13.join(__dirname, "../client-dist/", filename));
         const encoding = accepts(req).encodings(["br", "gzip", "deflate"]);
         const onError = (err) => {
           if (err) {
@@ -19108,10 +19168,10 @@ var require_dist2 = __commonJS({
   }
 });
-// ../../node_modules/socket.io/wrapper.mjs
+// ../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/wrapper.mjs
 var import_dist, Server, Namespace, Socket;
 var init_wrapper = __esm({
-  "../../node_modules/socket.io/wrapper.mjs"() {
+  "../../node_modules/.pnpm/socket.io@4.8.3/node_modules/socket.io/wrapper.mjs"() {
     "use strict";
     import_dist = __toESM(require_dist2(), 1);
     ({ Server, Namespace, Socket } = import_dist.default);
@@ -19482,6 +19542,64 @@ var init_daemon_json = __esm({
   }
 });
+// src/daemon-logging.ts
+import fs4 from "fs";
+import path3 from "path";
+function daemonLogPaths(stateDir) {
+  const logDir = path3.join(stateDir, "logs");
+  return { logDir, out: path3.join(logDir, "daemon.log"), err: path3.join(logDir, "daemon-error.log") };
+}
+function openDaemonLogFds(stateDir) {
+  const { logDir, out, err } = daemonLogPaths(stateDir);
+  fs4.mkdirSync(logDir, { recursive: true });
+  return { outFd: fs4.openSync(out, "a"), errFd: fs4.openSync(err, "a") };
+}
+function installStdioTee(stateDir) {
+  if (!process.stdout.isTTY || process.env.SUPBUDDY_DAEMON_STDIO_TO_FILES) return () => {
+  };
+  const { logDir, out } = daemonLogPaths(stateDir);
+  let fd;
+  try {
+    fs4.mkdirSync(logDir, { recursive: true });
+    fd = fs4.openSync(out, "a");
+  } catch {
+    return () => {
+    };
+  }
+  const origOut = process.stdout.write;
+  const origErr = process.stderr.write;
+  const sink = (chunk) => {
+    try {
+      if (fs4.fstatSync(fd).size > MAX_LOG_BYTES) fs4.ftruncateSync(fd, 0);
+      fs4.writeSync(fd, typeof chunk === "string" ? chunk : chunk.toString());
+    } catch (e) {
+      origErr.call(process.stderr, `[daemon-logging] sink write failed: ${e.message}
+`);
+    }
+  };
+  const patch = (orig, stream) => (chunk, ...rest) => {
+    sink(chunk);
+    return orig.call(stream, chunk, ...rest);
+  };
+  process.stdout.write = patch(origOut, process.stdout);
+  process.stderr.write = patch(origErr, process.stderr);
+  return () => {
+    process.stdout.write = origOut;
+    process.stderr.write = origErr;
+    try {
+      fs4.closeSync(fd);
+    } catch {
+    }
+  };
+}
+var MAX_LOG_BYTES;
+var init_daemon_logging = __esm({
+  "src/daemon-logging.ts"() {
+    "use strict";
+    MAX_LOG_BYTES = 5 * 1024 * 1024;
+  }
+});
 // src/mcp-control.ts
 function rpc(child, op, extra = {}, timeoutMs = 1e4) {
   const req_id = reqSeq++;
@@ -19524,7 +19642,7 @@ var init_mcp_control = __esm({
 });
 // src/network-monitor.ts
-import os from "os";
+import os2 from "os";
 function networkSignature(ifaces) {
   try {
     return Object.values(ifaces).flat().filter((i) => !!i && !i.internal && i.family === "IPv4").map((i) => i.address).sort().join(",");
@@ -19534,7 +19652,7 @@ function networkSignature(ifaces) {
 }
 function createNetworkMonitor(opts) {
   const now = opts.now ?? Date.now;
-  const readIfaces = opts.ifaces ?? os.networkInterfaces;
+  const readIfaces = opts.ifaces ?? os2.networkInterfaces;
   const intervalMs = opts.intervalMs ?? 5e3;
   const cooldownMs = opts.cooldownMs ?? 1e4;
   let lastSig = networkSignature(readIfaces());
@@ -19583,15 +19701,15 @@ var init_network_monitor = __esm({
 });
 // src/state-dir.ts
-import os2 from "os";
-import path3 from "path";
+import os3 from "os";
+import path4 from "path";
 function defaultStateDir() {
   const override = process.env.SUPBUDDY_STATE_DIR;
   if (override) return override;
-  const home = os2.homedir();
-  if (process.platform === "darwin") return path3.join(home, "Library", "Application Support", "Supbuddy");
-  if (process.platform === "win32") return path3.join(process.env.APPDATA ?? path3.join(home, "AppData", "Roaming"), "Supbuddy");
-  return path3.join(process.env.XDG_CONFIG_HOME ?? path3.join(home, ".config"), "Supbuddy");
+  const home = os3.homedir();
+  if (process.platform === "darwin") return path4.join(home, "Library", "Application Support", "Supbuddy");
+  if (process.platform === "win32") return path4.join(process.env.APPDATA ?? path4.join(home, "AppData", "Roaming"), "Supbuddy");
+  return path4.join(process.env.XDG_CONFIG_HOME ?? path4.join(home, ".config"), "Supbuddy");
 }
 var init_state_dir = __esm({
   "src/state-dir.ts"() {
@@ -19601,7 +19719,7 @@ var init_state_dir = __esm({
 // src/caddy-resolve.ts
 import { createRequire } from "module";
-import path4 from "path";
+import path5 from "path";
 function caddyPackageName(platform = process.platform, arch = process.arch) {
   if (platform === "darwin") {
     return arch === "arm64" ? "@supbuddy/caddy-darwin-arm64" : "@supbuddy/caddy-darwin-amd64";
@@ -19616,7 +19734,7 @@ function resolvePackagedCaddyDir(deps = {}) {
   if (!pkgName) return null;
   const resolve = deps.resolve ?? ((id) => requireFromHere.resolve(id));
   try {
-    return path4.dirname(resolve(`${pkgName}/package.json`));
+    return path5.dirname(resolve(`${pkgName}/package.json`));
   } catch {
     return null;
   }
@@ -19728,6 +19846,11 @@ var init_mcp_features = __esm({
       set_supabase_config_path: "pro_writes",
       enable_project: "pro_writes",
       disable_project: "pro_writes",
+      // Supbuddy Cloud (write-class metadata — authorization is by scope, not a paywall)
+      get_cloud_status: "free",
+      push_to_cloud: "pro_writes",
+      cloud_teardown: "pro_writes",
+      cloud_sign_in: "pro_writes",
       scan_project: "pro_writes",
       update_settings: "pro_writes",
       copy_env_var: "pro_env_values",
@@ -19875,6 +19998,20 @@ var init_vm_migration = __esm({
   }
 });
+// ../../packages/shared/types/cloud-graph-plan.ts
+var init_cloud_graph_plan = __esm({
+  "../../packages/shared/types/cloud-graph-plan.ts"() {
+    "use strict";
+  }
+});
+// ../../packages/shared/types/cloud-state.ts
+var init_cloud_state = __esm({
+  "../../packages/shared/types/cloud-state.ts"() {
+    "use strict";
+  }
+});
 // ../../packages/shared/types/index.ts
 var init_types = __esm({
   "../../packages/shared/types/index.ts"() {
@@ -19891,13 +20028,15 @@ var init_types = __esm({
     init_mcp_features();
     init_project_context();
     init_vm_migration();
+    init_cloud_graph_plan();
+    init_cloud_state();
   }
 });
-// ../../node_modules/zod/v3/helpers/util.js
+// ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js
 var util, objectUtil, ZodParsedType, getParsedType;
 var init_util = __esm({
-  "../../node_modules/zod/v3/helpers/util.js"() {
+  "../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js"() {
     "use strict";
     (function(util2) {
       util2.assertEqual = (_) => {
@@ -20032,10 +20171,10 @@ var init_util = __esm({
   }
 });
-// ../../node_modules/zod/v3/ZodError.js
+// ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/ZodError.js
 var ZodIssueCode, quotelessJson, ZodError;
 var init_ZodError = __esm({
-  "../../node_modules/zod/v3/ZodError.js"() {
+  "../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/ZodError.js"() {
     "use strict";
     init_util();
     ZodIssueCode = util.arrayToEnum([
@@ -20157,10 +20296,10 @@ var init_ZodError = __esm({
   }
 });
-// ../../node_modules/zod/v3/locales/en.js
+// ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/locales/en.js
 var errorMap, en_default;
 var init_en = __esm({
-  "../../node_modules/zod/v3/locales/en.js"() {
+  "../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/locales/en.js"() {
     "use strict";
     init_ZodError();
     init_util();
@@ -20268,7 +20407,7 @@ var init_en = __esm({
   }
 });
-// ../../node_modules/zod/v3/errors.js
+// ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/errors.js
 function setErrorMap(map) {
   overrideErrorMap = map;
 }
@@ -20277,14 +20416,14 @@ function getErrorMap() {
 }
 var overrideErrorMap;
 var init_errors = __esm({
-  "../../node_modules/zod/v3/errors.js"() {
+  "../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/errors.js"() {
     "use strict";
     init_en();
     overrideErrorMap = en_default;
   }
 });
-// ../../node_modules/zod/v3/helpers/parseUtil.js
+// ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
 function addIssueToContext(ctx, issueData) {
   const overrideMap = getErrorMap();
   const issue = makeIssue({
@@ -20306,13 +20445,13 @@ function addIssueToContext(ctx, issueData) {
 }
 var makeIssue, EMPTY_PATH, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync;
 var init_parseUtil = __esm({
-  "../../node_modules/zod/v3/helpers/parseUtil.js"() {
+  "../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js"() {
     "use strict";
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path12, errorMaps, issueData } = params;
-      const fullPath = [...path12, ...issueData.path || []];
+      const { data, path: path13, errorMaps, issueData } = params;
+      const fullPath = [...path13, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -20402,17 +20541,17 @@ var init_parseUtil = __esm({
   }
 });
-// ../../node_modules/zod/v3/helpers/typeAliases.js
+// ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/typeAliases.js
 var init_typeAliases = __esm({
-  "../../node_modules/zod/v3/helpers/typeAliases.js"() {
+  "../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/typeAliases.js"() {
     "use strict";
   }
 });
-// ../../node_modules/zod/v3/helpers/errorUtil.js
+// ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/errorUtil.js
 var errorUtil;
 var init_errorUtil = __esm({
-  "../../node_modules/zod/v3/helpers/errorUtil.js"() {
+  "../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/errorUtil.js"() {
     "use strict";
     (function(errorUtil2) {
       errorUtil2.errToObj = (message) => typeof message === "string" ? { message } : message || {};
@@ -20421,7 +20560,7 @@ var init_errorUtil = __esm({
   }
 });
-// ../../node_modules/zod/v3/types.js
+// ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js
 function processCreateParams(params) {
   if (!params)
     return {};
@@ -20615,7 +20754,7 @@ function custom(check, _params = {}, fatal) {
 }
 var ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, BRAND, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, instanceOfType, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, ostring, onumber, oboolean, coerce, NEVER;
 var init_types2 = __esm({
-  "../../node_modules/zod/v3/types.js"() {
+  "../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js"() {
     "use strict";
     init_ZodError();
     init_errors();
@@ -20623,11 +20762,11 @@ var init_types2 = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path12, key) {
+      constructor(parent, value, path13, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path12;
+        this._path = path13;
         this._key = key;
       }
       get path() {
@@ -23878,7 +24017,7 @@ var init_types2 = __esm({
   }
 });
-// ../../node_modules/zod/v3/external.js
+// ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
 __export(external_exports, {
   BRAND: () => BRAND,
@@ -23990,7 +24129,7 @@ __export(external_exports, {
   void: () => voidType
 });
 var init_external = __esm({
-  "../../node_modules/zod/v3/external.js"() {
+  "../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js"() {
     "use strict";
     init_errors();
     init_parseUtil();
@@ -24001,9 +24140,9 @@ var init_external = __esm({
   }
 });
-// ../../node_modules/zod/index.js
+// ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/index.js
 var init_zod = __esm({
-  "../../node_modules/zod/index.js"() {
+  "../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/index.js"() {
     "use strict";
     init_external();
     init_external();
@@ -24157,7 +24296,7 @@ var init_project2 = __esm({
 });
 // ../../packages/shared/schemas/mcp.ts
-var McpClientKindSchema, McpScopesSchema, McpClientRecordSchema, McpAuditResultSchema, McpAuditEntrySchema, McpServerStateSchema, McpErrorPayloadSchema, DOMAIN_REGEX, PORT, ID, SCOPE_KEY, ToolFilterMethod, ContextTargetBoolPatchSchema, CONTEXT_TARGET_KEY, ContextTargetScopePatchSchema, MCP_TOOL_SCHEMAS;
+var McpClientKindSchema, McpScopesSchema, McpClientRecordSchema, McpAuditResultSchema, McpAuditEntrySchema, McpServerStateSchema, McpErrorPayloadSchema, DOMAIN_REGEX, TLD_REGEX, PORT, ID, SCOPE_KEY, ToolFilterMethod, ContextTargetBoolPatchSchema, CONTEXT_TARGET_KEY, ContextTargetScopePatchSchema, MCP_TOOL_SCHEMAS;
 var init_mcp2 = __esm({
   "../../packages/shared/schemas/mcp.ts"() {
     "use strict";
@@ -24245,6 +24384,7 @@ var init_mcp2 = __esm({
       details: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
     }).strict();
     DOMAIN_REGEX = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i;
+    TLD_REGEX = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/i;
     PORT = external_exports.number().int().min(1).max(65535);
     ID = external_exports.string().min(1);
     SCOPE_KEY = external_exports.enum(["read", "log_tail", "mappings", "projects", "services", "config", "system", "apply"]);
@@ -24328,8 +24468,11 @@ var init_mcp2 = __esm({
       }).strict(),
       enable_mapping: external_exports.object({ id: ID }).strict(),
       disable_mapping: external_exports.object({ id: ID }).strict(),
-      register_project: external_exports.object({ root_path: external_exports.string().min(1), label: external_exports.string().optional(), auto_scan: external_exports.boolean().default(true), isolation: external_exports.enum(["host", "thin"]).optional() }).strict(),
-      update_project: external_exports.object({ id: ID, patch: external_exports.object({ name: external_exports.string().optional(), enabled: external_exports.boolean().optional(), domain: external_exports.string().regex(DOMAIN_REGEX).optional(), isolation: external_exports.enum(["host"]).optional() }).strict() }).strict(),
+      register_project: external_exports.object({ root_path: external_exports.string().min(1), label: external_exports.string().optional(), auto_scan: external_exports.boolean().default(true), isolation: external_exports.enum(["host", "thin"]).optional(), tld: external_exports.string().regex(TLD_REGEX).optional() }).strict(),
+      // `tld` also accepts '' — the clear signal for a per-project TLD override
+      // (see resolveProjectTldUpdate in packages/core/tld-normalization.ts), which
+      // TLD_REGEX alone rejects (it requires at least one DNS-label character).
+      update_project: external_exports.object({ id: ID, patch: external_exports.object({ name: external_exports.string().optional(), enabled: external_exports.boolean().optional(), domain: external_exports.string().regex(DOMAIN_REGEX).optional(), isolation: external_exports.enum(["host"]).optional(), tld: external_exports.string().regex(TLD_REGEX).or(external_exports.literal("")).optional() }).strict() }).strict(),
       // `supabase_path` is the project-relative directory that CONTAINS the
       // `supabase/` folder ("." = repo root, e.g. "apps/getnightowls"), matching
       // the operative semantics of findSupabaseConfig (which appends
@@ -24338,6 +24481,11 @@ var init_mcp2 = __esm({
       enable_project: external_exports.object({ id: ID }).strict(),
       disable_project: external_exports.object({ id: ID }).strict(),
       scan_project: external_exports.object({ root_path: external_exports.string().min(1) }).strict(),
+      // Supbuddy Cloud
+      get_cloud_status: external_exports.object({ project_id: ID.optional() }).strict(),
+      push_to_cloud: external_exports.object({ project_id: ID, github_repo: external_exports.string().min(1).optional(), force: external_exports.boolean().optional(), supabase_services: external_exports.enum(["minimal", "full"]).optional() }).strict(),
+      cloud_teardown: external_exports.object({ project_id: ID }).strict(),
+      cloud_sign_in: external_exports.object({ email: external_exports.string().email(), password: external_exports.string().min(1) }).strict(),
       update_settings: external_exports.object({ patch: external_exports.record(external_exports.string(), external_exports.unknown()) }).strict(),
       restore_mapping: external_exports.object({ id: ID }).strict(),
       restore_project: external_exports.object({ id: ID, restore_children: external_exports.boolean().default(true) }).strict(),
@@ -24799,24 +24947,24 @@ var init_shared = __esm({
 // src/daemon.ts
 import { spawn as spawn2 } from "child_process";
 import { fileURLToPath } from "url";
-import fs4 from "fs";
-import path5 from "path";
+import fs5 from "fs";
+import path6 from "path";
 function resolveWorkerEntry(deps = {}) {
   const binDir = deps.binDir ?? __dirname2;
   const repoRoot = deps.repoRoot ?? REPO_ROOT;
-  const env2 = deps.env ?? process.env;
-  const exists = deps.exists ?? fs4.existsSync;
-  const bundle = env2.SUPBUDDY_WORKER_BUNDLE;
+  const env3 = deps.env ?? process.env;
+  const exists = deps.exists ?? fs5.existsSync;
+  const bundle = env3.SUPBUDDY_WORKER_BUNDLE;
   if (bundle) {
-    return { cmd: process.execPath, args: [bundle], workerEntry: bundle, cwd: path5.dirname(bundle), mode: "host" };
+    return { cmd: process.execPath, args: [bundle], workerEntry: bundle, cwd: path6.dirname(bundle), mode: "host" };
   }
-  const pkgWorker = path5.join(binDir, "daemon", "worker.cjs");
+  const pkgWorker = path6.join(binDir, "daemon", "worker.cjs");
   if (exists(pkgWorker)) {
-    return { cmd: process.execPath, args: [pkgWorker], workerEntry: pkgWorker, cwd: path5.dirname(pkgWorker), mode: "npm" };
+    return { cmd: process.execPath, args: [pkgWorker], workerEntry: pkgWorker, cwd: path6.dirname(pkgWorker), mode: "npm" };
   }
-  const bootstrap = path5.join(repoRoot, "apps", "cli", "src", "worker-bootstrap.ts");
+  const bootstrap = path6.join(repoRoot, "apps", "cli", "src", "worker-bootstrap.ts");
   if (exists(bootstrap)) {
-    const workerEntry = path5.join(repoRoot, "packages", "core", "index.ts");
+    const workerEntry = path6.join(repoRoot, "packages", "core", "index.ts");
     return { cmd: process.execPath, args: ["--import", "tsx", bootstrap], workerEntry, cwd: repoRoot, mode: "dev" };
   }
   throw new WorkerUnavailableError();
@@ -24825,16 +24973,16 @@ async function startDaemon(opts = {}) {
   const { stateDir, workerPort, assumeYes, quiet } = opts;
   const effectiveStateDir = stateDir ?? defaultStateDir();
   const { cmd, args, workerEntry, cwd, mode } = resolveWorkerEntry();
-  const env2 = { ...process.env, NODE_ENV: process.env.NODE_ENV ?? "development" };
-  env2.SUPBUDDY_WORKER_ENTRY = workerEntry;
-  env2.SUPBUDDY_STATE_DIR = effectiveStateDir;
-  if (workerPort) env2.WORKER_PORT = String(workerPort);
-  if (mode === "npm" && !env2.SUPBUDDY_BIN_DIR) {
+  const env3 = { ...process.env, NODE_ENV: process.env.NODE_ENV ?? "development" };
+  env3.SUPBUDDY_WORKER_ENTRY = workerEntry;
+  env3.SUPBUDDY_STATE_DIR = effectiveStateDir;
+  if (workerPort) env3.WORKER_PORT = String(workerPort);
+  if (mode === "npm" && !env3.SUPBUDDY_BIN_DIR) {
     const caddyDir = resolvePackagedCaddyDir();
     if (!caddyDir) throw new CaddyUnavailableError();
-    env2.SUPBUDDY_BIN_DIR = caddyDir;
+    env3.SUPBUDDY_BIN_DIR = caddyDir;
   }
-  const child = spawn2(cmd, args, { stdio: ["ignore", "pipe", "pipe", "ipc"], env: env2, cwd });
+  const child = spawn2(cmd, args, { stdio: ["ignore", "pipe", "pipe", "ipc"], env: env3, cwd });
   const startedAt = (/* @__PURE__ */ new Date()).toISOString();
   const baseSocketPort = workerPort ?? DEFAULT_WORKER_PORT;
   let resolveMcpPort;
@@ -24962,6 +25110,7 @@ async function runDaemonForeground(opts = {}) {
     console.error(`[daemon] already running (pid ${running.pid}, mcp :${running.mcpPort})`);
     return 1;
   }
+  installStdioTee(effectiveStateDir);
   const handle = await startDaemon(opts);
   let stopping = false;
   const onSignal = async () => {
@@ -24985,12 +25134,22 @@ async function runDaemonDetached(opts = {}) {
   }
   const entry = process.argv[1];
   const isTsEntry = entry.endsWith(".ts");
-  const execPath = isTsEntry ? path5.join(REPO_ROOT, "node_modules", ".bin", "tsx") : process.execPath;
+  const execPath = isTsEntry ? path6.join(REPO_ROOT, "node_modules", ".bin", "tsx") : process.execPath;
   const args = [entry, "daemon"];
   if (opts.stateDir) args.push(`--state-dir=${opts.stateDir}`);
   if (opts.workerPort) args.push(`--worker-port=${opts.workerPort}`);
-  const child = spawn2(execPath, args, { detached: true, stdio: "ignore", env: process.env });
+  const { outFd, errFd } = openDaemonLogFds(dir);
+  const child = spawn2(execPath, args, {
+    detached: true,
+    stdio: ["ignore", outFd, errFd],
+    env: { ...process.env, SUPBUDDY_DAEMON_STDIO_TO_FILES: "1" }
+  });
   child.unref();
+  try {
+    fs5.closeSync(outFd);
+    fs5.closeSync(errFd);
+  } catch {
+  }
   for (let i = 0; i < 50; i++) {
     const info = await readDaemonInfo(dir);
     if (info && isPidAlive(info.pid)) {
@@ -25008,14 +25167,15 @@ var init_daemon = __esm({
     "use strict";
     init_host_cli2();
     init_daemon_json();
+    init_daemon_logging();
     init_mcp_control();
     init_relay_server();
     init_network_monitor();
     init_state_dir();
     init_caddy_resolve();
     init_shared();
-    __dirname2 = path5.dirname(fileURLToPath(import.meta.url));
-    REPO_ROOT = path5.resolve(__dirname2, "..", "..", "..");
+    __dirname2 = path6.dirname(fileURLToPath(import.meta.url));
+    REPO_ROOT = path6.resolve(__dirname2, "..", "..", "..");
     WorkerUnavailableError = class extends Error {
       constructor() {
         super(
@@ -25586,6 +25746,7 @@ var init_completions = __esm({
       project: ["ls", "add", "get", "scan", "set", "enable", "disable", "rm", "restore", "env", "env-read", "set-supabase-path", "refresh-context"],
       projects: [],
       supabase: ["start", "stop", "restart", "status", "config", "init", "backups", "restore", "cancel", "force-recreate", "restart-container", "analytics"],
+      cloud: ["login", "status", "push", "teardown"],
       logs: ["requests", "audit", "get"],
       compose: ["up", "down", "restart", "status", "logs"],
       isolation: ["switch", "pending-migrations"],
@@ -25626,6 +25787,9 @@ var init_completions = __esm({
       "project:restore": "projects",
       "project:env": "projects",
       "project:refresh-context": "projects",
+      "cloud:push": "projects",
+      "cloud:status": "projects",
+      "cloud:teardown": "projects",
       "supabase:start": "projects",
       "supabase:stop": "projects",
       "supabase:restart": "projects",
@@ -25661,6 +25825,7 @@ var init_completions = __esm({
       map: "domain \u2192 port mappings",
       project: "registered dev projects",
       supabase: "local Supabase lifecycle",
+      cloud: "Supbuddy Cloud (push/status/teardown)",
       compose: "docker compose services",
       scripts: "project dev scripts",
       logs: "request + audit logs",
@@ -25703,7 +25868,7 @@ var init_completions = __esm({
       "project:add": "register a project",
       "project:get": "show project details",
       "project:scan": "scan for services",
-      "project:set": "update name/domain",
+      "project:set": "update name/domain/tld",
       "project:enable": "enable a project",
       "project:disable": "disable a project",
       "project:rm": "delete a project",
@@ -25725,6 +25890,11 @@ var init_completions = __esm({
       "supabase:force-recreate": "force-recreate containers",
       "supabase:restart-container": "restart one container",
       "supabase:analytics": "analytics on/off",
+      // cloud
+      "cloud:login": "sign in to Supbuddy Cloud",
+      "cloud:push": "push a project to the cloud",
+      "cloud:status": "cloud sign-in / stack status",
+      "cloud:teardown": "tear down a cloud stack",
       // compose
       "compose:up": "start services",
       "compose:restart": "restart services",
@@ -25803,10 +25973,10 @@ __export(install_exports, {
 });
 import { spawnSync } from "child_process";
 import readline2 from "readline";
-import path6 from "path";
+import path7 from "path";
 function isEphemeralNpx() {
   const argv1 = process.argv[1] || "";
-  if (argv1.includes(`${path6.sep}_npx${path6.sep}`) || argv1.includes("/_npx/")) return true;
+  if (argv1.includes(`${path7.sep}_npx${path7.sep}`) || argv1.includes("/_npx/")) return true;
   if (process.env.npm_command === "exec") return true;
   return false;
 }
@@ -25879,9 +26049,9 @@ var init_install = __esm({
 var selftest_exports = {};
 import net from "net";
 import http from "http";
-import fs5 from "fs/promises";
-import os4 from "os";
-import path7 from "path";
+import fs6 from "fs/promises";
+import os5 from "os";
+import path8 from "path";
 function getFreePort() {
   return new Promise((resolve, reject) => {
     const srv = net.createServer();
@@ -25965,7 +26135,7 @@ async function main() {
   const workerPort = await getFreePort();
   let mcpPort = await getFreePort();
   if (mcpPort === workerPort) mcpPort = await getFreePort();
-  const stateDir = await fs5.mkdtemp(path7.join(os4.tmpdir(), "supbuddy-selftest-"));
+  const stateDir = await fs6.mkdtemp(path8.join(os5.tmpdir(), "supbuddy-selftest-"));
   const seed = {
     projects: [],
     mappings: [],
@@ -25975,7 +26145,7 @@ async function main() {
       mcp: { enabled: true, port: mcpPort, audit_cap: 5e3, trash_ttl_days: 7 }
     }
   };
-  await fs5.writeFile(path7.join(stateDir, "state.json"), JSON.stringify(seed, null, 2));
+  await fs6.writeFile(path8.join(stateDir, "state.json"), JSON.stringify(seed, null, 2));
   console.log(`isolated state dir: ${stateDir}`);
   console.log(`worker (Socket.IO) port: ${workerPort}   MCP port: ${mcpPort}
 `);
@@ -25996,7 +26166,7 @@ async function main() {
   } finally {
     console.log("\nstopping worker (graceful shutdown)...");
     await handle.stop();
-    await fs5.rm(stateDir, { recursive: true, force: true }).catch(() => {
+    await fs6.rm(stateDir, { recursive: true, force: true }).catch(() => {
     });
   }
   console.log("\n\u2500\u2500 results \u2500\u2500");
@@ -26024,10 +26194,10 @@ __export(update_exports, {
   runUpdate: () => runUpdate
 });
 import https from "https";
-import fs6 from "fs/promises";
+import fs7 from "fs/promises";
 import { createWriteStream } from "fs";
-import os5 from "os";
-import path8 from "path";
+import os6 from "os";
+import path9 from "path";
 import crypto from "crypto";
 import readline3 from "readline";
 import { execFile, execFileSync as execFileSync2, spawn as spawn3 } from "child_process";
@@ -26129,7 +26299,7 @@ function installedVersion() {
   }
 }
 async function sha256(file) {
-  const buf = await fs6.readFile(file);
+  const buf = await fs7.readFile(file);
   return crypto.createHash("sha256").update(buf).digest("hex");
 }
 function promptYesNo(question) {
@@ -26143,7 +26313,7 @@ function promptYesNo(question) {
 }
 async function canWrite(dir) {
   try {
-    await fs6.access(dir, (await import("fs")).constants.W_OK);
+    await fs7.access(dir, (await import("fs")).constants.W_OK);
     return true;
   } catch {
     return false;
@@ -26153,20 +26323,20 @@ function sq(p) {
   return `'${p.replace(/'/g, "'\\''")}'`;
 }
 async function swapApp(newApp) {
-  const dir = path8.dirname(INSTALLED_APP);
+  const dir = path9.dirname(INSTALLED_APP);
   if (await canWrite(dir)) {
     const bak = `${INSTALLED_APP}.bak-${process.pid}`;
-    if (await fs6.stat(INSTALLED_APP).then(() => true).catch(() => false)) {
-      await fs6.rename(INSTALLED_APP, bak);
+    if (await fs7.stat(INSTALLED_APP).then(() => true).catch(() => false)) {
+      await fs7.rename(INSTALLED_APP, bak);
     }
     try {
-      await fs6.rename(newApp, INSTALLED_APP);
+      await fs7.rename(newApp, INSTALLED_APP);
     } catch (e) {
-      await fs6.rename(bak, INSTALLED_APP).catch(() => {
+      await fs7.rename(bak, INSTALLED_APP).catch(() => {
       });
       throw e;
     }
-    await fs6.rm(bak, { recursive: true, force: true }).catch(() => {
+    await fs7.rm(bak, { recursive: true, force: true }).catch(() => {
     });
     return;
   }
@@ -26228,25 +26398,25 @@ supbuddy update: could not reach the release server \u2014 ${e.message}`);
       return 0;
     }
   }
-  const tmp = await fs6.mkdtemp(path8.join(os5.tmpdir(), "supbuddy-update-"));
-  const tar = path8.join(tmp, TAR_ASSET);
-  const shaFile = path8.join(tmp, SHA_ASSET);
-  const extractDir = path8.join(tmp, "extracted");
+  const tmp = await fs7.mkdtemp(path9.join(os6.tmpdir(), "supbuddy-update-"));
+  const tar = path9.join(tmp, TAR_ASSET);
+  const shaFile = path9.join(tmp, SHA_ASSET);
+  const extractDir = path9.join(tmp, "extracted");
   try {
     console.log("Downloading\u2026");
     await downloadAsset(pick.tarUrl, tar);
     await downloadAsset(pick.shaUrl, shaFile);
     console.log("Verifying checksum\u2026");
-    const expected = (await fs6.readFile(shaFile, "utf8")).trim().split(/\s+/)[0];
+    const expected = (await fs7.readFile(shaFile, "utf8")).trim().split(/\s+/)[0];
     const actual = await sha256(tar);
     if (!expected || expected.toLowerCase() !== actual.toLowerCase()) {
       console.error("supbuddy update: SHA-256 mismatch \u2014 refusing to install. The download may be corrupted.");
       return 1;
     }
-    await fs6.mkdir(extractDir, { recursive: true });
+    await fs7.mkdir(extractDir, { recursive: true });
     execFileSync2("tar", ["-xzf", tar, "-C", extractDir]);
-    const newApp = path8.join(extractDir, "Supbuddy.app");
-    if (!await fs6.stat(newApp).then(() => true).catch(() => false)) {
+    const newApp = path9.join(extractDir, "Supbuddy.app");
+    if (!await fs7.stat(newApp).then(() => true).catch(() => false)) {
       console.error("supbuddy update: the archive did not contain Supbuddy.app.");
       return 1;
     }
@@ -26260,7 +26430,7 @@ supbuddy update: could not reach the release server \u2014 ${e.message}`);
     console.error(`supbuddy update: ${e.message}`);
     return 1;
   } finally {
-    await fs6.rm(tmp, { recursive: true, force: true }).catch(() => {
+    await fs7.rm(tmp, { recursive: true, force: true }).catch(() => {
     });
   }
   if (opts.noRestart) {
@@ -26299,20 +26469,20 @@ function detectFramework(argv) {
       return "unknown";
   }
 }
-function hasFlag2(argv, ...names) {
+function hasFlag3(argv, ...names) {
   return argv.some((tok) => names.some((n) => tok === n || tok.startsWith(`${n}=`)));
 }
 function injectBindHost(argv, ip) {
   const framework = detectFramework(argv);
   switch (framework) {
     case "next": {
-      if (hasFlag2(argv, "-H", "--hostname")) return { argv, framework };
+      if (hasFlag3(argv, "-H", "--hostname")) return { argv, framework };
       return { argv: [...argv, "-H", ip], framework };
     }
     case "vite": {
       const out = [...argv];
-      if (!hasFlag2(out, "--host")) out.push("--host", ip);
-      if (!hasFlag2(out, "--strictPort")) out.push("--strictPort");
+      if (!hasFlag3(out, "--host")) out.push("--host", ip);
+      if (!hasFlag3(out, "--strictPort")) out.push("--strictPort");
       return { argv: out, framework };
     }
     case "bun":
@@ -26364,29 +26534,74 @@ var init_lo_alias_manager = __esm({
 // src/run.ts
 var run_exports = {};
 __export(run_exports, {
-  runDev: () => runDev
+  isBoundBannerLine: () => isBoundBannerLine,
+  pipeFiltered: () => pipeFiltered,
+  resolveDevPort: () => resolveDevPort,
+  runDev: () => runDev,
+  selectDevUrls: () => selectDevUrls
 });
 import { spawn as spawn4, execSync } from "child_process";
-import fs7 from "fs";
-import path9 from "path";
-function readMetaLoopbackIp(startDir) {
+import fs8 from "fs";
+import path10 from "path";
+function readMeta(startDir) {
   let dir = startDir;
   for (; ; ) {
-    const metaPath = path9.join(dir, ".supbuddy", "meta.json");
-    if (fs7.existsSync(metaPath)) {
+    const metaPath = path10.join(dir, ".supbuddy", "meta.json");
+    if (fs8.existsSync(metaPath)) {
       try {
-        return JSON.parse(fs7.readFileSync(metaPath, "utf-8")).loopbackIp;
+        return JSON.parse(fs8.readFileSync(metaPath, "utf-8"));
       } catch {
-        return void 0;
+        return {};
       }
     }
-    const parent = path9.dirname(dir);
-    if (parent === dir) return void 0;
+    const parent = path10.dirname(dir);
+    if (parent === dir) return {};
     dir = parent;
   }
 }
-function resolveLoopbackIp() {
-  return process.env.SUPBUDDY_LOOPBACK_IP || readMetaLoopbackIp(process.cwd()) || null;
+function resolveLoopbackIp(meta) {
+  return process.env.SUPBUDDY_LOOPBACK_IP || meta.loopbackIp || null;
+}
+function resolveDevPort(argv, framework) {
+  for (let i = 0; i < argv.length; i++) {
+    const tok = argv[i];
+    if (tok === "--port" || tok === "-p") {
+      const n = Number(argv[i + 1]);
+      if (Number.isInteger(n)) return n;
+    }
+    const m = /^(?:--port|-p)=(\d+)$/.exec(tok);
+    if (m) return Number(m[1]);
+  }
+  return framework === "next" ? 3e3 : framework === "vite" ? 5173 : void 0;
+}
+function selectDevUrls(urls, devPort) {
+  if (!urls || urls.length === 0) return [];
+  if (devPort != null) {
+    const match = urls.find((u) => u.port === devPort);
+    if (match) return [match];
+  }
+  return urls;
+}
+function isBoundBannerLine(line, ip) {
+  const bare = line.replace(ANSI_RE, "").trim();
+  const ipRe = ip.replace(/\./g, "\\.");
+  return new RegExp(`^\\W*(Local|Network):\\s*https?://${ipRe}(:\\d+)?/?$`, "i").test(bare);
+}
+function pipeFiltered(src, dst, drop) {
+  let buf = "";
+  src.on("data", (chunk) => {
+    buf += typeof chunk === "string" ? chunk : chunk.toString("utf8");
+    let nl;
+    while ((nl = buf.indexOf("\n")) !== -1) {
+      const line = buf.slice(0, nl);
+      buf = buf.slice(nl + 1);
+      if (!drop(line)) dst.write(line + "\n");
+    }
+  });
+  src.on("end", () => {
+    if (buf && !drop(buf)) dst.write(buf);
+    buf = "";
+  });
 }
 function aliasExists(ip) {
   try {
@@ -26416,7 +26631,8 @@ async function runDev(rawArgv, opts = {}) {
     console.error("Usage: supbuddy run [--print] -- <dev command>   (e.g. supbuddy run -- next dev)");
     return 1;
   }
-  const ip = resolveLoopbackIp();
+  const meta = readMeta(process.cwd());
+  const ip = resolveLoopbackIp(meta);
   if (!ip) {
     console.error(
       "[supbuddy run] no loopback IP for this project. Enable thin isolation in Supbuddy, or set SUPBUDDY_LOOPBACK_IP=127.0.0.N."
@@ -26431,21 +26647,37 @@ async function runDev(rawArgv, opts = {}) {
     return 0;
   }
   ensureAlias(ip);
-  console.error(`[supbuddy run] ${framework} \u2192 ${ip}:  ${argv.join(" ")}`);
+  const urls = selectDevUrls(meta.urls, resolveDevPort(argv, framework));
+  if (urls.length) {
+    for (const u of urls) console.error(`[supbuddy] \u2192 ${u.url}`);
+  } else {
+    console.error(`[supbuddy] ${framework} \u2192 ${ip}`);
+  }
   return await new Promise((resolve) => {
-    const child = spawn4(argv[0], argv.slice(1), { stdio: "inherit", env: process.env });
+    const filterBanner = framework === "next" || framework === "vite";
+    const child = filterBanner ? spawn4(argv[0], argv.slice(1), {
+      stdio: ["inherit", "pipe", "pipe"],
+      env: { ...process.env, FORCE_COLOR: process.env.FORCE_COLOR ?? "1" }
+    }) : spawn4(argv[0], argv.slice(1), { stdio: "inherit", env: process.env });
+    if (filterBanner) {
+      const drop = (line) => isBoundBannerLine(line, ip);
+      if (child.stdout) pipeFiltered(child.stdout, process.stdout, drop);
+      if (child.stderr) pipeFiltered(child.stderr, process.stderr, drop);
+    }
     child.on("error", (e) => {
       console.error(`[supbuddy run] failed to start "${argv[0]}": ${e.message}`);
       resolve(1);
     });
-    child.on("exit", (code) => resolve(code ?? 0));
+    child.on("close", (code) => resolve(code ?? 0));
   });
 }
+var ANSI_RE;
 var init_run = __esm({
   "src/run.ts"() {
     "use strict";
     init_dev_command();
     init_lo_alias_manager();
+    ANSI_RE = /\x1b\[[0-9;]*m/g;
   }
 });
@@ -26458,9 +26690,9 @@ __export(service_exports, {
   systemdUnit: () => systemdUnit,
   uninstallService: () => uninstallService
 });
-import fs8 from "fs/promises";
-import os6 from "os";
-import path10 from "path";
+import fs9 from "fs/promises";
+import os7 from "os";
+import path11 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { spawnSync as spawnSync2 } from "child_process";
 function launchdPlist(o) {
@@ -26483,9 +26715,9 @@ function launchdPlist(o) {
   <key>KeepAlive</key>
   <true/>
   <key>StandardOutPath</key>
-  <string>${path10.join(o.logDir, "daemon.log")}</string>
+  <string>${path11.join(o.logDir, "daemon.log")}</string>
   <key>StandardErrorPath</key>
-  <string>${path10.join(o.logDir, "daemon-error.log")}</string>
+  <string>${path11.join(o.logDir, "daemon-error.log")}</string>
 </dict>
 </plist>
 `;
@@ -26505,16 +26737,16 @@ WantedBy=default.target
 `;
 }
 function launchdPlistPath() {
-  return path10.join(os6.homedir(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
+  return path11.join(os7.homedir(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
 }
 function systemdUnitPath() {
-  const configHome = process.env.XDG_CONFIG_HOME ?? path10.join(os6.homedir(), ".config");
-  return path10.join(configHome, "systemd", "user", SYSTEMD_SERVICE);
+  const configHome = process.env.XDG_CONFIG_HOME ?? path11.join(os7.homedir(), ".config");
+  return path11.join(configHome, "systemd", "user", SYSTEMD_SERVICE);
 }
 function resolveBinPath() {
-  const __dirname3 = path10.dirname(fileURLToPath2(import.meta.url));
-  const repoRoot = path10.resolve(__dirname3, "..", "..", "..");
-  return path10.join(repoRoot, "apps", "cli", "dist", "bin.js");
+  const __dirname3 = path11.dirname(fileURLToPath2(import.meta.url));
+  const repoRoot = path11.resolve(__dirname3, "..", "..", "..");
+  return path11.join(repoRoot, "apps", "cli", "dist", "bin.js");
 }
 async function installService(opts = {}, run = defaultRunner) {
   const platform = process.platform;
@@ -26525,7 +26757,7 @@ async function installService(opts = {}, run = defaultRunner) {
   const nodePath = process.execPath;
   const binPath = resolveBinPath();
   try {
-    await fs8.access(binPath);
+    await fs9.access(binPath);
   } catch {
     console.error(
       `supbuddy service: compiled binary not found at ${binPath}
@@ -26534,13 +26766,13 @@ Run \`yarn workspace supbuddy build\` first.`
     return 1;
   }
   const stateDir = opts.stateDir ?? defaultStateDir();
-  const logDir = path10.join(stateDir, "logs");
-  await fs8.mkdir(logDir, { recursive: true });
+  const logDir = path11.join(stateDir, "logs");
+  await fs9.mkdir(logDir, { recursive: true });
   if (platform === "darwin") {
     const plistPath = launchdPlistPath();
-    await fs8.mkdir(path10.dirname(plistPath), { recursive: true });
+    await fs9.mkdir(path11.dirname(plistPath), { recursive: true });
     const content2 = launchdPlist({ label: LAUNCHD_LABEL, nodePath, binPath, stateDir, logDir });
-    await fs8.writeFile(plistPath, content2, { encoding: "utf8", mode: 420 });
+    await fs9.writeFile(plistPath, content2, { encoding: "utf8", mode: 420 });
     run("launchctl", ["unload", plistPath]);
     const load = run("launchctl", ["load", "-w", plistPath]);
     if (load.code !== 0) {
@@ -26551,9 +26783,9 @@ Run \`yarn workspace supbuddy build\` first.`
     return 0;
   }
   const unitPath = systemdUnitPath();
-  await fs8.mkdir(path10.dirname(unitPath), { recursive: true });
+  await fs9.mkdir(path11.dirname(unitPath), { recursive: true });
   const content = systemdUnit({ label: LAUNCHD_LABEL, nodePath, binPath, stateDir, logDir });
-  await fs8.writeFile(unitPath, content, { encoding: "utf8", mode: 420 });
+  await fs9.writeFile(unitPath, content, { encoding: "utf8", mode: 420 });
   const reload = run("systemctl", ["--user", "daemon-reload"]);
   if (reload.code !== 0) {
     console.error(`supbuddy service: systemctl daemon-reload failed (exit ${reload.code})`);
@@ -26577,7 +26809,7 @@ async function uninstallService(run = defaultRunner) {
     const plistPath = launchdPlistPath();
     let exists2 = false;
     try {
-      await fs8.access(plistPath);
+      await fs9.access(plistPath);
       exists2 = true;
     } catch {
     }
@@ -26586,14 +26818,14 @@ async function uninstallService(run = defaultRunner) {
       return 0;
     }
     run("launchctl", ["unload", "-w", plistPath]);
-    await fs8.rm(plistPath, { force: true });
+    await fs9.rm(plistPath, { force: true });
     console.log(`supbuddy service: uninstalled (removed ${plistPath})`);
     return 0;
   }
   const unitPath = systemdUnitPath();
   let exists = false;
   try {
-    await fs8.access(unitPath);
+    await fs9.access(unitPath);
     exists = true;
   } catch {
   }
@@ -26602,7 +26834,7 @@ async function uninstallService(run = defaultRunner) {
     return 0;
   }
   run("systemctl", ["--user", "disable", "--now", SYSTEMD_SERVICE]);
-  await fs8.rm(unitPath, { force: true });
+  await fs9.rm(unitPath, { force: true });
   run("systemctl", ["--user", "daemon-reload"]);
   console.log(`supbuddy service: uninstalled (removed ${unitPath})`);
   return 0;
@@ -26617,7 +26849,7 @@ async function serviceStatus(run = defaultRunner) {
     const plistPath = launchdPlistPath();
     let installed2 = false;
     try {
-      await fs8.access(plistPath);
+      await fs9.access(plistPath);
       installed2 = true;
     } catch {
     }
@@ -26633,7 +26865,7 @@ async function serviceStatus(run = defaultRunner) {
   const unitPath = systemdUnitPath();
   let installed = false;
   try {
-    await fs8.access(unitPath);
+    await fs9.access(unitPath);
     installed = true;
   } catch {
   }
@@ -26667,13 +26899,13 @@ init_state_dir();
 import { realpathSync } from "fs";
 import { spawnSync as spawnSync3 } from "child_process";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import path11 from "path";
+import path12 from "path";
 // src/commands.ts
 init_client();
 import { readFileSync } from "fs";
-// ../../node_modules/chalk/source/vendor/ansi-styles/index.js
+// ../../node_modules/.pnpm/chalk@5.6.2/node_modules/chalk/source/vendor/ansi-styles/index.js
 var ANSI_BACKGROUND_OFFSET = 10;
 var wrapAnsi16 = (offset = 0) => (code) => `\x1B[${code + offset}m`;
 var wrapAnsi256 = (offset = 0) => (code) => `\x1B[${38 + offset};5;${code}m`;
@@ -26859,35 +27091,35 @@ function assembleStyles() {
 var ansiStyles = assembleStyles();
 var ansi_styles_default = ansiStyles;
-// ../../node_modules/chalk/source/vendor/supports-color/index.js
-import process2 from "process";
-import os3 from "os";
-import tty from "tty";
-function hasFlag(flag, argv = globalThis.Deno ? globalThis.Deno.args : process2.argv) {
+// ../../node_modules/.pnpm/chalk@5.6.2/node_modules/chalk/source/vendor/supports-color/index.js
+import process3 from "process";
+import os4 from "os";
+import tty2 from "tty";
+function hasFlag2(flag, argv = globalThis.Deno ? globalThis.Deno.args : process3.argv) {
   const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
   const position = argv.indexOf(prefix + flag);
   const terminatorPosition = argv.indexOf("--");
   return position !== -1 && (terminatorPosition === -1 || position < terminatorPosition);
 }
-var { env } = process2;
-var flagForceColor;
-if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false") || hasFlag("color=never")) {
-  flagForceColor = 0;
-} else if (hasFlag("color") || hasFlag("colors") || hasFlag("color=true") || hasFlag("color=always")) {
-  flagForceColor = 1;
+var { env: env2 } = process3;
+var flagForceColor2;
+if (hasFlag2("no-color") || hasFlag2("no-colors") || hasFlag2("color=false") || hasFlag2("color=never")) {
+  flagForceColor2 = 0;
+} else if (hasFlag2("color") || hasFlag2("colors") || hasFlag2("color=true") || hasFlag2("color=always")) {
+  flagForceColor2 = 1;
 }
-function envForceColor() {
-  if ("FORCE_COLOR" in env) {
-    if (env.FORCE_COLOR === "true") {
+function envForceColor2() {
+  if ("FORCE_COLOR" in env2) {
+    if (env2.FORCE_COLOR === "true") {
       return 1;
     }
-    if (env.FORCE_COLOR === "false") {
+    if (env2.FORCE_COLOR === "false") {
       return 0;
     }
-    return env.FORCE_COLOR.length === 0 ? 1 : Math.min(Number.parseInt(env.FORCE_COLOR, 10), 3);
+    return env2.FORCE_COLOR.length === 0 ? 1 : Math.min(Number.parseInt(env2.FORCE_COLOR, 10), 3);
   }
 }
-function translateLevel(level) {
+function translateLevel2(level) {
   if (level === 0) {
     return false;
   }
@@ -26898,67 +27130,67 @@ function translateLevel(level) {
     has16m: level >= 3
   };
 }
-function _supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
-  const noFlagForceColor = envForceColor();
+function _supportsColor2(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
+  const noFlagForceColor = envForceColor2();
   if (noFlagForceColor !== void 0) {
-    flagForceColor = noFlagForceColor;
+    flagForceColor2 = noFlagForceColor;
   }
-  const forceColor = sniffFlags ? flagForceColor : noFlagForceColor;
+  const forceColor = sniffFlags ? flagForceColor2 : noFlagForceColor;
   if (forceColor === 0) {
     return 0;
   }
   if (sniffFlags) {
-    if (hasFlag("color=16m") || hasFlag("color=full") || hasFlag("color=truecolor")) {
+    if (hasFlag2("color=16m") || hasFlag2("color=full") || hasFlag2("color=truecolor")) {
       return 3;
     }
-    if (hasFlag("color=256")) {
+    if (hasFlag2("color=256")) {
       return 2;
     }
   }
-  if ("TF_BUILD" in env && "AGENT_NAME" in env) {
+  if ("TF_BUILD" in env2 && "AGENT_NAME" in env2) {
     return 1;
   }
   if (haveStream && !streamIsTTY && forceColor === void 0) {
     return 0;
   }
   const min = forceColor || 0;
-  if (env.TERM === "dumb") {
+  if (env2.TERM === "dumb") {
     return min;
   }
-  if (process2.platform === "win32") {
-    const osRelease = os3.release().split(".");
+  if (process3.platform === "win32") {
+    const osRelease = os4.release().split(".");
     if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
       return Number(osRelease[2]) >= 14931 ? 3 : 2;
     }
     return 1;
   }
-  if ("CI" in env) {
-    if (["GITHUB_ACTIONS", "GITEA_ACTIONS", "CIRCLECI"].some((key) => key in env)) {
+  if ("CI" in env2) {
+    if (["GITHUB_ACTIONS", "GITEA_ACTIONS", "CIRCLECI"].some((key) => key in env2)) {
       return 3;
     }
-    if (["TRAVIS", "APPVEYOR", "GITLAB_CI", "BUILDKITE", "DRONE"].some((sign) => sign in env) || env.CI_NAME === "codeship") {
+    if (["TRAVIS", "APPVEYOR", "GITLAB_CI", "BUILDKITE", "DRONE"].some((sign) => sign in env2) || env2.CI_NAME === "codeship") {
       return 1;
     }
     return min;
   }
-  if ("TEAMCITY_VERSION" in env) {
-    return /^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(env.TEAMCITY_VERSION) ? 1 : 0;
+  if ("TEAMCITY_VERSION" in env2) {
+    return /^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(env2.TEAMCITY_VERSION) ? 1 : 0;
   }
-  if (env.COLORTERM === "truecolor") {
+  if (env2.COLORTERM === "truecolor") {
     return 3;
   }
-  if (env.TERM === "xterm-kitty") {
+  if (env2.TERM === "xterm-kitty") {
     return 3;
   }
-  if (env.TERM === "xterm-ghostty") {
+  if (env2.TERM === "xterm-ghostty") {
     return 3;
   }
-  if (env.TERM === "wezterm") {
+  if (env2.TERM === "wezterm") {
     return 3;
   }
-  if ("TERM_PROGRAM" in env) {
-    const version = Number.parseInt((env.TERM_PROGRAM_VERSION || "").split(".")[0], 10);
-    switch (env.TERM_PROGRAM) {
+  if ("TERM_PROGRAM" in env2) {
+    const version = Number.parseInt((env2.TERM_PROGRAM_VERSION || "").split(".")[0], 10);
+    switch (env2.TERM_PROGRAM) {
       case "iTerm.app": {
         return version >= 3 ? 3 : 2;
       }
@@ -26967,31 +27199,31 @@ function _supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
       }
     }
   }
-  if (/-256(color)?$/i.test(env.TERM)) {
+  if (/-256(color)?$/i.test(env2.TERM)) {
     return 2;
   }
-  if (/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(env.TERM)) {
+  if (/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(env2.TERM)) {
     return 1;
   }
-  if ("COLORTERM" in env) {
+  if ("COLORTERM" in env2) {
     return 1;
   }
   return min;
 }
-function createSupportsColor(stream, options = {}) {
-  const level = _supportsColor(stream, {
+function createSupportsColor2(stream, options = {}) {
+  const level = _supportsColor2(stream, {
     streamIsTTY: stream && stream.isTTY,
     ...options
   });
-  return translateLevel(level);
+  return translateLevel2(level);
 }
-var supportsColor = {
-  stdout: createSupportsColor({ isTTY: tty.isatty(1) }),
-  stderr: createSupportsColor({ isTTY: tty.isatty(2) })
+var supportsColor2 = {
+  stdout: createSupportsColor2({ isTTY: tty2.isatty(1) }),
+  stderr: createSupportsColor2({ isTTY: tty2.isatty(2) })
 };
-var supports_color_default = supportsColor;
+var supports_color_default2 = supportsColor2;
-// ../../node_modules/chalk/source/utilities.js
+// ../../node_modules/.pnpm/chalk@5.6.2/node_modules/chalk/source/utilities.js
 function stringReplaceAll(string, substring, replacer) {
   let index = string.indexOf(substring);
   if (index === -1) {
@@ -27021,8 +27253,8 @@ function stringEncaseCRLFWithFirstIndex(string, prefix, postfix, index) {
   return returnValue;
 }
-// ../../node_modules/chalk/source/index.js
-var { stdout: stdoutColor, stderr: stderrColor } = supports_color_default;
+// ../../node_modules/.pnpm/chalk@5.6.2/node_modules/chalk/source/index.js
+var { stdout: stdoutColor, stderr: stderrColor } = supports_color_default2;
 var GENERATOR = /* @__PURE__ */ Symbol("GENERATOR");
 var STYLER = /* @__PURE__ */ Symbol("STYLER");
 var IS_EMPTY = /* @__PURE__ */ Symbol("IS_EMPTY");
@@ -27287,7 +27519,8 @@ function formatConciseList(data) {
     const titleKey = ["name", "domain", "label", "id"].find((k) => row[k] != null);
     const title = titleKey ? String(row[titleKey]) : "(item)";
     const sub = titleKey === "name" && row.domain ? String(row.domain) : "";
-    return `${statusGlyph(row)} ${source_default.bold(title)}` + (sub ? `  ${source_default.dim(sub)}` : "");
+    const cloud = row.cloud && typeof row.cloud === "object" ? ` ${source_default.cyan("\u2601")}` : "";
+    return `${statusGlyph(row)} ${source_default.bold(title)}${cloud}` + (sub ? `  ${source_default.dim(sub)}` : "");
   }).join("\n");
 }
 function formatSupabaseStatus(status, project) {
@@ -27378,8 +27611,9 @@ function formatRichList(data) {
     const titleKey = ["name", "domain", "label", "id"].find((k) => o[k] != null);
     const title = titleKey ? String(o[titleKey]) : "(item)";
     const sub = titleKey === "name" && o.domain ? String(o.domain) : "";
-    const head = `${statusGlyph(o)} ${source_default.bold(title)}` + (sub ? `  ${source_default.dim(sub)}` : "");
-    const facts = richFacts(o, /* @__PURE__ */ new Set([titleKey ?? "", sub ? "domain" : ""]));
+    const cloud = o.cloud && typeof o.cloud === "object" ? ` ${source_default.cyan("\u2601")}` : "";
+    const head = `${statusGlyph(o)} ${source_default.bold(title)}${cloud}` + (sub ? `  ${source_default.dim(sub)}` : "");
+    const facts = richFacts(o, /* @__PURE__ */ new Set([titleKey ?? "", sub ? "domain" : "", "cloud"]));
     return facts.length ? `${head}
    ${source_default.dim(facts.join(" \xB7 "))}` : head;
   }).join("\n");
@@ -27499,6 +27733,8 @@ function defaultTimeoutFor(mod, sub) {
     // Use ACTUAL subcommand names: the arg is `restore` (not `restore-backup`),
     // and `backups`/`restore` can be slow. `config` covers `config apply|validate`.
     supabase: ["start", "stop", "restart", "init", "restore", "backups", "force-recreate", "restart-container", "config"],
+    cloud: ["push", "teardown"],
+    // push dumps+uploads+provisions; teardown destroys a Fly graph — both slow
     compose: ["up", "down", "restart"],
     migrate: ["start", "finish"],
     isolation: ["switch"],
@@ -27625,11 +27861,12 @@ async function runCommand(argv, flags, clientFactory) {
       if (sub === "add") {
         const rootPath = rest[0] ?? (typeof flags.path === "string" ? flags.path : void 0);
         if (!rootPath) {
-          console.error("usage: supbuddy project add <path> [--label=<l>]");
+          console.error("usage: supbuddy project add <path> [--label=<l>] [--tld=<tld>]");
           return 1;
         }
         const args = { root_path: rootPath };
         if (typeof flags.label === "string") args.label = flags.label;
+        if (typeof flags.tld === "string" && flags.tld) args.tld = flags.tld;
         print(await client.call("register_project", args), flags);
         return 0;
       }
@@ -27651,13 +27888,14 @@ async function runCommand(argv, flags, clientFactory) {
       }
       if (sub === "set") {
         if (!rest[0]) {
-          console.error("usage: supbuddy project set <id|name> [--name|--domain|--enable|--disable]");
+          console.error("usage: supbuddy project set <id|name> [--name=<n>|--domain=<d>|--tld=<t>|--enable|--disable]  (--tld= clears the per-project TLD override)");
           return 1;
         }
         const id = await refToId(client, rest[0]);
         const patch = {};
         if (typeof flags.name === "string") patch.name = flags.name;
         if (typeof flags.domain === "string") patch.domain = flags.domain;
+        if (typeof flags.tld === "string") patch.tld = flags.tld;
         if (flags.enable) patch.enabled = true;
         if (flags.disable) patch.enabled = false;
         print(await client.call("update_project", { id, patch }), flags);
@@ -27707,12 +27945,12 @@ async function runCommand(argv, flags, clientFactory) {
         return 0;
       }
       if (sub === "env-read") {
-        const path12 = rest[0];
-        if (!path12) {
+        const path13 = rest[0];
+        if (!path13) {
           console.error("usage: supbuddy project env-read <path> [--key K]");
           return 1;
         }
-        const args = { path: path12 };
+        const args = { path: path13 };
         if (typeof flags.key === "string") args.key = flags.key;
         print(await client.call("read_env_file", args), flags);
         return 0;
@@ -27745,6 +27983,42 @@ async function runCommand(argv, flags, clientFactory) {
       console.error("usage: supbuddy project ls|add|get|scan|set|enable|disable|rm|restore|env|env-read|set-supabase-path|refresh-context");
       return 1;
     }
+    case "cloud": {
+      if (sub === "login") {
+        const [email, argPassword] = rest;
+        const password = argPassword ?? process.env.SUPBUDDY_CLOUD_PASSWORD;
+        if (!email || !password) {
+          console.error("usage: supbuddy cloud login <email> [<password>]  (or set SUPBUDDY_CLOUD_PASSWORD to keep it out of argv/history)");
+          return 1;
+        }
+        print(await client.call("cloud_sign_in", { email, password }), flags);
+        return 0;
+      }
+      if (sub === "status") {
+        if (rest[0]) {
+          const projects = await client.call("list_projects", {});
+          print(await client.call("get_cloud_status", { project_id: resolveProjectId(projects, rest[0]) }), flags);
+        } else {
+          print(await client.call("get_cloud_status", {}), flags);
+        }
+        return 0;
+      }
+      if (sub === "push" && rest[0]) {
+        const projects = await client.call("list_projects", {});
+        const args = { project_id: resolveProjectId(projects, rest[0]) };
+        if (typeof flags.repo === "string") args.github_repo = flags.repo;
+        if (flags.force) args.force = true;
+        print(await client.call("push_to_cloud", args), flags);
+        return 0;
+      }
+      if (sub === "teardown" && rest[0]) {
+        const projects = await client.call("list_projects", {});
+        print(await client.call("cloud_teardown", { project_id: resolveProjectId(projects, rest[0]) }), flags);
+        return 0;
+      }
+      console.error("usage: supbuddy cloud <login <email> [<pw>] | status [project] | push <project> [--repo=owner/repo] [--force] | teardown <project>>");
+      return 1;
+    }
     case "supabase": {
       if ((sub === "start" || sub === "stop") && rest[0]) {
         const projects = await client.call("list_projects", {});
@@ -27960,8 +28234,8 @@ async function runCommand(argv, flags, clientFactory) {
         return 0;
       }
       if (sub === "write") {
-        const [path12, ...pairs] = rest;
-        if (!path12 || pairs.length === 0) {
+        const [path13, ...pairs] = rest;
+        if (!path13 || pairs.length === 0) {
           console.error("usage: supbuddy env write <path> <key=val>...");
           return 1;
         }
@@ -27976,7 +28250,7 @@ async function runCommand(argv, flags, clientFactory) {
           const v = pair.slice(eqIdx + 1);
           patch[k] = v === "" ? null : v;
         }
-        print(await client.call("write_env_file", { path: path12, patch }), flags);
+        print(await client.call("write_env_file", { path: path13, patch }), flags);
         return 0;
       }
       console.error("usage: supbuddy env copy|write ...");
@@ -28374,10 +28648,10 @@ Usage:
   supbuddy project ls                                List registered projects.
   supbuddy projects                                  Alias for 'project ls' (rich list).
-  supbuddy project add <path> [--label=<l>]          Register a project.
+  supbuddy project add <path> [--label=<l>] [--tld=<t>]  Register a project (--tld for a per-project TLD).
   supbuddy project get <id>                          Get project details.
   supbuddy project scan <path>                       Scan project for services.
-  supbuddy project set <id> [--name|--domain|--enable|--disable]  Update a project.
+  supbuddy project set <id> [--name|--domain|--tld|--enable|--disable]  Update a project (--tld= clears the override).
   supbuddy project enable|disable <id>               Enable/disable a project.
   supbuddy project rm <id>                           Delete a project.
   supbuddy project restore <id>                      Restore from trash.
@@ -28391,6 +28665,11 @@ Usage:
   supbuddy supabase config apply <proj> <file>       Apply supabase config from a TOML file.
   supbuddy supabase config validate <proj>           Validate the project's supabase config.
+  supbuddy cloud login <email> [<password>]          Sign in to Supbuddy Cloud (or set SUPBUDDY_CLOUD_PASSWORD).
+  supbuddy cloud push <proj> [--repo=owner/repo]     Push a project to Supbuddy Cloud (with its Supabase data).
+  supbuddy cloud status [<proj>]                      Cloud sign-in state, or a project's cloud stack status.
+  supbuddy cloud teardown <proj>                     Tear down a project's cloud stack + unlink it.
   supbuddy compose up|down|restart <proj> [svcs...]  Compose lifecycle.
   supbuddy compose status <project>                  Compose service status.
   supbuddy compose logs <proj> <service> [-f|--follow]  Tail service logs.
@@ -28473,20 +28752,20 @@ Global flags:
 See docs/MULTIMODE_DELIVERY_ASSESSMENT.md for the full roadmap.`;
 async function runShell(opts, stateDir, module) {
-  const os7 = await import("os");
-  const fs9 = await import("fs");
+  const os8 = await import("os");
+  const fs10 = await import("fs");
   const shellEntry = fileURLToPath3(new URL("../../tui/src/shell/bin.tsx", import.meta.url));
-  const REPO_ROOT2 = path11.resolve(fileURLToPath3(import.meta.url), "..", "..", "..", "..");
-  const tsxBin = path11.join(REPO_ROOT2, "node_modules", ".bin", "tsx");
-  const resultFile = path11.join(os7.tmpdir(), `supbuddy-shell-${process.pid}-${Date.now()}.json`);
-  const env2 = { ...process.env, SUPBUDDY_SHELL_RESULT: resultFile };
-  if (stateDir) env2.SUPBUDDY_STATE_DIR = stateDir;
-  if (module) env2.SUPBUDDY_SHELL_MODULE = module;
-  spawnSync3(tsxBin, [shellEntry], { stdio: "inherit", env: env2 });
+  const REPO_ROOT2 = path12.resolve(fileURLToPath3(import.meta.url), "..", "..", "..", "..");
+  const tsxBin = path12.join(REPO_ROOT2, "node_modules", ".bin", "tsx");
+  const resultFile = path12.join(os8.tmpdir(), `supbuddy-shell-${process.pid}-${Date.now()}.json`);
+  const env3 = { ...process.env, SUPBUDDY_SHELL_RESULT: resultFile };
+  if (stateDir) env3.SUPBUDDY_STATE_DIR = stateDir;
+  if (module) env3.SUPBUDDY_SHELL_MODULE = module;
+  spawnSync3(tsxBin, [shellEntry], { stdio: "inherit", env: env3 });
   let chosen = null;
   try {
-    chosen = JSON.parse(fs9.readFileSync(resultFile, "utf8"));
-    fs9.unlinkSync(resultFile);
+    chosen = JSON.parse(fs10.readFileSync(resultFile, "utf8"));
+    fs10.unlinkSync(resultFile);
   } catch {
     chosen = null;
   }
@@ -28575,18 +28854,18 @@ async function dispatch(argv, opts) {
     case "tui":
     case "dash": {
       const tuiEntry = fileURLToPath3(new URL("../../tui/src/bin.tsx", import.meta.url));
-      const REPO_ROOT2 = path11.resolve(fileURLToPath3(import.meta.url), "..", "..", "..", "..");
-      const tsxBin = path11.join(REPO_ROOT2, "node_modules", ".bin", "tsx");
-      const env2 = { ...process.env };
-      if (typeof flags["state-dir"] === "string") env2.SUPBUDDY_STATE_DIR = flags["state-dir"];
-      if (typeof flags["url"] === "string") env2.SUPBUDDY_DAEMON_URL = flags["url"];
-      if (typeof flags["token"] === "string") env2.SUPBUDDY_BOOT_TOKEN = flags["token"];
+      const REPO_ROOT2 = path12.resolve(fileURLToPath3(import.meta.url), "..", "..", "..", "..");
+      const tsxBin = path12.join(REPO_ROOT2, "node_modules", ".bin", "tsx");
+      const env3 = { ...process.env };
+      if (typeof flags["state-dir"] === "string") env3.SUPBUDDY_STATE_DIR = flags["state-dir"];
+      if (typeof flags["url"] === "string") env3.SUPBUDDY_DAEMON_URL = flags["url"];
+      if (typeof flags["token"] === "string") env3.SUPBUDDY_BOOT_TOKEN = flags["token"];
       if (opts?.spawner) {
-        const result2 = await opts.spawner(tsxBin, [tuiEntry], { stdio: "inherit", env: env2 });
+        const result2 = await opts.spawner(tsxBin, [tuiEntry], { stdio: "inherit", env: env3 });
         const ec = result2?.exitCode;
         return typeof ec === "number" ? ec : ec instanceof Promise ? await ec : 0;
       }
-      const result = spawnSync3(tsxBin, [tuiEntry], { stdio: "inherit", env: env2 });
+      const result = spawnSync3(tsxBin, [tuiEntry], { stdio: "inherit", env: env3 });
       return result.status ?? 0;
     }
     case "shell":